Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 23-12-2017 01
Exécuté par Mario (administrateur) sur DESKTOP-FA8L4VP (23-12-2017 22:11:02)
Exécuté depuis C:\Users\Mario\Desktop
Profils chargés: defaultuser0 & Mario (Profils disponibles: defaultuser0 & Mario)
Platform: Windows 10 Home Version 1709 16299.64 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Intel Security, Inc.) C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Electronic Arts) D:\Program Files (x86)\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\CCLibrary.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCLibrary\libs\node.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\PeopleExperienceHost.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [SS2UILauncher] => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [1143312 2016-11-10] ()
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-11-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2407008 2017-09-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-3764040665-3039385378-411776882-1000\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [519680 2017-09-29] (Microsoft Corporation)
HKU\S-1-5-21-3764040665-3039385378-411776882-1001\...\Run: [Discord] => C:\Users\Mario\AppData\Local\Discord\app-0.0.299\Discord.exe [57954808 2017-12-11] (Discord Inc.)
HKU\S-1-5-21-3764040665-3039385378-411776882-1001\...\Run: [CCleaner Monitoring] => D:\Program Files (x86)\CCleaner64.exe [9856176 2017-09-20] (Piriform Ltd)
GroupPolicy: Restriction - Chrome <==== ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0decf861-feb8-4adb-a191-02760a6239ca}: [DhcpNameServer] 172.13.128.24
Tcpip\..\Interfaces\{7d657e1d-06ee-4944-860f-73134e293ab4}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3764040665-3039385378-411776882-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.fr/
HKU\S-1-5-21-3764040665-3039385378-411776882-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE
SearchScopes: HKU\S-1-5-21-3764040665-3039385378-411776882-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3764040665-3039385378-411776882-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> D:\Program Files (x86)\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-28] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Program Files (x86)\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> D:\Program Files (x86)\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-28] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Program Files (x86)\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-28] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> D:\Program Files (x86)\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-12-15] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-12-15] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> D:\Program Files (x86)\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.fr/
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Profile: C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default [2017-12-23]
CHR Extension: (Adobe Acrobat) - C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-08-29]
CHR Extension: (Google Docs hors connexion) - C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-29]
CHR Extension: (AdBlock) - C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-07]
CHR Extension: (Widget Shopping Mailorama) - C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\mggkbalhdfhjalmmicijhgeoialfhjia [2017-12-07]
CHR Extension: (Drapeau de pays pour le domaine IP) - C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlpapfcfoakknnhkfpencomejbcecdfp [2017-08-29]
CHR Extension: (Chrome Media Router) - C:\Users\Mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-12]
CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTek Computer Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7549928 2017-11-09] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-11-09] (AVAST Software)
R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2215168 2016-11-01] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [177440 2016-10-05] (Intel Corporation)
S3 MBAMService; D:\Program Files (x86)\Malware\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\\McCSPServiceHost.exe [1910000 2016-05-31] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-11-29] ()
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-16] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519104 2017-11-16] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [463856 2017-12-16] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460736 2017-11-16] (NVIDIA Corporation)
S3 Origin Client Service; D:\Program Files (x86)\Origin\OriginClientService.exe [2155328 2017-12-19] (Electronic Arts)
R2 Origin Web Helper Service; D:\Program Files (x86)\Origin\OriginWebHelperService.exe [3025224 2017-12-19] (Electronic Arts)
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1045336 2016-05-25] (Intel Security, Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [42680 2016-11-24] (ASUSTeK COMPUTER INC.)
