~ ZHPDiag v2018.2.8.26 By Nicolas Coolman (2018/02/08)
~ Run by User (Administrator) (2018/02/11 16:28:24)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ State version: Version OK
~ Mode: Scan
~ Report: C:\Users\User\Desktop\ZHPDiag.txt
~ Report: C:\Users\User\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 16299) =>.Microsoft Corporation

---\\ Internet Browsers (3) - 1s
~ GCIE: Google Chrome v63.0.3239.132
~ MSIE: Microsoft Edge v40
~ MSIE: Internet Explorer v11.192.16299.0

---\\ Windows Product Information (3) - 4s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ System protection software (1) - 46s
Windows Defender (Activate) (Protection)

---\\ System optimization software (1) - 47s
~ CCleaner v5.38 (Optimize)

---\\ Surveillance software (1) - 47s
~ Adobe Acrobat Reader DC - Français (Surveillance)

---\\ Sharing software PeerToPeer (1) - 47s
~ µTorrent v3.5.0.44090 (P2P)

---\\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 60 Stepping 3, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4104.472 MB (12% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 553 GB (60%) free of 907 GB : OK =>.Disk Space

---\\ Connection to the system mode (3) - 0s
~ Computer Name: LAPTOP-ELN1BEH5
~ User Name: User
~ Logged in as Administrator

---\\ Enumeration of the disk units (2) - 0s
~ Drive C: has 553 GB free of 907 GB (System)
~ Drive D: has 22 GB free of 25 GB

---\\ State of the Windows Security Center (7) - 1s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Search Generic System Files (25) - 19s
[MD5.92B369312AF5D0B83AEF82D5DE0428D2] - 01/01/2018 - (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\Explorer.exe [3904808] =>.Microsoft Windows®
[MD5.731A783A36A8E69A6434D19D98B12A09] - 29/09/2017 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [71168] =>.Microsoft Corporation
[MD5.BF3E1D9B2360C6BE4CC3094CD2DDC617] - 29/09/2017 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\WINDOWS\System32\Wininit.exe [359584] =>.Microsoft Windows Publisher®
[MD5.CDBD10B47A1BEA8B6A009064E90FA298] - 01/01/2018 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [3334144] =>.Microsoft Corporation
[MD5.D0926E8FC082646487BD159538F4D9F5] - 01/01/2018 - (.Microsoft Corporation - Windows Log-on Application.) -- C:\WINDOWS\System32\Winlogon.exe [715776] =>.Microsoft Corporation
[MD5.4D487E7D2B047FB929BE00117C09F9EC] - 29/09/2017 - (.Microsoft Corporation - Software Licensing Library.) -- C:\WINDOWS\System32\sppcomapi.dll [414720] =>.Microsoft Corporation
[MD5.A94E2533A7604E4AA05DCCC675A9F396] - 02/12/2017 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [739696] =>.Microsoft Windows®
[MD5.0A821BF024E347943D6F5C5180FAEA31] - 02/12/2017 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\Syswow64\dnsapi.dll [597160] =>.Microsoft Windows®
[MD5.3B34C7B9D7E22AEF58DF0CFC4C7CC82D] - 30/09/2017 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation
[MD5.7AE4EBDC221235BF9E1008B515C0B8DB] - 01/01/2018 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [614296] =>.Microsoft Windows®
[MD5.6191B9B2EE0E8CB957C683B9B341CC86] - 29/09/2017 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28568] =>.Microsoft Windows®
[MD5.9E82A95D77AC78C84BA75FF896B060BF] - 29/09/2017 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [93184] =>.Microsoft Corporation
[MD5.6D83565C1652E80447EDEA6947FA89D7] - 29/09/2017 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [159744] =>.Microsoft Corporation
[MD5.9910E9CFF5ECDCB225F82E72CE9DE459] - 29/09/2017 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [151040] =>.Microsoft Corporation
[MD5.99A34FD1F6431A10D8C3BB50E170D0F2] - 29/09/2017 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [86016] =>.Microsoft Corporation
[MD5.56FF074E50F9042FD2856AB3418F4B18] - 29/09/2017 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [105984] =>.Microsoft Corporation
[MD5.7BEC2AF23F586EFF0DB4DBF4331B0C70] - 29/09/2017 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [214016] =>.Microsoft Corporation
[MD5.34898F29BF0E9A84E183046318D17814] - 02/12/2017 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [495000] =>.Microsoft Windows®
[MD5.7FC54F2AF5EC52C7AC05AD90FFC757E6] - 01/01/2018 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [316928] =>.Microsoft Corporation
[MD5.E20EC8E25969ABD9F5FED6EDEA57EC0C] - 01/01/2018 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2395032] =>.Microsoft Windows®
[MD5.2E07EC2C1622F5E7B535D62DCD61F3AB] - 29/09/2017 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\Parport.sys [98816] =>.Microsoft Corporation
[MD5.E0220BB6580D34001D4D1D133052DAA4] - 29/09/2017 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [106496] =>.Microsoft Corporation
[MD5.DF83769C92527DB50653F8FB57D001FF] - 30/09/2017 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [182784] =>.Microsoft Corporation
[MD5.571D82ABAC428D902ACA0CF60373C039] - 29/09/2017 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [121240] =>.Microsoft Windows®
[MD5.5B27846CF4B1C21AFB3A35A8336BA02F] - 08/12/2017 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [401304] =>.Microsoft Windows®

