Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2017
Exécuté par YIWOUPIO (administrateur) sur YIWOUPIO-PC (24-11-2017 05:12:02)
Exécuté depuis C:\Users\YIWOUPIO\Desktop\FRST
Profils chargés: YIWOUPIO & DefaultAppPool (Profils disponibles: YIWOUPIO & DefaultAppPool)
Platform: Windows Seven Black Edition Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(FreeDownloadManager.org) C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\winwfpmonitor.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(HP) C:\Windows\System32\HPSIsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\nis.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(ArcSoft, Inc.) C:\Windows\SysWOW64\ArcVCapRender\uArcCapture.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\nis.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(FreeDownloadManager.org) C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe
(BitTorrent Inc.) C:\Users\YIWOUPIO\AppData\Roaming\uTorrent\uTorrent.exe
(ultracopier.first-world.info) C:\Program Files (x86)\Ultracopier\ultracopier.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
() C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(BitTorrent Inc.) C:\Users\YIWOUPIO\AppData\Roaming\uTorrent\updates\3.5.0_44090\utorrentie.exe
(BitTorrent Inc.) C:\Users\YIWOUPIO\AppData\Roaming\uTorrent\updates\3.5.0_44090\utorrentie.exe
(BitTorrent Inc.) C:\Users\YIWOUPIO\AppData\Roaming\uTorrent\updates\3.5.0_44090\utorrentie.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPConnectionManager.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(D-Link Corportation) C:\Program Files (x86)\D-Link Connection Manager\WirelessModem.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Bible Verse Desktop\verse.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

"Path" (C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64 -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SystemRoot%\System32\WindowsPowerShell\v1.0;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64) <==== Repaired successfully
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-20] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-15] (Synaptics Incorporated)
HKLM\...\Run: [MfeEpePcMonitor] => "C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe"
HKLM\...\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [127616 2012-09-14] (Qualcomm Atheros Commnucations)
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1688008 2012-09-06] (Western Digital)
HKLM-x32\...\Run: [HP HD Webcam Driver_Monitor] => C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe [303480 2012-07-26] ()
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-03-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [1193728 2017-02-15] (PDF Complete Inc)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [185144 2013-10-31] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [12313720 2015-08-05] (Hewlett-Packard)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\System32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\Run: [Free Download Manager] => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe [10182344 2017-07-26] (FreeDownloadManager.org)
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\Run: [uTorrent] => C:\Users\YIWOUPIO\AppData\Roaming\uTorrent\uTorrent.exe [1982144 2017-10-03] (BitTorrent Inc.)
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\Run: [ultracopier] => C:\Program Files (x86)\Ultracopier\ultracopier.exe [1191936 2016-01-01] (ultracopier.first-world.info)
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\Run: [HW_OPENEYE_OUC_airtel mobile broadband] => "C:\Program Files (x86)\airtel mobile broadband\UpdateDog\ouc.exe"
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: K - K:\SISetup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {1f1ee9cb-af9b-11e7-bf36-b4b52f7b0a96} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {657fdc8c-22c1-11e7-9d0d-20689d8f8573} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {716335a1-b16c-11e7-8715-20689d8f8573} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {82925a3a-c6b8-11e7-823c-b4b52f7b0a96} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {a61b218f-2207-11e7-9a2d-20689d8f8573} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {a82548cc-1073-11e7-92fa-b4b52f7b0a96} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {be8bfe60-fffe-11e6-b81a-20689d8f8573} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {befbe43f-21b7-11e7-b27c-20689d8f8573} - F:\Autorun.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {c5680de5-d06e-11e7-9d36-b4b52f7b0a96} - F:\.\StartModem.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {c734328e-c9e1-11e7-a5de-b4b52f7b0a96} - F:\AutoRun.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {d756749d-1afa-11e7-941b-20689d8f8573} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {e243236f-c62c-11e7-b97a-b4b52f7b0a96} - F:\AutoRun.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {e2432485-c62c-11e7-b97a-b4b52f7b0a96} - F:\AutoRun.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {e573d061-afe6-11e7-8217-b4b52f7b0a96} - F:\Setup.exe
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\...\MountPoints2: {f1e47999-c7a2-11e7-9e25-b4b52f7b0a96} - F:\AutoRun.exe
HKU\S-1-5-18\...\Run: [Free Download Manager] => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe [10182344 2017-07-26] (FreeDownloadManager.org)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2017-03-17] (Microsoft Corporation)
HKU\S-1-5-18\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-18\...\Policies\Explorer: [NoSMBalloonTip] 1
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Lsa: [Notification Packages] DPPassFilter scecli
GroupPolicy: Restriction <==== ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{C718C3A5-5F68-4EA5-9449-E6D337EC7CD7}: [DhcpNameServer] 192.168.137.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.DamasGate.com.com/vb
HKU\S-1-5-21-2094111202-2747720640-139950628-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKU\S-1-5-21-2094111202-2747720640-139950628-1000 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NS&chn=1000&geo=FR&ver=22.11.0.41&locale=fr_FR&guid=4132561F-D768-4111-AC65-ECA5408E2D16&doi=2016-09-01&gct=kwd&qsrc=2869
BHO: Free Download Manager -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\iebho.dll [2017-07-26] ()
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\coIEPlg.dll [2017-11-10] (Symantec Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-09-14] (Qualcomm Atheros Commnucations)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO: Pas de nom -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Pas de fichier
BHO-x32: Free Download Manager -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\x86\iebho.dll [2017-07-26] ()
BHO-x32: File Sanitizer for HP ProtectTools -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2015-08-05] (Hewlett-Packard)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine32\22.11.2.7\coIEPlg.dll [2017-11-10] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\20.2.0.19\IPS\IPSBHO.DLL => Pas de fichier
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
BHO-x32: Pas de nom -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> Pas de fichier
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\coIEPlg.dll [2017-11-10] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine32\22.11.2.7\coIEPlg.dll [2017-11-10] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-2094111202-2747720640-139950628-1000 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\coIEPlg.dll [2017-11-10] (Symantec Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab

FireFox:
========
FF DefaultProfile: 6wkh6vt3.default
FF ProfilePath: C:\Users\YIWOUPIO\AppData\Roaming\Mozilla\Firefox\Profiles\6wkh6vt3.default [2017-11-24]
FF Homepage: Mozilla\Firefox\Profiles\6wkh6vt3.default -> hxxps://www.google.fr/
FF Extension: (Free Download Manager extension) - C:\Users\YIWOUPIO\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\fdm_ffext@freedownloadmanager.org [2017-08-09] [Lagacy]
FF Extension: (Cliqz) - C:\Users\YIWOUPIO\AppData\Roaming\Mozilla\Firefox\Profiles\6wkh6vt3.default\Extensions\cliqz@cliqz.com.xpi [2017-10-30] [Lagacy]
FF Extension: (Norton Identity Safe) - C:\Users\YIWOUPIO\AppData\Roaming\Mozilla\Firefox\Profiles\6wkh6vt3.default\Extensions\idsafe@norton.com.xpi [2017-08-29]
FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\YIWOUPIO\AppData\Roaming\Mozilla\Firefox\Profiles\6wkh6vt3.default\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-29] [Lagacy]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: (Extension DigitalPersona) - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2017-03-02] [Lagacy] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\IPSFFPlgn => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.2.0.19\coFFPlgn => non trouvé(e)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-23] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2017-03-23]

Chrome:
=======
CHR Profile: C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default [2017-11-24]
CHR Extension: (Slides) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Docs) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-21]
CHR Extension: (YouTube) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-21]
CHR Extension: (Norton Security Toolbar) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2017-10-06]
CHR Extension: (Sheets) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Google Docs hors connexion) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-09-22]
CHR Extension: (Norton Identity Safe) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2017-09-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-21]
CHR Extension: (Gmail) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-09-21]
CHR Extension: (Chrome Media Router) - C:\Users\YIWOUPIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-25]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\Exts\Chrome.crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\Exts\Chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.2.0.19\Exts\Chrome.crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-03-17] (Apple Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [216192 2012-09-14] (Qualcomm Atheros Commnucations) [Fichier non signé]
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [493904 2012-04-28] (DigitalPersona, Inc.)