S2 SkypeUpdate; D:\Program Files (x86)\Updater\Updater.exe [317408 2017-07-18] (Skype Technologies)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18232 2016-11-09] (Intel(R) Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-11-29] (Intel® Corporation)
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AsusHFilter; C:\WINDOWS\System32\drivers\AsusHFilter.sys [30200 2016-12-22] ()
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [99320 2016-10-11] (ASUS Corporation)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [183584 2017-11-09] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [321032 2017-11-09] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [198968 2017-11-09] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343288 2017-11-09] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57728 2017-11-09] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [47008 2017-11-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [148288 2017-11-09] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110376 2017-11-09] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84416 2017-11-09] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1026232 2017-11-09] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [455376 2017-11-16] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [203976 2017-11-09] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [364464 2017-11-09] (AVAST Software)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [71232 2016-11-01] (Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [66616 2016-11-01] (Intel Corporation)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [350272 2016-11-01] (Intel Corporation)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [31120 2016-12-19] (ASUS)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [732416 2016-10-14] (Intel Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation)
R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [79504 2016-09-18] (Windows (R) Win 7 DDK provider)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2017-09-29] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_40aceccb38b252dc\nvlddmkm.sys [17028552 2017-12-18] (NVIDIA Corporation)
R0 nvpciflt; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_40aceccb38b252dc\nvpciflt.sys [47888 2017-12-18] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-11-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-12-16] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-08-22] (Realtek )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-12-23 22:11 - 2017-12-23 22:11 - 000020573 _____ C:\Users\Mario\Desktop\FRST.txt
2017-12-23 22:10 - 2017-12-23 22:11 - 000000000 ____D C:\FRST
2017-12-23 22:07 - 2017-12-23 22:08 - 002392064 _____ (Farbar) C:\Users\Mario\Desktop\FRST64.exe
2017-12-23 22:00 - 2017-12-23 22:00 - 000000374 _____ C:\DelFix.txt
2017-12-23 21:48 - 2017-12-23 21:54 - 000000140 _____ C:\WINDOWS\Reimage.ini
2017-12-23 21:36 - 2017-12-23 21:36 - 000000991 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-12-23 21:36 - 2017-12-23 21:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-12-23 21:36 - 2017-12-23 21:36 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-12-23 21:36 - 2017-11-29 09:11 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-12-23 21:31 - 2017-12-23 21:31 - 000000290 __RSH C:\ProgramData\ntuser.pol
2017-12-22 23:18 - 2017-12-22 23:18 - 000000735 _____ C:\Users\Public\Desktop\Steam.lnk
2017-12-22 23:18 - 2017-12-22 23:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2017-12-21 19:18 - 2017-12-21 19:18 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-12-21 19:18 - 2017-12-15 23:47 - 000143960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-12-21 19:17 - 2017-12-21 19:17 - 000000000 ____D C:\WINDOWS\LastGood
2017-12-21 19:16 - 2017-12-16 01:23 - 040237456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 036350960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 035157488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 029381936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 023267096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 019040512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 013867656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 013255032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 011781912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 010883744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 004202992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 003615032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001990128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438871.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001674736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438871.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001331016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001321448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001135464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001101104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001044848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001038496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 001032688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000980880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000933360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000885680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000794392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000740144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000634224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000618744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000616240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000599536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2017-12-21 19:16 - 2017-12-16 01:23 - 000506864 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2017-12-02 14:12 - 2017-12-02 14:12 - 000000000 ____D C:\Users\Mario\OneDrive\Documents\Modèles Office personnalisés