---\\ Non Microsoft non disabled Windows Services (24) - 9s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
O23 - Service: AvrcpService (AvrcpService) . (.Realtek Semiconductor Corporation - Realtek Bluetooth AVRCP Service.) - C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe =>.Realtek Semiconductor Corp®
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: BTDevManager (BTDevManager) . (.Realtek All Rights Reserved - Realtek Bluetooth BTDevManager Service Appl.) - C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe =>.Realtek Semiconductor Corp®
O23 - Service: CCSDK (CCSDK) . (.Lenovo - CCSDK.) - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe =>.LENOVO®
O23 - Service: Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc. - Dropbox Update.) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
O23 - Service: DbxSvc (DbxSvc) . (.Dropbox, Inc. - Dropbox Service.) - C:\WINDOWS\System32\DbxSvc.exe =>.Dropbox, Inc.
O23 - Service: GDCAgent (GDCAgent) . (.Lenovo - GDCAgent.) - C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe =>.LENOVO®
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company - HP Support Solutions Framework Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.Hewlett-Packard Company®
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Rapid Storage Technology®
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\WINDOWS\System32\igfxCUIService.exe =>.Intel Corporation
O23 - Service: @oem41.inf,%ImcSvcDisplayName%;System Interface Foundation (ImControllerService) . (.Lenovo Group Limited - Lenovo.Modern.ImController.) - C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe =>.Lenovo®
O23 - Service: Intel(R) Biometric and Context Agent Service (IntelBCAsvc) . (.Intel(R) Corporation - Intel(R) Biometric and Context Agent Servic.) - C:\Program Files\Intel\BCA\pabeSvc64.exe =>.Intel(R) Biometric and Context Agent®
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe =>.NVIDIA Corporation®
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: TeamViewer 13 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 13.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®
O23 - Service: Intel Security True Key (TrueKey) . (.McAfee, Inc. - Intel Security True Key.) - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe =>.McAfee, Inc.®
O23 - Service: Intel Security True Key Scheduler (TrueKeyScheduler) . (.McAfee, Inc. - Intel Security True Key.) - C:\Program Files\TrueKey\McTkSchedulerService.exe =>.McAfee, Inc.®
O23 - Service: Intel Security True Key Service Helper (TrueKeyServiceHelper) . (.McAfee, Inc. - McAfee TrueKey Service helper EXE.) - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe =>.McAfee, Inc.®

---\\ Services not Microsoft (SR=Run, SS=Stop) (30) - 108s
SR - Auto [27/09/2017] [ 83984] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SR - Auto [03/04/2017] [ 83768] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
SR - Auto [02/03/2015] [ 41176] AvrcpService (AvrcpService) . (.Realtek Semiconductor Corporation.) - C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe =>.Realtek Semiconductor Corp®
SS - Demand [15/12/2017] [ 6971400] BattlEye Service (BEService) . (...) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe =>.BattlEye Innovations e.K.®
SR - Auto [12/08/2015] [ 462096] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SR - Auto [20/07/2015] [ 121560] BTDevManager (BTDevManager) . (.Realtek All Rights Reserved.) - C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe =>.Realtek Semiconductor Corp®
SR - Auto [29/07/2015] [ 650680] CCSDK (CCSDK) . (.Lenovo.) - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe =>.LENOVO®
SS - Demand [23/04/2017] [ 301560] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel(R) pGFX®
SS - Auto [13/02/2017] [ 143144] Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SS - Demand [13/02/2017] [ 143144] Service Mise à jour Dropbox (dbupdatem) (dbupdatem) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SR - Auto [08/02/2018] [ 51024] DbxSvc (DbxSvc) . (.Dropbox, Inc..) - C:\WINDOWS\System32\DbxSvc.exe =>.Dropbox, Inc®
SR - Auto [29/07/2015] [ 1155512] GDCAgent (GDCAgent) . (.Lenovo.) - C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe =>.LENOVO®
SR - Auto [24/06/2015] [ 1152656] NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
SS - Auto [29/04/2016] [ 154440] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [29/04/2016] [ 154440] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [12/08/2014] [ 136120] Google Updater Service (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe =>.Google Inc®
SR - Auto [16/03/2016] [ 28736] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.Hewlett-Packard Company®
SR - Auto [22/07/2015] [ 18856] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Rapid Storage Technology®
SR - Auto [23/04/2017] [ 373752] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\WINDOWS\System32\igfxCUIService.exe =>.Intel(R) pGFX®
SR - Auto [12/11/2017] [ 68408] @oem41.inf,%ImcSvcDisplayName%;System Interface Foundation (ImControllerService) . (.Lenovo Group Limited.) - C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe =>.Lenovo®
SR - Auto [25/11/2015] [ 3020440] Intel(R) Biometric and Context Agent Service (IntelBCAsvc) . (.Intel(R) Corporation.) - C:\Program Files\Intel\BCA\pabeSvc64.exe =>.Intel(R) Biometric and Context Agent®
SS - Demand [09/05/2017] [ 689464] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.®
SR - Auto [29/12/2016] [ 458176] NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
SR - Auto [15/06/2016] [ 1881144] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
SS - Auto [24/06/2015] [23007376] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe =>.NVIDIA Corporation®
SS - Auto [18/07/2017] [ 317408] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SR - Auto [15/12/2017] [10945776] TeamViewer 13 (TeamViewer) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe =>.TeamViewer GmbH®
SR - Auto [21/04/2016] [ 874784] Intel Security True Key (TrueKey) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe =>.McAfee, Inc.®
SR - Auto [21/04/2016] [ 15736] Intel Security True Key Scheduler (TrueKeyScheduler) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McTkSchedulerService.exe =>.McAfee, Inc.®
SR - Auto [21/04/2016] [ 86864] Intel Security True Key Service Helper (TrueKeyServiceHelper) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe =>.McAfee, Inc.®