R2 HP DS Service; C:\Program Files (x86)\HP\HPBDSService\HPBDSService.exe [13824 2011-10-17] (Hewlett-Packard Company) [Fichier non signé]
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [523680 2012-08-28] (Hewlett-Packard Company)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1327104 2012-03-21] () [Fichier non signé]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [50688 2014-11-17] (Hewlett-Packard) [Fichier non signé]
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\22.11.2.7\NIS.exe [326144 2017-11-11] (Symantec Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1719552 2017-02-15] (PDF Complete Inc)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [66048 2014-11-17] (Hewlett-Packard) [Fichier non signé]
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [323072 2012-09-20] (IDT, Inc.) [Fichier non signé]
R2 uArcCapture; C:\Windows\SysWow64\ArcVCapRender\uArcCapture.exe [498352 2012-04-05] (ArcSoft, Inc.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1157056 2012-09-19] (Western Digital )
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-06] (Western Digital)
R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1177536 2012-09-19] (Western Digital )
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-09-14] (Atheros) [Fichier non signé]
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)
S3 wifimansvc; C:\Program Files (x86)\Mobile Partner\eap\wifimansvc.exe [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2012-05-17] (AnvSoft Inc.)
R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [42816 2012-02-03] (ArcSoft, Inc.)
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.9.1.12\Definitions\BASHDefs\20171120.003\BHDrvx64.sys [1872024 2017-10-11] (Symantec Corporation)
S3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2012-09-14] (Qualcomm Atheros)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\160B020.007\ccSetx64.sys [187544 2017-11-10] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [508056 2017-10-19] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [158360 2017-10-19] (Symantec Corporation)
S3 EZUSB; C:\Windows\System32\DRIVERS\ezusb64.sys [33280 2007-02-06] (Castles Technology Co.,Ltd)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\22.9.1.12\Definitions\IPSDefs\20171123.001\IDSvia64.sys [1056920 2017-10-15] (Symantec Corporation)
R0 MfeEpeOpal; C:\Windows\System32\Drivers\MfeEpeOpal.sys [93640 2012-03-21] (McAfee, Inc.)
R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [158792 2012-03-21] (McAfee, Inc.)
S3 mtkmbim; C:\Windows\System32\DRIVERS\mtkmbim7_x64.sys [209920 2016-07-29] (MBB)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-09-25] (Marvell Semiconductor, Inc.)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-03-09] (Portrait Displays, Inc.)
S3 slabbus; C:\Windows\System32\DRIVERS\slabbus.sys [79872 2007-03-01] (MCCI Corporation)
S3 slabser; C:\Windows\System32\DRIVERS\slabser.sys [103936 2007-03-01] (MCCI Corporation)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1064184 2012-09-23] (Sunplus)
R1 SRTSP; C:\Windows\System32\Drivers\NISx64\160B020.007\SRTSP64.SYS [812696 2017-11-10] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\160B020.007\SRTSPX64.SYS [49304 2017-11-10] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NISx64\160B020.007\SYMEFASI64.SYS [1938584 2017-11-10] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102600 2017-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\160B020.007\Ironx64.SYS [309984 2017-11-10] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\160B020.007\SYMNETS.SYS [566936 2017-11-10] (Symantec Corporation)
S3 wdf_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [82944 2016-07-29] (MBB)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.9.1.12\Definitions\SDSDefs\20170701.002\NAVENG.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\22.9.1.12\Definitions\SDSDefs\20170701.002\NAVEX15.SYS [X]
S3 WISOVD; \??\C:\Program Files (x86)\WinISO Computing\WinISO\bin\driver\WISOVD_win7_x64.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-11-24 05:09 - 2017-11-24 05:09 - 002393600 _____ (Farbar) C:\Users\YIWOUPIO\Downloads\FRST64-(1).exe
2017-11-24 05:02 - 2017-11-24 05:04 - 002097152 _____ C:\Users\YIWOUPIO\Downloads\Non confirmé 443093.crdownload
2017-11-23 22:35 - 2017-11-23 22:35 - 000000000 ____D C:\Windows\System32\Tasks\Remediation
2017-11-23 16:59 - 2017-11-23 16:59 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_usb2ser_01005.Wdf
2017-11-23 16:57 - 2017-11-24 05:06 - 000000000 ____D C:\Program Files (x86)\D-Link Connection Manager
2017-11-23 16:57 - 2017-11-23 16:57 - 000001121 _____ C:\Users\Public\Desktop\D-Link Connection Manager.lnk
2017-11-23 16:57 - 2017-11-23 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link Connection Manager
2017-11-23 16:57 - 2016-07-29 15:16 - 001919968 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoinstaller01005.dll
2017-11-23 16:57 - 2016-07-29 15:16 - 000209920 _____ (MBB) C:\Windows\system32\Drivers\mtkmbim7_x64.sys
2017-11-23 16:57 - 2016-07-29 15:16 - 000082944 _____ (MBB) C:\Windows\system32\Drivers\usb2ser.sys
2017-11-23 16:57 - 2016-07-29 14:50 - 000103424 _____ (Thesycon GmbH) C:\Windows\SysWOW64\MyDIT_GenClassCoInst.dll
2017-11-23 03:41 - 2017-11-24 05:12 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\FRST
2017-11-23 03:21 - 2017-11-24 05:12 - 000000000 ____D C:\FRST
2017-11-22 00:21 - 2017-11-22 21:06 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\ENREGISTRER
2017-11-21 20:55 - 2017-11-21 20:55 - 000000000 _____ C:\Users\YIWOUPIO\Downloads\Non confirmé 827743.crdownload
2017-11-21 08:02 - 2017-11-21 08:02 - 000003234 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2017-11-20 21:54 - 2017-11-24 05:01 - 3786784768 _____ C:\Users\YIWOUPIO\Downloads\W10Education64.iso.fdmdownload
2017-11-20 09:33 - 2017-11-20 09:33 - 000000000 ____D C:\Users\YIWOUPIO\Downloads\testdisk-7.1-WIP.win
2017-11-20 09:33 - 2017-11-20 09:33 - 000000000 ____D C:\Users\YIWOUPIO\Downloads\testdisk-7.0.win64
2017-11-20 09:07 - 2017-11-20 09:07 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\Поиcк в Интeрнете
2017-11-20 07:23 - 2017-11-20 07:23 - 000967800 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\YIWOUPIO\Desktop\rufus-2.18.exe
2017-11-20 06:56 - 2017-11-20 06:56 - 000000000 ___HD C:\$Windows.~WS
2017-11-20 06:39 - 2017-11-20 06:40 - 018812902 _____ C:\Users\YIWOUPIO\Downloads\testdisk-7.1-WIP.win.zip
2017-11-20 06:38 - 2017-11-20 06:39 - 010105868 _____ C:\Users\YIWOUPIO\Downloads\testdisk-7.0.win64.zip
2017-11-19 22:05 - 2017-11-19 22:05 - 000000000 ____D C:\Users\YIWOUPIO\AppData\OICE_15_974FA576_32C1D314_332E
2017-11-19 21:32 - 2017-11-19 21:32 - 000001812 _____ C:\Users\Public\Desktop\HDClone.lnk
2017-11-19 21:32 - 2017-11-19 21:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDClone 5.0.7 Free Edition
2017-11-19 21:32 - 2017-11-19 21:32 - 000000000 ____D C:\Program Files (x86)\HDClone 5.0 Free Edition
2017-11-19 16:21 - 2017-11-19 16:21 - 000013652 _____ C:\Users\YIWOUPIO\Documents\Données statistiques de la rentrée scolaire 2017-2018.xlsx
2017-11-18 18:20 - 2017-11-18 18:21 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\Lecteur F - copie