2017-12-01 12:11 - 2017-12-01 12:11 - 000000000 ____D C:\ProgramData\Twitch
2017-11-27 09:13 - 2017-12-23 21:01 - 002414794 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-11-27 09:11 - 2017-11-27 09:11 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-11-27 09:10 - 2017-11-27 09:10 - 000000000 ____D C:\ProgramData\USOShared
2017-11-27 09:09 - 2017-11-27 09:09 - 000000020 ___SH C:\Users\Mario\ntuser.ini
2017-11-27 09:09 - 2017-11-27 09:09 - 000000000 ___RD C:\Users\Mario\3D Objects
2017-11-27 09:09 - 2017-11-27 09:09 - 000000000 ___HD C:\Users\Mario\MicrosoftEdgeBackups
2017-11-27 09:07 - 2017-12-23 17:08 - 000004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{414E8310-1FB6-4AF6-8375-C02601F04B2C}
2017-11-27 09:07 - 2017-12-22 20:09 - 000005322 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for DESKTOP-FA8L4VP-Mario DESKTOP-FA8L4VP
2017-11-27 09:07 - 2017-12-21 13:10 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-21 13:10 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-21 13:10 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-21 13:10 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-21 13:10 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-21 13:10 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-21 13:10 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-21 13:10 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-11-27 09:07 - 2017-12-15 21:52 - 000003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2017-11-27 09:07 - 2017-12-15 21:52 - 000003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2017-11-27 09:07 - 2017-12-03 20:40 - 000003514 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-27 09:07 - 2017-12-03 20:40 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-11-27 09:07 - 2017-12-03 20:40 - 000003290 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-27 09:07 - 2017-12-03 20:40 - 000003268 _____ C:\WINDOWS\System32\Tasks\WpsKtpcntrQingTask_Administrator
2017-11-27 09:07 - 2017-12-03 20:40 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification
2017-11-27 09:07 - 2017-12-03 20:40 - 000003026 _____ C:\WINDOWS\System32\Tasks\WpsExternal_20161111081738
2017-11-27 09:07 - 2017-12-03 20:40 - 000002968 _____ C:\WINDOWS\System32\Tasks\Update Checker
2017-11-27 09:07 - 2017-12-03 20:40 - 000002924 _____ C:\WINDOWS\System32\Tasks\ATK Package 36D18D69AFC3
2017-11-27 09:07 - 2017-12-03 20:40 - 000002856 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3764040665-3039385378-411776882-1001
2017-11-27 09:07 - 2017-12-03 20:40 - 000002804 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-marion.may17@live.fr
2017-11-27 09:07 - 2017-12-03 20:40 - 000002520 _____ C:\WINDOWS\System32\Tasks\ROG Gaming Center
2017-11-27 09:07 - 2017-12-03 20:40 - 000002404 _____ C:\WINDOWS\System32\Tasks\SS2UILauncherRun
2017-11-27 09:07 - 2017-12-03 20:40 - 000002392 _____ C:\WINDOWS\System32\Tasks\SS2Svc64Run
2017-11-27 09:07 - 2017-12-03 20:40 - 000002384 _____ C:\WINDOWS\System32\Tasks\SS2Svc32Run
2017-11-27 09:07 - 2017-12-03 20:40 - 000002346 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_ListenToDevice
2017-11-27 09:07 - 2017-12-03 20:40 - 000002312 _____ C:\WINDOWS\System32\Tasks\{A5B92DB9-E3CA-483F-ADF9-6BBA1D4AD81E}
2017-11-27 09:07 - 2017-12-03 20:40 - 000002282 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2017-11-27 09:07 - 2017-12-03 20:40 - 000002214 _____ C:\WINDOWS\System32\Tasks\ATK Package A22126881260
2017-11-27 09:07 - 2017-12-03 20:40 - 000002212 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-11-27 09:07 - 2017-12-03 20:40 - 000001984 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
2017-11-27 09:07 - 2017-11-28 12:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-11-27 09:07 - 2017-11-27 09:07 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2017-11-27 09:07 - 2017-11-27 09:07 - 000011433 _____ C:\WINDOWS\diagerr.xml
2017-11-27 09:07 - 2017-11-27 09:07 - 000002942 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-11-27 09:07 - 2017-11-27 09:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\UAC pass
2017-11-27 09:07 - 2017-11-27 09:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\Intel
2017-11-27 09:07 - 2017-11-27 09:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-11-27 09:07 - 2017-11-27 09:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\ASUSTek Computer Inc
2017-11-27 09:07 - 2017-11-27 09:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\ASUS
2017-11-27 09:07 - 2017-11-27 09:07 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-11-27 09:03 - 2017-11-27 09:03 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-11-27 09:02 - 2017-12-14 12:29 - 000000000 ____D C:\Users\Mario\AppData\Local\Packages
2017-11-27 09:02 - 2017-11-29 00:17 - 000000000 ____D C:\Users\Mario
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\Mario\Voisinage réseau