---\\ Task Planned Automatically (Register) (20) - 80s
O38 - TASK: {05DFADF3-A48F-4D02-938D-D8793045EF78} [64Bits][\Hewlett-Packard\HP Support Assistant\PC Health Analysis] - (.Hewlett-Packard Company - HP Support Assistant.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [457272] =>.Hewlett-Packard Company
O38 - TASK: {0944785B-18CD-4F83-9496-A9C1B160E919} [64Bits][\Lenovo\Lenovo Customer Feedback Program 64] - (.Lenovo - Lenovo.TVT.CustomerFeedback.Agent.) -- C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832] =>.Lenovo
O38 - TASK: {1A01FE4C-4CD4-482B-8845-612A6CEBC375} [64Bits][\Lenovo\Experience Improvement] - (.Lenovo - Lenovo Experience Improvement.) -- C:\Program Files\Lenovo\ExperienceImprovement\LenovoExperienceImprovement.exe [287688] =>.Lenovo
O38 - TASK: {21FB2C9F-81B2-4997-8626-06576DB8084C} [64Bits][\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start] - (.Hewlett-Packard Company - HP Support Assistant.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [457272] =>.Hewlett-Packard Company
O38 - TASK: {2AC2325B-675C-40FF-9F41-F2BCAF51E5AC} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc.
O38 - TASK: {34C8C92E-32C9-406A-8B73-C4DB3BAC6735} [64Bits][\Lenovo\REACHit Agent Update] - (.Lenovo - REACHit Agent.) -- C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [676176] =>.Lenovo
O38 - TASK: {34D4A2C9-8B38-42F4-A405-E9D879CBBC0B} [64Bits][\DropboxUpdateTaskMachineCore] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144] =>.Dropbox, Inc.
O38 - TASK: {531DD7AA-437E-4002-B857-CBF0EEEFEEB7} [64Bits][\DolbySelectorTask] - (.Dolby Laboratories, Inc. - .) -- C:\Program Files\Dolby Digital Plus\ddp.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O38 - TASK: {558A8FDE-6322-4331-B00C-828E53D2089F} [64Bits][\Lenovo\ImController\TimeBasedEvents\0aafdd5b-60e9-48ec-b4eb-f2fb528dcd74] - (.Lenovo Group Limited - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68408] =>.Lenovo Group Limited
O38 - TASK: {68091D40-DFFA-420C-937F-0C7D3A21A11B} [64Bits][\CCleaner Update] - (.Piriform Ltd - CCleaner emergency updater.) -- C:\Program Files\CCleaner\CCUpdate.exe [498480] =>.Piriform Ltd
O38 - TASK: {764D0FDC-B28E-4029-A707-A590A92869A5} [64Bits][\DropboxUpdateTaskMachineUA] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144] =>.Dropbox, Inc.
O38 - TASK: {998CAD78-1DC2-47DC-A20D-E8B55CAB9B37} [64Bits][\Lenovo\ImController\TimeBasedEvents\43313d1b-7d24-4af5-93ce-81d68875dbbe] - (.Lenovo Group Limited - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68408] =>.Lenovo Group Limited
O38 - TASK: {A089399C-0DD8-4826-8F8A-3DD8F46B7439} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc.
O38 - TASK: {A6B35019-2C75-4019-901C-71452535BCB7} [64Bits][\CyberLink\Photo Master Gadget startup] - (.CyberLink Corp. - Lenovo Photo Master Update.) -- C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe [745240] =>.CyberLink Corp.
O38 - TASK: {B812E884-7925-4874-B186-B767716E7490} [64Bits][\Lenovo\REACHit Agent Startup] - (.Lenovo - REACHit Agent.) -- C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe [676176] =>.Lenovo
O38 - TASK: {BEE03A0E-A252-4F22-8C25-F68D63273A23} [64Bits][\Apple\AppleSoftwareUpdate] - (.Apple Inc. - Apple Software Update.) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [570240] =>.Apple Inc.
O38 - TASK: {C493B73D-5D8E-471C-A3CD-63644BF9140F} [64Bits][\Lenovo\ImController\TimeBasedEvents\3b5cc0e6-b91d-44f8-ab71-99c41a292560] - (.Lenovo Group Limited - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68408] =>.Lenovo Group Limited
O38 - TASK: {D1959884-E0EC-43E6-8341-9B398155F105} [64Bits][\Adobe Acrobat Update Task] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1171480] =>.Adobe Systems Incorporated
O38 - TASK: {DFFD46CB-9B9B-43B6-B45C-AD94528958D2} [64Bits][\Lenovo\ImController\TimeBasedEvents\d8c00186-7537-47dd-a4eb-ba38ee354273] - (.Lenovo Group Limited - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68408] =>.Lenovo Group Limited
O38 - TASK: {F2AC69A8-D144-49CD-8356-063821C3DCBD} [64Bits][\CCleanerSkipUAC] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [7972528] =>.Piriform Ltd