2017-11-18 17:32 - 2017-11-18 17:43 - 018617536 _____ (Microsoft Corporation) C:\Users\YIWOUPIO\Downloads\MediaCreationTool.exe
2017-11-18 15:43 - 2017-11-18 15:43 - 000000000 ____D C:\$WINDOWS.~BT
2017-11-18 15:07 - 2017-11-18 15:11 - 018357776 _____ (Microsoft Corporation) C:\Users\YIWOUPIO\Downloads\Windows10cu1703-CreationTool.exe
2017-11-18 12:38 - 2017-11-18 12:38 - 000914132 _____ C:\Users\YIWOUPIO\Documents\ARRETE frais inscription et participation des élèves.pdf
2017-11-17 15:32 - 2017-11-17 15:32 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\FreemakeAudioConverter
2017-11-17 15:29 - 2017-11-17 15:37 - 000000000 ____D C:\ProgramData\Freemake
2017-11-17 15:29 - 2017-11-17 15:30 - 000000000 ____D C:\Users\YIWOUPIO\Documents\Freemake
2017-11-17 11:58 - 2017-11-17 11:59 - 004981479 _____ (Free 3GP to MP3 Converter) C:\Users\YIWOUPIO\Downloads\3gptomp3_setup.exe
2017-11-17 11:19 - 2017-11-17 11:19 - 000003584 _____ C:\Users\YIWOUPIO\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-11-16 11:48 - 2017-11-16 11:53 - 000000000 ____D C:\Users\YIWOUPIO\Downloads\activateur
2017-11-16 10:08 - 2017-11-16 10:12 - 047688554 ____R C:\Users\YIWOUPIO\Downloads\Dictionnaire.Des.Mathematiques.Algebre.Analyse.Geometrie.pdf
2017-11-16 10:06 - 2017-11-16 10:09 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\7 Dictionnaires Utiles
2017-11-14 17:10 - 2017-11-14 17:10 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\VOITURES
2017-11-14 16:29 - 2017-11-14 16:30 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\ESSAI PHOTOFILTRE
2017-11-13 23:53 - 2017-11-13 23:53 - 000001032 _____ C:\Users\YIWOUPIO\Desktop\PhotoFiltre 7.lnk
2017-11-13 23:53 - 2017-11-13 23:53 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\PhotoFiltre 7
2017-11-13 23:53 - 2017-11-13 23:53 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2017-11-13 23:53 - 2017-11-13 23:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2017-11-13 23:53 - 2017-11-13 23:53 - 000000000 ____D C:\Program Files (x86)\PhotoFiltre 7
2017-11-13 23:50 - 2017-11-13 23:50 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\V-Methods
2017-11-13 23:49 - 2017-11-13 23:49 - 002428715 _____ C:\Users\YIWOUPIO\Downloads\jpeg-imager_2-5-2-459_en_58518 (1).zip
2017-11-13 22:52 - 2017-11-15 12:13 - 000000000 ____D C:\MontagePhoto
2017-11-13 18:16 - 2017-11-13 18:16 - 025736912 _____ (logiciel-montage-photo ) C:\Users\YIWOUPIO\Downloads\montage-photo-602.exe
2017-11-13 18:04 - 2017-11-13 23:52 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\LOGICIELS PHOTOS
2017-11-13 17:46 - 2017-11-13 17:48 - 002428715 _____ C:\Users\YIWOUPIO\Downloads\jpeg-imager_2-5-2-459_en_58518.zip
2017-11-13 17:40 - 2017-11-13 17:43 - 005200936 _____ C:\Users\YIWOUPIO\Downloads\Photofiltre-7.1.2.exe
2017-11-12 12:47 - 2017-11-12 12:47 - 000003074 _____ C:\Windows\System32\Tasks\{534F1819-B4BF-48E9-A084-77BF0436ECED}
2017-11-11 16:11 - 2017-11-23 19:00 - 000000438 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2017-11-11 15:16 - 2017-11-11 15:16 - 000043872 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy3.sys
2017-11-11 15:16 - 2017-11-11 15:16 - 000036736 _____ (Connectify) C:\Windows\system32\Drivers\cfywlan1.sys
2017-11-11 13:17 - 2014-06-28 00:21 - 000532176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2017-11-11 13:16 - 2015-02-03 03:34 - 005554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-11-11 13:16 - 2015-02-03 03:34 - 000693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-11-11 13:16 - 2015-02-03 03:34 - 000155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-11-11 13:16 - 2015-02-03 03:34 - 000095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-11-11 13:16 - 2015-02-03 03:34 - 000094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-11-11 13:16 - 2015-02-03 03:33 - 000616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-11-11 13:16 - 2015-02-03 03:31 - 014632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 004121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 001574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 001461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-11 13:16 - 2015-02-03 03:31 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-11 13:16 - 2015-02-03 03:31 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 012625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-11 13:16 - 2015-02-03 03:30 - 001480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 001202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 001069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-11-11 13:16 - 2015-02-03 03:30 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2017-11-11 13:16 - 2015-02-03 03:30 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2017-11-11 13:16 - 2015-02-03 03:29 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-11-11 13:16 - 2015-02-03 03:29 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2017-11-11 13:16 - 2015-02-03 03:28 - 000686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-11-11 13:16 - 2015-02-03 03:28 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-11-11 13:16 - 2015-02-03 03:28 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-11-11 13:16 - 2015-02-03 03:28 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2017-11-11 13:16 - 2015-02-03 03:19 - 000663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2017-11-11 13:16 - 2015-02-03 03:16 - 003973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-11-11 13:16 - 2015-02-03 03:16 - 003917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-11-11 13:16 - 2015-02-03 03:12 - 011411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 003209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 001329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 001174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 001005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-11 13:16 - 2015-02-03 03:12 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-11 13:16 - 2015-02-03 03:12 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-11 13:16 - 2015-02-03 03:11 - 012625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-11 13:16 - 2015-02-03 03:11 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-11-11 13:16 - 2015-02-03 03:11 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2017-11-11 13:16 - 2015-02-03 03:11 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-11-11 13:16 - 2015-02-03 03:11 - 000023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2017-11-11 13:16 - 2015-02-03 03:09 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-11-11 13:16 - 2015-02-03 03:09 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-11-11 13:16 - 2015-02-03 03:09 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2017-11-11 13:16 - 2015-02-03 03:08 - 000686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-11-11 13:16 - 2015-02-03 03:08 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-11-11 13:16 - 2015-02-03 02:32 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-11-11 13:16 - 2014-10-31 22:24 - 000619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2017-11-11 13:16 - 2014-06-28 00:21 - 000457400 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2017-11-11 13:14 - 2017-11-11 13:30 - 045918843 _____ C:\Users\YIWOUPIO\Downloads\Windows6.1-KB3033929-x64.msu