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\Mario\Voisinage d'impression
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\Mario\Modèles
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\Mario\Mes documents
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\Mario\Menu Démarrer
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\Mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\Mario\AppData\Local\Historique
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\defaultuser0\Voisinage réseau
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\defaultuser0\Voisinage d'impression
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\defaultuser0\Modèles
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\defaultuser0\Mes documents
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\defaultuser0\Menu Démarrer
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Local\Historique
2017-11-27 09:02 - 2017-11-27 09:02 - 000000000 ____D C:\Users\defaultuser0
2017-11-27 09:01 - 2017-10-12 22:38 - 000531904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-11-27 09:01 - 2017-10-12 22:38 - 000437696 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-11-27 09:01 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-11-27 08:58 - 2017-12-23 20:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-11-27 08:58 - 2017-11-27 09:05 - 000476320 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-11-27 08:57 - 2017-12-10 18:32 - 000000000 ____D C:\Windows.old
2017-11-27 08:55 - 2017-11-27 08:57 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-11-27 08:54 - 2017-11-27 08:55 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-11-27 08:54 - 2017-11-27 08:54 - 025246208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 023658496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 021753344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 019339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 018914304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 017083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 008099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 006035968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 004742144 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 003679232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 002474584 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-11-27 08:54 - 2017-11-27 08:54 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-11-27 08:54 - 2017-11-27 08:54 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-11-27 08:54 - 2017-11-27 08:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-11-27 08:53 - 2017-11-27 08:53 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 005906264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 003313968 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 002869248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002781696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 002400664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 002106368 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001667584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001485824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001436432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001322496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001200024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 001170008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000839928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000710920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-11-27 08:53 - 2017-11-27 08:53 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000464416 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000232344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2017-11-27 08:53 - 2017-11-27 08:53 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-11-27 08:53 - 2017-11-27 08:53 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-11-27 08:53 - 2017-11-27 08:53 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-11-27 08:49 - 2017-11-27 08:49 - 006347776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2017-11-27 08:49 - 2017-11-27 08:49 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2017-11-27 08:49 - 2017-11-27 08:49 - 005484032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2017-11-27 08:49 - 2017-11-27 08:49 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2017-11-27 08:49 - 2017-11-27 08:49 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2017-11-27 08:48 - 2017-11-30 14:48 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2017-11-27 08:48 - 2017-11-27 08:48 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2017-11-27 08:48 - 2017-11-27 08:48 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2017-11-27 08:48 - 2017-11-27 08:48 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2017-11-27 08:48 - 2017-11-27 08:48 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2017-11-27 08:48 - 2017-11-27 08:48 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2017-11-27 08:48 - 2017-11-27 08:48 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2017-11-27 08:48 - 2017-11-27 08:48 - 000000000 ____D C:\Program Files\Reference Assemblies
2017-11-27 08:48 - 2017-11-27 08:48 - 000000000 ____D C:\Program Files\MSBuild
2017-11-27 08:48 - 2017-11-27 08:48 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2017-11-27 08:48 - 2017-11-27 08:48 - 000000000 ____D C:\Program Files (x86)\MSBuild