---\\ Auto loading programs from Registry and folders (32) - 10s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Defender notification icon.) -- C:\Program Files\Windows Defender\MSASCuiL.exe =>.Microsoft Windows®
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [RtHDVBg_Dolby] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [RtHDVBg_LENOVO_MICPKEY] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [RtsFT] . (.Realtek semiconductor - RTFTrack.) -- C:\WINDOWS\RTFTrack.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [MouseDriver] . (.Pixart Imaging Inc - pximouse.) -- C:\WINDOWS\System32\TiltWheelMouse.exe =>.Pixart Imaging Inc
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe =>.Intel Corporation
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA Corporation®
O4 - HKLM\..\Run: [ShadowPlay] . (.NVIDIA Corporation - NVIDIA Capture Server Proxy.) -- C:\Windows\system32\nvspcap64.dll =>.NVIDIA Corporation
O4 - HKLM\..\Run: [BtServer] . (.Realtek Semiconductor Corporation - Realtek Bluetooth BTServer Application.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.®
O4 - HKLM\..\Run: [LenovoUtility] . (.Lenovo(beijing) Limited - Lenovo Utility.) -- C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe =>.LENOVO®
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.dll =>.Logitech, Inc.
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud Services.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe =>.Apple Inc.®
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - HKCU\..\Run: [DashlanePlugin] . (.Dashlane, Inc. - Dashlane Plugin Agent.) -- C:\Users\User\AppData\Roaming\Dashlane\DashlanePlugin.exe =>.Dashlane®
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photo Stream.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe =>.Apple Inc.®
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKLM\..\Wow6432Node\Run: [Dropbox] . (.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc®
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-21-2299857798-2991222085-1858874209-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-2299857798-2991222085-1858874209-1001\..\Run: [iCloudServices] . (.Apple Inc. - iCloud Services.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe =>.Apple Inc.®
O4 - HKUS\S-1-5-21-2299857798-2991222085-1858874209-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl®
O4 - HKUS\S-1-5-21-2299857798-2991222085-1858874209-1001\..\Run: [DashlanePlugin] . (.Dashlane, Inc. - Dashlane Plugin Agent.) -- C:\Users\User\AppData\Roaming\Dashlane\DashlanePlugin.exe =>.Dashlane®
O4 - HKUS\S-1-5-21-2299857798-2991222085-1858874209-1001\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photo Stream.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe =>.Apple Inc.®
O4 - HKUS\S-1-5-21-2299857798-2991222085-1858874209-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKUS\S-1-5-21-2299857798-2991222085-1858874209-1001\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®