2017-11-11 12:30 - 2017-11-11 12:34 - 009229200 _____ (Connectify) C:\Users\YIWOUPIO\Downloads\connectify_2016-0-7_en_310498.exe
2017-11-11 11:10 - 2017-11-11 13:11 - 199272600 _____ C:\Users\YIWOUPIO\Downloads\20171110-004-v5i64.exe
2017-11-11 11:09 - 2017-11-11 13:10 - 197713280 _____ C:\Users\YIWOUPIO\Downloads\20171110-004-v5i32.exe
2017-11-10 19:12 - 2017-11-10 19:13 - 003389952 _____ () C:\Users\YIWOUPIO\Downloads\Windows ISO Downloader (1).exe
2017-11-10 19:12 - 2017-11-10 19:13 - 003389952 _____ () C:\Users\YIWOUPIO\Desktop\Windows ISO Downloader (1).exe
2017-11-10 18:27 - 2017-11-10 18:27 - 000000000 ____D C:\ProgramData\airtel mobile broadband
2017-11-10 18:01 - 2017-11-10 18:01 - 000572686 ____T C:\Users\YIWOUPIO\Documents\décharge.pdf
2017-11-09 15:28 - 2017-11-09 15:28 - 000003216 _____ C:\Windows\System32\Tasks\{2F4A0C8B-7C24-4866-B5E6-2FB7301030D9}
2017-11-09 15:08 - 2017-11-20 08:44 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\HUAWEI UNLOCKER
2017-11-09 15:05 - 2017-11-09 15:12 - 015925248 _____ (HUAWEI Corporation) C:\Users\YIWOUPIO\Downloads\E153Update_11.609.18.00.00.B427.exe
2017-11-09 11:20 - 2017-11-09 11:24 - 007822383 _____ C:\Users\YIWOUPIO\Downloads\E153Update_11.609.13.03.00.B427.zip
2017-11-09 11:04 - 2017-11-09 11:07 - 006813346 _____ C:\Users\YIWOUPIO\Downloads\E153U-2Update_11.609.18.00.00.B427_Universal.rar
2017-11-09 10:51 - 2017-11-09 10:51 - 000065536 _____ (Huawei Technologies Co., Ltd.) C:\Users\YIWOUPIO\cardlock_unlock-e58xx.exe
2017-11-09 10:48 - 2011-05-15 23:51 - 000065536 _____ (Huawei Technologies Co., Ltd.) C:\Users\YIWOUPIO\Downloads\CardLock_UnLock-e58xx.exe
2017-11-09 10:42 - 2017-11-09 10:45 - 000023689 _____ C:\Users\YIWOUPIO\Downloads\CardLock_UnLock-e58xx.rar
2017-11-09 02:39 - 2017-11-09 02:39 - 000899584 _____ C:\Users\YIWOUPIO\Downloads\HUAWEI MODEM Code Writer (1).exe
2017-11-09 02:28 - 2017-11-09 02:28 - 000027184 _____ C:\Users\YIWOUPIO\Downloads\HuaweiModemUnlockerv5.8.1b.zip
2017-11-09 01:57 - 2017-11-09 01:57 - 011660908 _____ C:\Users\YIWOUPIO\Downloads\Mobile_Partner_11.302.09.01.539_Voice_USSD.zip
2017-11-09 01:52 - 2017-11-09 01:52 - 005726906 _____ C:\Users\YIWOUPIO\Downloads\dc-unlocker2client_1.00.1390.zip
2017-11-09 01:35 - 2017-11-09 01:35 - 000899584 _____ C:\Users\YIWOUPIO\Downloads\HUAWEI MODEM Code Writer.exe
2017-11-09 01:34 - 2017-11-09 01:35 - 000553472 _____ (darmiles) C:\Users\YIWOUPIO\Downloads\Universal_MasterCode (1).exe
2017-11-09 01:33 - 2017-11-09 01:33 - 000553472 _____ (darmiles) C:\Users\YIWOUPIO\Downloads\Universal_MasterCode.exe
2017-11-09 00:57 - 2009-10-09 08:20 - 000467968 ____N (HiTi Digital, Inc.) C:\Windows\system32\setuphcc.exe
2017-11-09 00:50 - 2017-11-09 00:50 - 003267744 _____ (LionSea Software co., ltd ) C:\Users\YIWOUPIO\Downloads\setup.exe
2017-11-08 22:33 - 2017-11-08 22:33 - 081489680 _____ (WhatsApp) C:\Users\YIWOUPIO\Downloads\WhatsAppSetup.exe
2017-11-08 20:59 - 2017-11-08 21:41 - 000010019 _____ C:\Users\YIWOUPIO\Documents\coorrection.xlsx
2017-11-08 19:43 - 2017-11-08 23:25 - 000073467 _____ C:\Users\YIWOUPIO\Desktop\RECAPITULATIF POUR CORRIGER.xlsx
2017-11-07 21:51 - 2017-11-07 21:59 - 000000000 ____D C:\Program Files\HiTi
2017-11-07 21:50 - 2017-11-07 21:50 - 000002984 _____ C:\Windows\System32\Tasks\{7433B837-B7C1-4749-8DAB-4067D3EFC1C3}
2017-11-07 21:49 - 2017-11-07 21:49 - 000002984 _____ C:\Windows\System32\Tasks\{30F09A5A-7DF5-4EC0-996A-4C6870821AB9}
2017-11-07 21:47 - 2017-11-07 21:47 - 000002984 _____ C:\Windows\System32\Tasks\{978D6827-1DEF-4267-8CB1-DF0D28E82590}
2017-11-07 21:45 - 2017-11-07 21:45 - 000002984 _____ C:\Windows\System32\Tasks\{C29D3E03-67A5-4591-8636-40B943B97CF3}
2017-11-07 21:43 - 2017-11-07 21:43 - 000002984 _____ C:\Windows\System32\Tasks\{932A41A4-8389-4111-8AB2-D412690DD339}
2017-11-07 21:43 - 2017-11-07 21:43 - 000002984 _____ C:\Windows\System32\Tasks\{2FFF78F6-9556-4DA9-8BD6-0FF5A87FD6EE}
2017-11-07 21:37 - 2017-11-07 21:37 - 000002984 _____ C:\Windows\System32\Tasks\{31E54023-0087-458E-921B-8B97BBAD78D4}
2017-11-07 21:37 - 2017-11-07 21:37 - 000002984 _____ C:\Windows\System32\Tasks\{1B876BF8-0E4F-4EAE-A504-2FC1B0D238BF}
2017-11-07 12:24 - 2017-11-07 12:28 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\PHOTOS
2017-11-06 15:01 - 2017-11-06 15:04 - 000036352 _____ C:\Users\YIWOUPIO\Downloads\carnet.xls
2017-11-04 09:23 - 2017-11-04 09:54 - 069329823 _____ C:\Users\YIWOUPIO\Downloads\microsoft-toolkit-2.6.5.zip
2017-11-03 21:16 - 2017-11-20 07:24 - 000000432 __RSH C:\ProgramData\ntuser.pol
2017-11-03 21:15 - 2017-11-03 21:15 - 000966776 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\YIWOUPIO\Downloads\rufus-2.17.exe
2017-11-03 21:15 - 2017-11-03 21:15 - 000966776 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\YIWOUPIO\Desktop\rufus-2.17.exe
2017-11-03 21:14 - 2017-11-03 21:15 - 000966776 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\YIWOUPIO\Downloads\rufus-2.17p.exe
2017-11-03 20:00 - 2017-11-20 16:40 - 000732393 _____ C:\Users\YIWOUPIO\Desktop\GESTION DE SCOLARITE LAST.xlsm
2017-11-01 21:52 - 2017-11-01 21:53 - 001542041 _____ C:\Users\YIWOUPIO\Downloads\Calendrier scolaire et universitaire 2017 et 2018.pdf
2017-11-01 21:07 - 2017-11-01 21:08 - 000690733 _____ C:\Users\YIWOUPIO\Downloads\GESTION DE SCOLARITE.xlsm
2017-10-31 15:44 - 2017-11-07 08:16 - 000024591 _____ C:\Users\YIWOUPIO\Desktop\ETAT RECAPITULATIF DES ELEVES AFFECTES PAR L'ETAT.xlsx
2017-10-31 06:50 - 2017-10-31 06:50 - 019426952 _____ (Ellora Assets Corporation ) C:\Users\YIWOUPIO\Downloads\freemake-free-audio-converter_1-1-8-12_fr_417408.exe
2017-10-30 14:39 - 2017-10-30 14:41 - 006299336 _____ (Piriform Ltd) C:\Users\YIWOUPIO\Downloads\spsetup131.exe
2017-10-30 13:58 - 2017-10-30 14:38 - 063318016 _____ C:\Users\YIWOUPIO\Downloads\Win8.1_French_x64.iso.fdmdownload
2017-10-30 13:55 - 2017-11-24 05:07 - 2428917760 _____ C:\Users\YIWOUPIO\Downloads\ProPlusRetail.img.fdmdownload
2017-10-30 08:19 - 2017-10-30 08:19 - 000020556 _____ C:\Users\YIWOUPIO\Documents\IMPAYES.xlsx
2017-10-28 10:09 - 2017-10-28 18:43 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\ESSAI
2017-10-28 01:23 - 2017-11-20 10:33 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\ACTIVATEURS
2017-10-28 00:58 - 2017-11-23 17:20 - 000003184 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2094111202-2747720640-139950628-1000
2017-10-28 00:58 - 2017-11-23 17:20 - 000002212 _____ C:\Users\YIWOUPIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2017-10-28 00:58 - 2017-11-23 17:20 - 000000000 ___RD C:\Users\YIWOUPIO\OneDrive
2017-10-28 00:58 - 2017-10-28 00:57 - 024840904 _____ (Microsoft Corporation) C:\Users\YIWOUPIO\Downloads\OneDriveSetup.exe
2017-10-28 00:57 - 2017-10-28 00:57 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-10-25 10:43 - 2017-10-25 10:43 - 000018949 _____ C:\Users\YIWOUPIO\Downloads\archive (1).zip
2017-10-25 10:16 - 2017-11-09 15:23 - 000000000 ____D C:\Windows\System32\Tasks\MEGA
2017-10-25 10:16 - 2017-10-25 10:16 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\Mega Limited
2017-10-25 09:29 - 2017-10-25 10:13 - 014975712 _____ (MEGA Limited) C:\Users\YIWOUPIO\Downloads\MEGAsyncSetup.exe