2017-11-26 21:50 - 2017-12-04 18:35 - 000000000 ___DC C:\WINDOWS\Panther

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-12-23 22:00 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2017-12-23 21:31 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-12-23 21:31 - 2016-07-16 12:47 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-12-23 21:01 - 2017-09-30 15:40 - 001119898 _____ C:\WINDOWS\system32\perfh00C.dat
2017-12-23 21:01 - 2017-09-30 15:40 - 000241356 _____ C:\WINDOWS\system32\perfc00C.dat
2017-12-23 12:25 - 2017-08-23 00:54 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-23 11:54 - 2017-08-29 21:19 - 000000000 ____D C:\Users\Mario\AppData\Local\Adobe
2017-12-23 11:45 - 2017-08-29 20:49 - 000000182 _____ C:\Users\Mario\AppData\Roaming\sp_data.sys
2017-12-23 10:41 - 2017-08-30 07:28 - 000000000 ___RD C:\Users\Mario\Creative Cloud Files
2017-12-22 23:31 - 2017-08-22 18:10 - 000000000 ____D C:\ProgramData\Origin
2017-12-22 23:29 - 2017-08-30 14:58 - 000001078 _____ C:\Users\Public\Desktop\Les Sims 4.lnk
2017-12-22 23:29 - 2017-08-29 19:59 - 000000000 ____D C:\Users\Mario\AppData\Roaming\Origin
2017-12-22 19:52 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-12-22 13:05 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-12-22 12:13 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-22 12:13 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-12-21 19:18 - 2017-08-29 21:53 - 000000000 ____D C:\Users\Mario\AppData\Local\NVIDIA
2017-12-21 19:18 - 2017-08-23 00:54 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-12-21 13:11 - 2017-08-22 17:37 - 000000000 ____D C:\Users\Mario\AppData\Local\NVIDIA Corporation
2017-12-21 13:10 - 2017-08-23 00:54 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-21 13:10 - 2017-08-23 00:54 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-12-20 12:59 - 2017-08-29 22:48 - 000000000 ____D C:\Users\Mario\AppData\Roaming\vlc
2017-12-16 01:23 - 2017-10-28 12:13 - 004485376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2017-12-16 01:23 - 2017-10-28 12:13 - 003817584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2017-12-16 01:23 - 2017-10-28 12:13 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2017-12-16 01:23 - 2017-10-28 12:13 - 000048442 _____ C:\WINDOWS\system32\nvinfo.pb
2017-12-16 00:15 - 2017-08-23 00:54 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-12-15 23:34 - 2017-08-23 00:54 - 005964688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-12-15 23:34 - 2017-08-23 00:54 - 002589168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-12-15 23:34 - 2017-08-23 00:54 - 001767408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-12-15 23:34 - 2017-08-23 00:54 - 000608056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-12-15 23:34 - 2017-08-23 00:54 - 000450544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-12-15 23:34 - 2017-08-23 00:54 - 000123704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-12-15 23:34 - 2017-08-23 00:54 - 000082928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-12-15 21:49 - 2017-08-29 22:30 - 000000000 ____D C:\Users\Mario\AppData\Roaming\TS3Client
2017-12-14 19:17 - 2017-08-23 00:54 - 007917671 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-12-13 13:08 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2017-12-12 19:58 - 2017-08-23 03:10 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-12 19:50 - 2017-10-10 21:03 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-12 19:50 - 2017-08-23 03:10 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-12 12:10 - 2017-08-29 19:55 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-12 12:10 - 2017-08-29 19:55 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-12-12 12:08 - 2017-08-22 18:00 - 000000000 ____D C:\Users\Mario\AppData\Roaming\discord
2017-12-12 00:10 - 2017-08-29 18:54 - 000002235 _____ C:\Users\Mario\Desktop\Discord.lnk
2017-12-12 00:10 - 2017-08-29 18:54 - 000000000 ____D C:\Users\Mario\AppData\Local\Discord
2017-12-12 00:10 - 2017-08-22 18:00 - 000000000 ____D C:\Users\Mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2017-12-06 13:53 - 2017-08-22 17:36 - 000000000 ____D C:\Users\Mario\AppData\Local\Comms
2017-12-04 18:36 - 2017-08-29 21:06 - 000000000 ____D C:\Users\Mario\OneDrive\Documents\Evidance
2017-12-04 18:35 - 2017-08-29 18:51 - 000000000 ____D C:\Users\Mario\AppData\Local\CrashDumps
2017-12-03 20:40 - 2016-11-11 09:17 - 000000742 _____ C:\WINDOWS\Tasks\WpsKtpcntrQingTask_Administrator.job
2017-12-03 20:40 - 2016-11-11 09:17 - 000000448 _____ C:\WINDOWS\Tasks\WpsExternal_20161111081738.job
2017-12-01 12:55 - 2017-11-07 21:06 - 000000000 ____D C:\Users\Mario\AppData\Roaming\Twitch
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\winrm
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\WCN
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\slmgr
2017-11-30 14:48 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\dsc
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\com
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\MUI
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\migwiz
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\com
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\IME
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\system
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-11-30 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-11-30 14:48 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-11-30 14:48 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-11-30 14:48 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\servicing