---\\ Process running (68) - 14s
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxCUIService Module.) -- C:\WINDOWS\system32\igfxCUIService.exe [0] [PID.2080] =>.Intel Corporation
[MD5.2328568EE63439A4A11F9DC0692E5527] - (.NVIDIA Corporation - NVIDIA Container.) -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176] [PID.3220] =>.NVIDIA Corporation®
[MD5.E155915445C9EFE0724A6C0DEF3DBD32] - (.Intel(R) Corporation - Intel(R) Biometric and Context Agent Servic.) -- C:\Program Files\Intel\BCA\pabeSvc64.exe [3020440] [PID.3228] =>.Intel(R) Biometric and Context Agent®
[MD5.B5C2F92EE1106DFE7BB1CCE4D35B6037] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462096] [PID.3236] =>.Apple Inc.®
[MD5.171CCFEB86294AFAA3609DB3899A841E] - (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656] [PID.3272] =>.NVIDIA Corporation®
[MD5.2F860584C523300AEC6B22F1A46FF044] - (.Realtek All Rights Reserved - Realtek Bluetooth BTDevManager Service Appl.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe [121560] [PID.3280] =>.Realtek Semiconductor Corp®
[MD5.7DEFAE8665BCEDDC2C9983138D69D7A5] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768] [PID.3288] =>.Apple Inc.®
[MD5.38622FFE9369D3EC01C0097235BD9279] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83984] [PID.3320] =>.Adobe Systems, Incorporated®
[MD5.A6102293847A7A2DF01E7BF7AC1C1F12] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144] [PID.3336] =>.NVIDIA Corporation®
[MD5.4B2469B9858FF03AA83947A05BE60447] - (.Realtek Semiconductor Corporation - Realtek Bluetooth AVRCP Service.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe [41176] [PID.3344] =>.Realtek Semiconductor Corp®
[MD5.229CE11457B931FF76797DCF983F11F6] - (.Lenovo Group Limited - Lenovo.Modern.ImController.) -- C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [68408] [PID.3356] =>.Lenovo®
[MD5.00000000000000000000000000000000] - (.Dropbox, Inc. - Dropbox Service.) -- C:\WINDOWS\system32\DbxSvc.exe [0] [PID.3384] =>.Dropbox, Inc.
[MD5.DED933679714745D0D1A49BF97F92F16] - (.McAfee, Inc. - Intel Security True Key.) -- C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [874784] [PID.3468] =>.McAfee, Inc.®
[MD5.1D6453238BE242D578F5BF365BE9D2FE] - (.McAfee, Inc. - McAfee TrueKey Service helper EXE.) -- C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86864] [PID.3488] =>.McAfee, Inc.®
[MD5.7139743C088045BA6BE0B7CCE6FA2D8F] - (.TeamViewer GmbH - TeamViewer 13.) -- C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776] [PID.3496] =>.TeamViewer GmbH®
[MD5.93A49F8ECC625EE8FD3BFC3C5FEB8D47] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1285568] [PID.3960] =>.NVIDIA Corporation®
[MD5.A1F58FFF448E4099297D6EE0641D4D0E] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144] [PID.6320] =>.Dropbox, Inc®
[MD5.BE586B5D1D73E1F07ED5AADDEFBCAA47] - (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776] [PID.6500] =>.NVIDIA Corporation®
[MD5.5F6A6961E2DF5C60F3D17C043D492E88] - (.Realtek Semiconductor Corporation - Realtek Bluetooth BTServer Application.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe [230104] [PID.6492] =>.Realtek Semiconductor Corp®
[MD5.6D9B10E0E92C87A34F9C78E60BB250BC] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2456632] [PID.2788] =>.NVIDIA Corporation®
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxEM Module.) -- C:\WINDOWS\system32\igfxEM.exe [0] [PID.3444] =>.Intel Corporation
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxHK Module.) -- C:\WINDOWS\system32\igfxHK.exe [0] [PID.3428] =>.Intel Corporation
[MD5.00000000000000000000000000000000] - (...) -- C:\WINDOWS\system32\igfxTray.exe [0] [PID.5136] =>.Intel Corporation
[MD5.F544E3EB8AB5B19AF535AACCB1752190] - (...) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe [86528] [PID.5424] =>.Skype Technologies
[MD5.8189001F994864B4C4CAE344494749E3] - (.Lenovo - CCSDK.) -- C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [650680] [PID.1608] =>.LENOVO®
[MD5.F346EA26FA420B44720D56C33EE338C7] - (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13877464] [PID.8508] =>.Realtek Semiconductor Corp®
[MD5.813006C133576159EBB6DE770D55267D] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880] [PID.8592] =>.Realtek Semiconductor Corp®
[MD5.B14370C5FF63C548BB880D21195F7CBC] - (. - FMAPP Application.) -- C:\Program Files\Realtek\Audio\HDA\FMAPP.exe [124440] [PID.8680] =>.Fortemedia Inc.®
[MD5.813006C133576159EBB6DE770D55267D] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880] [PID.8728] =>.Realtek Semiconductor Corp®
[MD5.813006C133576159EBB6DE770D55267D] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1393880] [PID.8788] =>.Realtek Semiconductor Corp®
[MD5.7CAEB68761339EB39589FE3FCA0C5A42] - (.Realtek semiconductor - RTFTrack.) -- C:\Windows\RTFTrack.exe [5052120] [PID.8828] =>.Realtek Semiconductor Corp®
[MD5.00000000000000000000000000000000] - (.Pixart Imaging Inc - pximouse.) -- C:\Windows\System32\TiltWheelMouse.exe [0] [PID.8928] =>.Pixart Imaging Inc
[MD5.E9566B95DEF8DFE53E1BDEE3FB723BA1] - (.Lenovo(beijing) Limited - Lenovo Utility.) -- C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272] [PID.6640] =>.LENOVO®
[MD5.E8BD456E1AFEEF50D35635ECC1DF36DA] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3937448] [PID.5384] =>.Synaptics Incorporated®
[MD5.F621F27D8793D474B63116B522D38FFD] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [201384] [PID.5348] =>.Synaptics Incorporated®
[MD5.D56EE61F9B62AD677395BF003A49B4A7] - (.Lenovo - GDCAgent.) -- C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1155512] [PID.9240] =>.LENOVO®
[MD5.900236357482B00944826354EEC6B93F] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe [288848] [PID.9692] =>.Google Inc®
[MD5.F107219B133E7E574DA052C5C88FFBF3] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe [366672] [PID.9736] =>.Google Inc®
[MD5.05E4EABEBBAEF43DE578B2560A35930F] - (.Hewlett-Packard Company - HP Support Solutions Framework Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [28736] [PID.10192] =>.Hewlett-Packard Company®
[MD5.F28CAA094A64E02E8EA9F42C81D4482E] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856] [PID.6116] =>.Intel Corporation - Rapid Storage Technology®
[MD5.1C61D98E88E4BE64D9B709447AA15912] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472] [PID.9452] =>.Intel Corporation - Rapid Storage Technology®
[MD5.4C3EA33A9F670629F4BF6DA88AF91F77] - (.McAfee, Inc. - Intel Security True Key.) -- C:\Program Files\TrueKey\McTkSchedulerService.exe [15736] [PID.9028] =>.McAfee, Inc.®
[MD5.8EE8C59E223E1859D23EB145042A59CE] - (.Lenovo - Lenovo CCSDKWing.) -- C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe [420280] [PID.9060] =>.LENOVO®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.6460] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.9824] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.10268] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.11052] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.10364] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.11200] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.10208] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.4992] =>.Google Inc®
[MD5.4879D1B0841E2C8414D7CE3757C5F366] - (.Dashlane, Inc. - Dashlane.) -- C:\Users\User\AppData\Roaming\Dashlane\Dashlane.exe [456656] [PID.7712] =>.Dashlane®
[MD5.486284B09FDB6C3E05B13FF28A42061B] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1171480] [PID.4008] =>.Adobe Systems, Incorporated®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.8704] =>.Google Inc®
[MD5.D64225FA4F367679A43872E3D9BE31B6] - (.Dashlane, Inc. - Dashlane Plugin Agent.) -- C:\Users\User\AppData\Roaming\Dashlane\DashlanePlugin.exe [504784] [PID.8316] =>.Dashlane®
[MD5.A60028C6B63F466D7C91EA260D109CC7] - (.CyberLink Corp. - Lenovo Photo Master Update.) -- C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterWorker.exe [745240] [PID.8120] =>.CyberLink Corp.®
[MD5.FA0CD76E9AC220E5393CF6DA97018327] - (.Oracle Corporation - Java Platform SE binary.) -- C:\Users\User\Downloads\JavaSetup8u161.exe [1861696] [PID.9424] =>.Oracle America, Inc.®
[MD5.2FA513B2689B60D5A40DCD0C6116870D] - (.Oracle Corporation - Java Platform SE binary.) -- C:\Users\User\AppData\Local\Temp\jds1059484.tmp\JavaSetup8u161.exe [1625664] [PID.1552] =>.Oracle America, Inc.®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.10732] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.7136] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.7896] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.9796] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.3668] =>.Google Inc®
[MD5.07BE3C72103D1B500571F3D4DE384B1A] - (...) -- C:\Users\User\AppData\Roaming\HP Photo Creations\Communicator.exe [186080] [PID.9604] =>.RocketLife®
[MD5.A05793CF7943718803C8AD64E0262CD0] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\User\Downloads\ZHPDiag3.exe [2989952] [PID.7640] =>.Nicolas Coolman
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.1488] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.6332] =>.Google Inc®
[MD5.BB15D361B629F50680894BFE78047D59] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1592664] [PID.3892] =>.Google Inc®