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-11-24 05:13 - 2017-04-21 15:40 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\uTorrent
2017-11-24 05:12 - 2017-04-05 22:02 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\Free Download Manager
2017-11-24 04:35 - 2017-02-28 16:58 - 000003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-24 04:35 - 2017-02-28 16:58 - 000001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-11-23 20:34 - 2017-02-28 15:41 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\Winamp
2017-11-23 20:21 - 2009-11-30 09:45 - 000815164 _____ C:\Windows\system32\perfh00C.dat
2017-11-23 20:21 - 2009-11-30 09:45 - 000175048 _____ C:\Windows\system32\perfc00C.dat
2017-11-23 20:21 - 2009-07-14 05:13 - 001841394 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-23 20:21 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\inf
2017-11-23 18:57 - 2009-07-14 04:45 - 000017088 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-23 18:57 - 2009-07-14 04:45 - 000017088 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-23 17:59 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\ModemLogs
2017-11-23 16:55 - 2017-10-03 20:55 - 000000000 ____D C:\Users\YIWOUPIO\AppData\LocalLow\uTorrent
2017-11-23 16:54 - 2017-02-28 16:33 - 000000000 ____D C:\ProgramData\PDFC
2017-11-23 16:53 - 2009-07-14 05:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-23 03:09 - 2017-09-21 23:27 - 000003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-23 03:09 - 2017-09-21 23:27 - 000003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-23 03:08 - 2017-09-21 23:27 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\Google
2017-11-22 00:37 - 2017-03-12 06:37 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\Audacity
2017-11-21 20:39 - 2017-03-31 21:48 - 000000000 ____D C:\Program Files\Common Files\AV
2017-11-21 20:18 - 2017-10-12 10:28 - 000000000 ____D C:\Windows\System32\Tasks\Norton Internet Security
2017-11-21 08:02 - 2017-03-31 21:00 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2017-11-21 08:02 - 2017-03-24 09:36 - 000002365 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk
2017-11-21 08:02 - 2017-03-24 09:35 - 000000000 ____D C:\Windows\system32\Drivers\NISx64
2017-11-21 06:12 - 2017-03-16 10:19 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-11-21 01:07 - 2017-03-24 09:36 - 000102600 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2017-11-21 01:07 - 2017-03-24 09:36 - 000008471 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2017-11-20 16:59 - 2017-09-26 08:09 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\ADTFS 2017-2018
2017-11-20 11:45 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\system32\NDF
2017-11-20 08:51 - 2017-03-23 21:40 - 000000000 ____D C:\ProgramData\DatacardService
2017-11-20 06:59 - 2017-02-28 20:40 - 000000000 ____D C:\Windows\Panther
2017-11-20 04:34 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\system32\oobe
2017-11-19 14:01 - 2017-02-28 16:04 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-11-18 19:35 - 2017-02-28 18:00 - 000000000 ____D C:\ProgramData\TEMP
2017-11-18 18:37 - 2017-02-28 15:13 - 000000000 ____D C:\Users\YIWOUPIO
2017-11-18 08:19 - 2017-03-12 06:29 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\RADIO BOROMO
2017-11-17 15:47 - 2017-03-17 17:17 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\Anvsoft
2017-11-17 12:08 - 2017-03-01 22:27 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\CrashDumps
2017-11-17 11:11 - 2017-03-14 08:51 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Roaming\vlc
2017-11-15 17:52 - 2017-09-24 15:08 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\CARTES SCOLAIRES
2017-11-15 10:37 - 2017-09-21 23:34 - 000002163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-15 10:37 - 2017-09-21 23:34 - 000002151 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-11-14 19:08 - 2017-09-24 11:06 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\WhatsApp
2017-11-14 17:10 - 2017-05-03 09:58 - 000000000 ____D C:\Users\YIWOUPIO\Documents\Bible
2017-11-13 16:28 - 2017-02-28 18:34 - 000000000 ____D C:\Users\YIWOUPIO\Documents\WebCam Media
2017-11-13 16:03 - 2017-08-03 11:59 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\PA
2017-11-13 15:19 - 2017-09-22 08:59 - 000000000 ___RD C:\Users\YIWOUPIO\Desktop\BADO DOCS
2017-11-12 02:55 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\rescache
2017-11-11 15:05 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\SysWOW64\Dism
2017-11-11 15:05 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\system32\Dism
2017-11-10 18:26 - 2017-03-23 21:43 - 001490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2017-11-10 18:26 - 2012-03-21 19:35 - 001490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2017-11-10 12:23 - 2017-10-15 07:12 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\PROGRAMMES POUR INSTALLATION
2017-11-10 12:07 - 2017-10-22 10:38 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\SAFANE
2017-11-09 01:06 - 2017-02-28 15:13 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\VirtualStore
2017-11-09 00:55 - 2017-03-03 06:40 - 000000000 ____D C:\Users\YIWOUPIO\AppData\LocalLow\Temp
2017-11-08 14:56 - 2009-07-14 05:08 - 000032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-11-08 13:49 - 2017-02-28 16:20 - 000000000 ____D C:\Users\YIWOUPIO\Documents\Bluetooth Folder
2017-11-08 08:31 - 2017-09-24 20:13 - 000000000 ____D C:\Program Files (x86)\Easy Trinity
2017-11-07 21:55 - 2017-02-28 16:50 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\ElevatedDiagnostics
2017-11-03 21:16 - 2009-07-14 03:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2017-11-03 21:16 - 2009-07-14 03:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-11-02 05:54 - 2017-10-01 14:26 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\Nouveau dossier
2017-10-31 09:38 - 2017-05-08 20:13 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-10-31 09:38 - 2017-03-01 21:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-31 07:04 - 2017-09-16 10:54 - 000000000 ____D C:\Users\YIWOUPIO\Desktop\NouveauX SONS
2017-10-29 20:13 - 2017-03-02 22:13 - 000000000 ____D C:\Users\YIWOUPIO\AppData\Local\NPE

==================== Fichiers à la racine de certains dossiers =======

2017-11-09 10:51 - 2017-11-09 10:51 - 000065536 _____ (Huawei Technologies Co., Ltd.) C:\Users\YIWOUPIO\cardlock_unlock-e58xx.exe
2017-04-14 11:26 - 2017-04-14 23:19 - 000000096 _____ () C:\Users\YIWOUPIO\AppData\Roaming\Camdata.ini
2017-04-14 11:26 - 2017-04-14 23:19 - 000000408 _____ () C:\Users\YIWOUPIO\AppData\Roaming\CamLayout.ini
2017-04-14 11:26 - 2017-04-14 23:19 - 000000408 _____ () C:\Users\YIWOUPIO\AppData\Roaming\CamShapes.ini
2017-04-14 11:26 - 2017-04-14 23:19 - 000004509 _____ () C:\Users\YIWOUPIO\AppData\Roaming\CamStudio.cfg
2017-11-17 11:19 - 2017-11-17 11:19 - 000003584 _____ () C:\Users\YIWOUPIO\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-28 16:35 - 2017-02-28 16:36 - 000002226 _____ () C:\Users\YIWOUPIO\AppData\Local\WiDiSetupLog.20170228.163526.txt

Certains fichiers dans TEMP:
====================
2017-11-20 09:20 - 2017-11-20 09:23 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\00TaOuQBg4Qp.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\046oaaKm0JPZ.exe