2017-11-30 14:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2017-11-30 14:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\en-GB
2017-11-30 14:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help
2017-11-30 12:39 - 2017-08-29 21:24 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-29 08:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat
2017-11-27 09:10 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate
2017-11-27 09:09 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt
2017-11-27 09:09 - 2017-08-22 17:36 - 000000000 ____D C:\Users\Mario\AppData\Local\TileDataLayer
2017-11-27 09:09 - 2017-07-05 23:57 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-11-27 09:07 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2017-11-27 09:07 - 2017-08-23 00:59 - 000023208 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-11-27 09:07 - 2017-07-06 00:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2017-11-27 09:05 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-11-27 09:05 - 2017-08-29 20:57 - 000000000 ____D C:\Users\Mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-11-27 09:05 - 2017-08-22 18:28 - 000000000 ____D C:\Users\Mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-11-27 09:03 - 2017-08-22 17:34 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages
2017-11-27 08:59 - 2017-08-23 00:55 - 000000000 ____D C:\WINDOWS\system32\DAX2
2017-11-27 08:59 - 2017-08-23 00:54 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-11-27 08:58 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-11-27 08:57 - 2017-10-13 18:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-11-27 08:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-11-27 08:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool
2017-11-27 08:57 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-11-27 08:57 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-11-27 08:57 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-11-27 08:57 - 2017-08-29 22:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-11-27 08:57 - 2017-08-29 22:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2017-11-27 08:57 - 2017-08-29 22:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-11-27 08:57 - 2017-08-29 21:46 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2017-11-27 08:57 - 2017-08-29 21:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2017-11-27 08:57 - 2017-08-29 21:35 - 000000000 ____D C:\WINDOWS\SHELLNEW
2017-11-27 08:57 - 2017-08-29 20:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-11-27 08:57 - 2017-08-29 19:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2017-11-27 08:57 - 2017-08-23 07:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Les Sims 4
2017-11-27 08:57 - 2017-08-22 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-11-27 08:57 - 2017-07-06 00:19 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 12
2017-11-27 08:57 - 2017-07-06 00:18 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 5
2017-11-27 08:57 - 2017-07-06 00:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonic Suite 2
2017-11-27 08:57 - 2017-07-06 00:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameFirst IV
2017-11-27 08:57 - 2017-07-06 00:07 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles
2017-11-27 08:57 - 2017-07-06 00:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-11-27 08:57 - 2017-07-05 23:59 - 000000000 ____D C:\Program Files\Intel
2017-11-27 08:57 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-11-27 08:56 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup
2017-11-27 08:55 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\OCR
2017-11-27 08:55 - 2017-08-23 00:54 - 000000000 ____D C:\WINDOWS\system32\Intel
2017-11-27 08:55 - 2017-08-23 00:54 - 000000000 ____D C:\Program Files\Realtek
2017-11-27 08:55 - 2017-07-06 00:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-11-27 08:55 - 2016-11-11 09:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WPS Office
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\te-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\si-LK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\or-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\km-KH
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\is-IS
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\id-ID
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\be-BY
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\as-IN
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\am-ET
2017-11-27 08:54 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2017-11-27 08:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2017-11-27 08:54 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser

==================== Fichiers à la racine de certains dossiers =======

2017-08-29 20:49 - 2017-12-23 11:45 - 000000182 _____ () C:\Users\Mario\AppData\Roaming\sp_data.sys

Certains fichiers dans TEMP:
====================
2017-12-21 19:16 - 2017-10-12 20:59 - 000370112 _____ (NVIDIA Corporation) C:\Users\Mario\AppData\Local\Temp\nvStInst.exe
2017-12-23 21:48 - 2017-12-23 21:48 - 014769392 _____ (Reimage) C:\Users\Mario\AppData\Local\Temp\ReimagePackage.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-12-17 18:43

==================== Fin de FRST.txt ============================