---\\ Google Chrome, Start,Search,Extensions (23) - 2s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://analytics.ecosia.org
G0 - GCSP: Preferences [User Data\Default][HomePage] http://cdn.ecosia.org
G0 - GCSP: Preferences [User Data\Default][HomePage] http://docs.google.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://logs.dashlane.com =>.Dashlane, Inc
G0 - GCSP: Preferences [User Data\Default][HomePage] http://notifications.ecosia.org
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ps.ecosia.org
G0 - GCSP: Preferences [User Data\Default][HomePage] http://sp.ecosia.org
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc.
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ws1.dashlane.com =>.Dashlane, Inc
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.ecosia.org
G2 - GCE: Preference [User][User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides}
G2 - GCE: Preference [User][User Data\Default] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [User][User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [User][User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [User][User Data\Default] [eedlgdlajadkbbjoobobefphmfkcchfk] Ecosia =>.Ecosia
G2 - GCE: Preference [User][User Data\Default] [emnoomldgleagdjapdeckpmebokijail] Wanteeed =>.wanteed.com
G2 - GCE: Preference [User][User Data\Default] [fdjamakpfbbddfjaooikfcpapjohcfmg] Dashlane =>.Dashlane, Inc
G2 - GCE: Preference [User][User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets}
G2 - GCE: Preference [User][User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [User][User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] Michael Gundlach =>.Wladimir Palant {AdBlock}
G2 - GCE: Preference [User][User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [User][User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [User][User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (1) - 4s
P2 - EXT FILE: (.Microsoft Corporation - The plugin allows you to have a better expe.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npMeetingJoinPluginOC.dll =>.Microsoft Corporation®

---\\ Internet Explorer Extensions, Start, Search (17) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://lenovo15.msn.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.lenovo.com =>.Lenovo Group Limited
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Browser.) (11.00.16299.15 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation

---\\ Internet Explorer, Proxy Management (3) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object (BHO) (2) - 1s
O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files\Microsoft Office\Office15\OCHelper.dll =>.Microsoft Corporation®
O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®