2017-11-20 09:25 - 2017-11-20 09:27 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\1Hk43fp4xZXE.exe
2017-11-20 09:26 - 2017-11-20 09:28 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\1LvW6mBND6do.exe
2017-11-20 09:43 - 2017-11-20 09:43 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\1NNvrGxuhKVw.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\1nvNwibxG1CX.exe
2017-11-20 09:41 - 2017-11-20 09:41 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\1Ra0DWZ4xhez.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\29DARgNcy20X.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\2ezfjUSNKFuQ.exe
2017-11-20 09:13 - 2017-11-20 09:16 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\2IOG1TuzXQoX.exe
2017-11-20 09:36 - 2017-11-20 09:36 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\2mZ5vFVzY00S.exe
2017-11-20 09:14 - 2017-11-20 09:18 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\2XprKed8KoN4.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\2YJR4Kmpe8BQ.exe
2017-11-20 09:22 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\34WPkNfXRUVh.exe
2017-11-20 09:34 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\351CYFertBqF.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\39E0XctpvqjC.exe
2017-11-20 09:34 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\3cQCmeQYg0cf.exe
2017-11-20 09:16 - 2017-11-20 09:19 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\3Lmx0eRrQIsE.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\3XHYFfoj45Q4.exe
2017-11-20 09:36 - 2017-11-20 09:36 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\4DbXjuMqJAQ3.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\4dtXOtjzgDVz.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\4F8POP9rqtJT.exe
2017-11-20 09:16 - 2017-11-20 09:20 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\4Gfmk2v347Je.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\4OhMlcPWm6yu.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\54Wo7lbBGaIW.exe
2017-11-20 09:26 - 2017-11-20 09:29 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\5jTFd5S8yGt4.exe
2017-11-20 09:20 - 2017-11-20 09:24 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\5RnyzIf0GAid.exe
2017-11-20 09:28 - 2017-11-20 09:30 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\5U1LUu4wCqtz.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\5Vh47KOjD8VB.exe
2017-11-20 09:21 - 2017-11-20 09:24 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\6awX11xH3NUa.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\6DIXWV9gomBz.exe
2017-11-20 09:22 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\6TYBiJWx86OI.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\6xkK9MGleTGO.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\70eQNst3qbbx.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\73jZ4XqgHAw1.exe
2017-11-20 09:31 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\79b1h4ML4s8R.exe
2017-11-20 09:08 - 2017-11-20 09:32 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\7DuJbe9ErDrH.exe
2017-11-20 09:34 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\7UqWCz186tDl.exe
2017-11-20 09:38 - 2017-11-20 09:38 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\8F5Ky8RYNHpu.exe
2017-11-20 09:30 - 2017-11-20 09:32 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\8zKH5iVdEhOr.exe
2017-11-20 09:32 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\9a5XdNQi9bbU.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\9dOZjH0fTOr7.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\9mXUDxWPnf2p.exe
2017-11-20 09:39 - 2017-11-20 09:39 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\9ThHw7b9zc6d.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\9tPQUpxX7JSR.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\A9Db5dwa76xe.exe
2017-11-20 09:14 - 2017-11-20 09:15 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\aAeWDlnSHuXG.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\aCF39q3RN40U.exe
2017-11-20 09:23 - 2017-11-20 09:26 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\aKQXSzVfbvfD.exe
2017-11-20 09:29 - 2017-11-20 09:32 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\AzEgrksUaarB.exe
2017-11-20 09:39 - 2017-11-20 09:39 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Bca1J0ydmAEj.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\bgYvICC80Vpx.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\bk1sfXIqxoXB.exe
2017-11-20 09:21 - 2017-11-20 09:24 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Bkf2c0MXbuCq.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\bkOMuIAsBAqy.exe
2017-11-20 09:42 - 2017-11-20 09:42 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\blU4KmUfjql5.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\btVvitZ2CYPv.exe
2017-11-20 09:18 - 2017-11-20 09:20 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\BwlVsZ4xBEf2.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\C7S7PgCdEo3f.exe
2017-11-20 09:42 - 2017-11-20 09:42 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\cbD2qS2P5oS8.exe
2017-11-20 09:29 - 2017-11-20 09:31 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\cDEfA0bG7vHi.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\cfHGTvhXhvix.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\cIIDBFnXJh18.exe
2017-11-20 09:17 - 2017-11-20 09:20 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\cO0jVdgeb40L.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\csMXh6PERCtr.exe
2017-11-20 09:38 - 2017-11-20 09:38 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\cWkzJQS0jhcc.exe
2017-11-20 09:42 - 2017-11-20 09:42 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\CzvV85CI6ogb.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\dJcBaJP1PPIK.exe
2017-11-20 09:34 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\dlDoE8nuYtbr.exe
2017-11-20 09:34 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\dmL3VmWCx6rF.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\dyTKkYdLZ9rE.exe
2017-11-20 09:16 - 2017-11-20 09:19 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\DZI4rdHtp1kU.exe
2017-11-20 09:26 - 2017-11-20 09:28 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\e2qYsPzFt4uh.exe
2017-11-20 09:15 - 2017-11-20 09:16 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\eAbfaAoZAzjf.exe
2017-11-20 09:10 - 2017-11-20 09:33 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ebmytgELFnJd.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ECQnrtnzv9hb.exe
2017-11-20 09:26 - 2017-11-20 09:28 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\edutFyq7hCCT.exe
2017-11-20 09:14 - 2017-11-20 09:16 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\EnBGPV403Tyb.exe
2017-11-20 09:20 - 2017-11-20 09:22 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\eQ2OoqlXVx85.exe
2017-11-20 09:14 - 2017-11-20 09:17 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\EUbO1MOXH84W.exe
2017-11-20 09:36 - 2017-11-20 09:36 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\fs2bB5OqXgLf.exe
2017-11-20 09:24 - 2017-11-20 09:27 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\FwUwAHiwu1Kk.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\G1qszUUA1lwR.exe
2017-11-20 09:17 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\G1v5wreHsoEn.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\g836YpkKUhpi.exe
2017-11-20 09:32 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\HbT7ItYPKquj.exe
2017-11-20 09:15 - 2017-11-20 09:19 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\hD0OlRvme9N8.exe
2017-11-20 09:28 - 2017-11-20 09:32 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\hDRl0lgiFZ5W.exe
2017-11-20 09:41 - 2017-11-20 09:41 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\HnVBMcykTKNa.exe
2017-11-20 09:14 - 2017-11-20 09:18 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\HPQzkCIbgPzv.exe
2017-11-20 09:29 - 2017-11-20 09:32 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\HvyMQJT2dD7w.exe
2017-11-20 09:33 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\I3pYhLp8hBgk.exe
2017-11-20 09:20 - 2017-11-20 09:24 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\i6Rel5IkcHWZ.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Iat3MjEJDI8n.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\iCDFdttr3HvJ.exe
2017-11-20 09:18 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Id4NJQp2J5Wa.exe
2017-11-20 09:20 - 2017-11-20 09:23 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ILZByXbZ2NJH.exe
2017-11-20 09:31 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ImjHropn0vOH.exe
2017-11-20 09:30 - 2017-11-20 09:33 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\IT6z5hmQxRVM.exe
2017-11-20 09:20 - 2017-11-20 09:22 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\IY1NC2eUVMF7.exe
2017-11-20 09:17 - 2017-11-20 09:20 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\IyMyf1y76iF3.exe
2017-11-20 09:38 - 2017-11-20 09:38 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\iZ9r21cPGEG2.exe
2017-11-20 09:33 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\IzOM4yWm9kvS.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\j1iBKJ31MBD0.exe
2017-11-20 09:26 - 2017-11-20 09:28 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\JmPdUbw2yJHi.exe
2017-11-20 09:28 - 2017-11-20 09:30 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\jRKgFLbHcjQ0.exe
2017-11-20 09:28 - 2017-11-20 09:31 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\JSK8Jv9XutOt.exe
2017-11-20 09:30 - 2017-11-20 09:33 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\jwUG81OwDqLT.exe
2017-11-20 09:22 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\K8bBKNyVVCqR.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\kcb1u1HGJe4m.exe
2017-11-20 09:15 - 2017-11-20 09:18 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Kh4Dj1ORkSlx.exe
2017-11-20 09:16 - 2017-11-20 09:18 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\KHR3obVpzyxg.exe
2017-11-20 09:33 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\kIhthZa5gkcF.exe
2017-11-20 09:32 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\KUuOqP60S6AD.exe
2017-11-20 09:34 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\KvMAOCmMFoC0.exe
2017-11-20 09:16 - 2017-11-20 09:19 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\kzjLafh3nlCH.exe
2017-11-20 09:36 - 2017-11-20 09:36 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\LCGzphmt9LmP.exe
2017-11-20 09:23 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\LlrjfgySBBZ5.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\lWRAeMGqoZkt.exe
2017-11-20 09:20 - 2017-11-20 09:22 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\lZaXT9F9nW6F.exe
2017-11-20 09:14 - 2017-11-20 09:14 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\mDBpBX8bJDbN.exe
2017-11-20 09:39 - 2017-11-20 09:39 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\mJMePXqvIoCL.exe
2017-11-20 09:18 - 2017-11-20 09:22 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\mk8MXdvxgUJw.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\mXnQ8KLmvoVk.exe
2017-11-20 09:22 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\mYGfGhYiB0Dm.exe
2017-11-20 09:16 - 2017-11-20 09:19 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\MZ1nVE36sZqV.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\n3AJGISWboIw.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\N5dPvXTzW8qP.exe
2017-11-20 09:27 - 2017-11-20 09:31 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Ne3OgXVGvMcQ.exe
2017-11-20 09:23 - 2017-11-20 09:26 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\neqNDYAff1U1.exe
2017-11-20 09:43 - 2017-11-20 09:43 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\NFcMBxvrLvTY.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\nFEKAJWMKQtr.exe
2017-11-20 09:31 - 2017-11-20 09:33 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\NH9KeZU1WfwG.exe
2017-11-20 09:15 - 2017-11-20 09:17 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\NL6HGzlRWZ9f.exe
2017-11-20 09:10 - 2017-11-20 09:14 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\nnHdDobRmvXs.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\NNjqkiRDv35I.exe
2017-11-20 09:42 - 2017-11-20 09:42 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\NPP8LLeZ6ogY.exe
2017-11-20 09:13 - 2017-11-20 09:16 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\o0G4ukbILtgH.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\o6yFshH29pVT.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\OFF7CMs1igyw.exe
2017-11-20 09:31 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\OLaQ6vRvEFHe.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\oLJ86nwVZUp9.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\osFi7Fd1cKyU.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\OZjxM3RljRFA.exe
2017-11-20 09:28 - 2017-11-20 09:29 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\p2COeSF2vyVf.exe
2017-11-20 09:19 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\pFPfZlMtkU74.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\PInYfqGDUK58.exe
2017-11-20 09:31 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\PqK5nc1J7use.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\PQvbQe0vyguj.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\pUsvIdCrNQse.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\pWjNmgCmHBdm.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\q3Jcm3fka9Vx.exe
2017-11-20 09:32 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\qaqXMYKE5oOP.exe
2017-11-20 09:32 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\qK14q9rKfCzG.exe
2017-11-20 09:27 - 2017-11-20 09:30 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Qr1cDjZL4eHy.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\qSY0A4qTK2Jh.exe
2017-11-20 09:13 - 2017-11-20 09:15 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\qxt3AndG83OP.exe
2017-11-20 09:42 - 2017-11-20 09:42 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\QYfIoKAkwChU.exe
2017-11-20 09:13 - 2017-11-20 09:14 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\R4agP11GmqVJ.exe
2017-11-20 09:33 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\R9m2Jp0HSWhb.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\rbEFeaxZtJj3.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\rEFeaxFeba3M.exe
2017-11-20 09:16 - 2017-11-20 09:18 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\RhhpCm3xfk8n.exe
2017-11-20 09:15 - 2017-11-20 09:16 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\RXdcuelmXOr8.exe
2017-11-20 09:17 - 2017-11-20 09:19 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\s4u5c9rwy8Mo.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\S9BmPE2u6TNR.exe
2017-11-20 09:18 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\SbgQATfeDbGj.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\sDessswNuUIu.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\sHmqHRsYWian.exe
2017-09-27 16:14 - 2010-04-07 13:07 - 000607800 ____R (HP) C:\Users\YIWOUPIO\AppData\Local\Temp\siinst.exe
2017-11-20 09:27 - 2017-11-20 09:29 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\sl0TT1JQhcjW.exe
2017-11-20 09:27 - 2017-11-20 09:29 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\SPaZFMzY3XYx.exe
2017-11-20 09:09 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\SPypm0NIgnWn.exe
2017-09-27 16:14 - 2010-04-06 21:41 - 000270336 ____R (HP) C:\Users\YIWOUPIO\AppData\Local\Temp\strings.dll
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\t4ENQitY5dPX.exe
2017-11-20 09:21 - 2017-11-20 09:23 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\T867Z2Zgnt0U.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\tiLpkjXmUYZi.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\tVjOTON5HuI0.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\TVT2s1Gp6oR6.exe
2017-11-20 09:34 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\TW73NlQkDAxY.exe
2017-11-20 09:27 - 2017-11-20 09:30 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\tXnfBFpFz6Qy.exe
2017-11-20 09:33 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\u6i9eCxQAO05.exe
2017-11-20 09:37 - 2017-11-20 09:37 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Ue0yJqRlnLeX.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ufta0MnNyQuA.exe
2017-11-20 09:32 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ulruNUVCEk4d.exe
2017-11-20 09:30 - 2017-11-20 09:33 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\uPtJnWebjTIE.exe
2017-11-20 09:27 - 2017-11-20 09:30 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\US85cHRsyhf4.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\UtckExAngZSm.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\UTgH7qRRnVxH.exe
2017-11-20 09:19 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\uVc1cTHbMWNv.exe
2017-11-20 09:32 - 2017-11-20 09:34 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\uZaCUFOClzQA.exe
2017-11-20 09:21 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\V0BhOMtGuQs2.exe
2017-11-20 09:10 - 2017-11-20 09:33 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\v1YuUTgzkCvz.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\v2HL2yoGq55L.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\V40rIcMX4pWI.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vB1IQUYTKClR.exe
2017-11-20 09:26 - 2017-11-20 09:29 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vbQPkT7ErmkM.exe
2017-11-20 09:11 - 2017-11-20 09:13 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\VCJEABXvrctX.exe
2017-11-20 09:42 - 2017-11-20 09:42 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vcxnmlm9RfX9.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\VEibST2rDnTR.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vGxgsVhqBOWp.exe
2017-11-20 09:16 - 2017-11-20 09:18 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\VHeKSF2w1LAR.exe
2017-11-20 09:21 - 2017-11-20 09:23 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\VJjHmjS9aPZb.exe
2017-11-20 09:23 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vlH1LQyCXXxY.exe
2017-11-20 09:11 - 2017-11-20 09:13 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\VmFOc8aVOdhg.exe
2017-11-20 09:24 - 2017-11-20 09:26 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\VMvlof7xFFrh.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\VofFUeBDnxhs.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vWy7cUvPBQtv.exe
2017-11-20 09:18 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vYDfrupYp3Mq.exe
2017-11-20 09:20 - 2017-11-20 09:23 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\vZqCLdfpyJ3B.exe
2017-11-19 22:07 - 2017-11-19 22:10 - 000119808 _____ (Miray Software AG) C:\Users\YIWOUPIO\AppData\Local\Temp\w64.exe
2017-11-20 09:30 - 2017-11-20 09:33 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\w938U5hyG028.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\wjce7NYs5zpW.exe
2017-11-20 09:38 - 2017-11-20 09:38 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Wnz5KkbqZkAV.exe
2017-11-20 09:14 - 2017-11-20 09:15 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\WQGmapyGzEIM.exe
2017-11-20 09:24 - 2017-11-20 09:26 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Wu3kBSnrnWEm.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\XFdPqYknR9iP.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\XKyyopjXEYC4.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\xLiq8rX4DBm4.exe
2017-11-20 09:20 - 2017-11-20 09:22 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Xoj0kHvIWJAK.exe
2017-11-20 09:15 - 2017-11-20 09:20 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\xvt5s47MrJNq.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\xyAolfp6iB4d.exe
2017-11-20 09:35 - 2017-11-20 09:35 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\xzEhpsjlVnWl.exe
2017-11-20 09:25 - 2017-11-20 09:29 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\yfPyyLh6WduW.exe
2017-11-20 09:43 - 2017-11-20 09:43 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\yHv3Xc5EAD9M.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\YhzIySgoKV1h.exe
2017-11-20 09:18 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\Yj9ZDhRnRBDW.exe
2017-11-20 09:15 - 2017-11-20 09:17 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\YKwwgAYX2lJr.exe
2017-11-20 09:22 - 2017-11-20 09:25 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\YrirXoKw2RZJ.exe
2017-11-20 09:13 - 2017-11-20 09:15 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ySX6cBdilpdu.exe
2017-11-20 09:20 - 2017-11-20 09:23 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\yzxBrnZD23xK.exe
2017-11-20 09:27 - 2017-11-20 09:29 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ZaQf4u1r09Qz.exe
2017-11-20 09:45 - 2017-11-20 09:45 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ZavVz4CaETDC.exe
2017-11-20 09:18 - 2017-11-20 09:21 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\zAXheb678MwJ.exe
2017-11-20 09:39 - 2017-11-20 09:39 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\zC5b1vDvXUuK.exe
2017-11-20 09:23 - 2017-11-20 09:26 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\zeIMeysBsWIB.exe
2017-11-20 09:43 - 2017-11-20 09:43 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\zf33nCm7FHob.exe
2017-11-20 09:11 - 2017-11-20 09:14 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\zJMnFLRaAR7f.exe
2017-11-20 09:30 - 2017-11-20 09:32 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\zW0EAJ8Sne18.exe
2017-11-20 09:16 - 2017-11-20 09:19 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\ZX8AhQyCIqPO.exe
2017-11-20 09:40 - 2017-11-20 09:40 - 000000000 _____ () C:\Users\YIWOUPIO\AppData\Local\Temp\zYuXsaMmLHWp.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-11-19 15:06

==================== Fin de FRST.txt ============================