---\\ Global shortcuts Startup (125) - 66s
O4 - GS\Desktop [Administrateur]: Dashlane.lnk . (.Dashlane, Inc. - Dashlane.) C:\Users\User\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - GS\Desktop [Administrateur]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Hammer & Chisel Inc.®
O4 - GS\Desktop [Administrateur]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič®
O4 - GS\Desktop [Administrateur]: Photoshop.lnk . (.PainteR - Adobe Photoshop CS6 Pre-Release Portable.) C:\Users\User\Desktop\Crack\PhotoShop CS6\PhotoshopCS6Portable.exe =>.PainteR
O4 - GS\Desktop [Administrateur]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [Administrateur]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Desktop [Administrateur]: Vegas Pro 13.lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\Desktop [Administrateur]: VirtualDJ 8.lnk . (.Atomix Productions - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj8.exe =>.Atomix Productions Inc.®
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\Quicklaunch [Administrateur]: GeoGebra.lnk . (...) C:\Program Files (x86)\GeoGebra 5.0\GeoGebra.exe =>.International GeoGebra Institute®
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: Microsoft Outlook.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE /recycle =>.Microsoft Corporation
O4 - GS\Quicklaunch [Administrateur]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: WebZIP.lnk . (.Spidersoft - WebZIP.) C:\Program Files (x86)\WebZIP 6\WebZIP.exe
O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\sendTo [Administrateur]: Bluetooth File Transfer.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Administrateur]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: Word 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Startup [Administrateur]: Alertes de surveillance de l'encre - HP Deskjet 2050 J510 series.lnk . (.Microsoft Corporation - Windows host process (Rundll32).) C:\WINDOWS\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 2050 J510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN0972P14G05D1;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Startup [Administrateur]: Monitor Ink Alerts - HP Deskjet 2050 J510 series.lnk . (.Microsoft Corporation - Windows host process (Rundll32).) C:\WINDOWS\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 2050 J510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN0972P14G05D1;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Programs [Administrateur]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Features On Demand Helper.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Administrateur]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Desktop [User]: Dashlane.lnk . (.Dashlane, Inc. - Dashlane.) C:\Users\User\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - GS\Desktop [User]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Hammer & Chisel Inc.®
O4 - GS\Desktop [User]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič®
O4 - GS\Desktop [User]: Photoshop.lnk . (.PainteR - Adobe Photoshop CS6 Pre-Release Portable.) C:\Users\User\Desktop\Crack\PhotoShop CS6\PhotoshopCS6Portable.exe =>.PainteR
O4 - GS\Desktop [User]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [User]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Desktop [User]: Vegas Pro 13.lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\Desktop [User]: VirtualDJ 8.lnk . (.Atomix Productions - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj8.exe =>.Atomix Productions Inc.®
O4 - GS\Desktop [User]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [User]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\Quicklaunch [User]: GeoGebra.lnk . (...) C:\Program Files (x86)\GeoGebra 5.0\GeoGebra.exe =>.International GeoGebra Institute®
O4 - GS\Quicklaunch [User]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [User]: Microsoft Outlook.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE /recycle =>.Microsoft Corporation
O4 - GS\Quicklaunch [User]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Quicklaunch [User]: WebZIP.lnk . (.Spidersoft - WebZIP.) C:\Program Files (x86)\WebZIP 6\WebZIP.exe
O4 - GS\Quicklaunch [User]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\sendTo [User]: Bluetooth File Transfer.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [User]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [User]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [User]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [User]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\TaskBar [User]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [User]: Word 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Startup [User]: Alertes de surveillance de l'encre - HP Deskjet 2050 J510 series.lnk . (.Microsoft Corporation - Windows host process (Rundll32).) C:\WINDOWS\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 2050 J510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN0972P14G05D1;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Startup [User]: Monitor Ink Alerts - HP Deskjet 2050 J510 series.lnk . (.Microsoft Corporation - Windows host process (Rundll32).) C:\WINDOWS\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 2050 J510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN0972P14G05D1;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Programs [User]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Features On Demand Helper.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [User]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [User]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [User]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Desktop [WDAGUtilityAccount]: Dashlane.lnk . (.Dashlane, Inc. - Dashlane.) C:\Users\User\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - GS\Desktop [WDAGUtilityAccount]: Discord.lnk . (.GitHub - Update.) C:\Users\User\AppData\Local\Discord\Update.exe --processStart Discord.exe =>.Hammer & Chisel Inc.®
O4 - GS\Desktop [WDAGUtilityAccount]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič®
O4 - GS\Desktop [WDAGUtilityAccount]: Photoshop.lnk . (.PainteR - Adobe Photoshop CS6 Pre-Release Portable.) C:\Users\User\Desktop\Crack\PhotoShop CS6\PhotoshopCS6Portable.exe =>.PainteR
O4 - GS\Desktop [WDAGUtilityAccount]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Desktop [WDAGUtilityAccount]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Desktop [WDAGUtilityAccount]: Vegas Pro 13.lnk . (.Sony Creative Software Inc. - .) C:\Program Files (x86)\Sony\Vegas Pro 13.0\vegas130.exe =>.Sony Creative Software Inc.
O4 - GS\Desktop [WDAGUtilityAccount]: VirtualDJ 8.lnk . (.Atomix Productions - VirtualDJ.) C:\Program Files (x86)\VirtualDJ\virtualdj8.exe =>.Atomix Productions Inc.®
O4 - GS\Desktop [WDAGUtilityAccount]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\User\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [WDAGUtilityAccount]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\Quicklaunch [WDAGUtilityAccount]: GeoGebra.lnk . (...) C:\Program Files (x86)\GeoGebra 5.0\GeoGebra.exe =>.International GeoGebra Institute®
O4 - GS\Quicklaunch [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [WDAGUtilityAccount]: Microsoft Outlook.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE /recycle =>.Microsoft Corporation
O4 - GS\Quicklaunch [WDAGUtilityAccount]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\Quicklaunch [WDAGUtilityAccount]: WebZIP.lnk . (.Spidersoft - WebZIP.) C:\Program Files (x86)\WebZIP 6\WebZIP.exe
O4 - GS\Quicklaunch [WDAGUtilityAccount]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc®
O4 - GS\sendTo [WDAGUtilityAccount]: Bluetooth File Transfer.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [WDAGUtilityAccount]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [WDAGUtilityAccount]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [WDAGUtilityAccount]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [WDAGUtilityAccount]: TeamViewer.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe --sendto =>.TeamViewer GmbH®
O4 - GS\TaskBar [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [WDAGUtilityAccount]: Word 2013.lnk . (...) C:\Windows\Installer\{90150000-0011-0000-1000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Startup [WDAGUtilityAccount]: Alertes de surveillance de l'encre - HP Deskjet 2050 J510 series.lnk . (.Microsoft Corporation - Windows host process (Rundll32).) C:\WINDOWS\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 2050 J510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN0972P14G05D1;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Startup [WDAGUtilityAccount]: Monitor Ink Alerts - HP Deskjet 2050 J510 series.lnk . (.Microsoft Corporation - Windows host process (Rundll32).) C:\WINDOWS\system32\RunDll32.exe "C:\Program Files\HP\HP Deskjet 2050 J510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN0972P14G05D1;CONNECTION=USB;MONITOR=1; =>..Microsoft Corporation
O4 - GS\Programs [WDAGUtilityAccount]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Features On Demand Helper.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [WDAGUtilityAccount]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [WDAGUtilityAccount]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [WDAGUtilityAccount]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe =>.TeamSpeak Systems GmbH®
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - GS\CommonDesktop [Public]: EduPython.lnk . (.Vincent MAILLE - .) C:\EduPython\EduPython.exe =>.Vincent MAILLE
O4 - GS\CommonDesktop [Public]: Google Earth Pro.lnk . (.Google - .) C:\Program Files (x86)\Google\Google Earth Pro\client\googleearth.exe =>.Google
O4 - GS\CommonDesktop [Public]: iTunes.lnk . (.Apple Inc. - .) C:\Program Files (x86)\iTunes\iTunes.exe =>.Apple Inc.
O4 - GS\CommonDesktop [Public]: Picasa 3.lnk . (.Google Inc. - Picasa.) C:\Program Files (x86)\Google\Picasa3\Picasa3.exe =>.Google Inc®
O4 - GS\CommonDesktop [Public]: TI Connect CE.lnk . (.Texas Instruments - Connect and manage data on TI calculators..) C:\Program Files (x86)\TI Education\TI Connect CE\TI Connect CE.exe TI Connect CE =>.Texas Instruments®
O4 - GS\Programs [Public]: Fonctionnalités optionnelles.lnk . (.Microsoft Corporation - Features On Demand Helper.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\User\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Public]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Users\User\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe =>.TeamSpeak Systems GmbH®
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\internet explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Notepad.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Remote Desktop Connection.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Snipping Tool.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Steps Recorder.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Windows Wordpad Application.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - XPS Viewer.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Character Map.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Apple Software Update.lnk . (...) C:\WINDOWS\Installer\{52D87F32-70E4-4348-8148-C0B9F35B1314}\AppleSoftwareUpdateIco.exe =>.Apple Inc.
O4 - GS\ProgramsCommon [Public]: Audacity.lnk . (.The Audacity Team - Audacity®, the Free, Cross-Platform Sound E.) C:\Program Files (x86)\Audacity\audacity.exe =>.The Audacity Team
O4 - GS\ProgramsCommon [Public]: Epic Games Launcher.lnk . (.Epic Games, Inc. - UnrealEngineLauncher.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe =>.Epic Games Inc.®
O4 - GS\ProgramsCommon [Public]: GIMP 2.lnk . (.Spencer Kimball, Peter Mattis and the GIMP Developmen - GNU Image Manipulation Program.) C:\Program Files\GIMP 2\bin\gimp-2.8.exe =>.Jernej Simončič®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\ProgramsCommon [Public]: Google Earth Pro.lnk . (.Google - .) C:\Program Files (x86)\Google\Google Earth Pro\client\googleearth.exe =>.Google
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Movie Maker.lnk . (.Microsoft Corporation - Movie Maker.) C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Photo Gallery.lnk . (.Microsoft Corporation - Photo Gallery.) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: TeamSpeak 3 Client.lnk . (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe =>.TeamSpeak Systems GmbH®
O4 - GS\ProgramsCommon [Public]: TeamViewer 13.lnk . (.TeamViewer GmbH - TeamViewer 13.) C:\Program Files (x86)\TeamViewer\TeamViewer.exe =>.TeamViewer GmbH®
O4 - GS\ProgramsCommon [Public]: True Key.lnk . (...) C:\Program Files\Intel Security\True Key\Application\truekey.exe --open-source=startmenu =>.McAfee, Inc.®
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation

---\\ Lop.com/Domain Hijackers (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{3bf60d6f-9666-4a20-9f3f-c9f777bacf09}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{ab26eb35-e0f9-470d-bd09-10e34d0bfa20}: DhcpNameServer = 169.254.132.69
O17 - HKLM\System\CCS\Services\Tcpip\..\{ac564cf8-f2eb-4f7d-91af-ff9be4eb7bca}: DhcpNameServer = 172.20.10.1 =>.Private IP

---\\ Extra protocols (25) - 3s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files\Microsoft Office\Office15\MSOSB.DLL =>.Microsoft Corporation®
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Software installed (128) - 87s
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc®
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824245926} =>.Adobe Systems Incorporated
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {E92BB800-BCC5-4C25-8102-AC2C3B7C7C1E} =>.Apple Inc.
O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {9C912B1E-06DD-43EF-BB2B-45CB2C88BAAE} =>.Apple Inc.
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {0A596141-97D5-45FA-9281-98DFAF48D579} =>.Apple Inc.
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {52D87F32-70E4-4348-8148-C0B9F35B1314} =>.Apple Inc.
O42 - Logiciel: Audacity 2.1.0 - (.Audacity Team.) [HKLM][64Bits] -- Audacity_is1 =>.Audacity Team
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-89D5-25E1F52AB28F} =>.Apple Inc.
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {AF312B06-5C5C-468E-89B3-BE6DE2645722} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F} =>.Cisco Systems, Inc.
O42 - Logiciel: Components - (.Lenovo.) [HKLM][64Bits] -- {1720B0E0-C520-43A6-B677-97A1D80F3B99} =>.Lenovo
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: Dashlane - (.Dashlane SAS.) [HKCU][64Bits] -- Dashlane =>.Dashlane SAS
O42 - Logiciel: Discord - (.Discord Inc..) [HKCU][64Bits] -- Discord =>.Hammer & Chisel Inc.®
O42 - Logiciel: Dofus - (.Ankama.) [HKCU][64Bits] -- 2744A393-554C-4E35-A24F-DEF0392B4484-2 =>.Ankama Games®
O42 - Logiciel: Dolby Digital Plus Home Theater - (.Dolby Laboratories Inc.) [HKLM][64Bits] -- {7E3D8FA1-6092-469A-955B-68FC4A2C67CA} =>.Dolby Laboratories Inc
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKLM][64Bits] -- Dropbox =>.Dropbox, Inc®
O42 - Logiciel: Dropbox Update Helper - (.Dropbox, Inc..) [HKLM][64Bits] -- {099218A5-A723-43DC-8DB5-6173656A1E94} =>.Dropbox, Inc.
O42 - Logiciel: EduPython 2.3 - (.V. MAILLE.) [HKLM][64Bits] -- EduPython_2.3_is1 =>.V. MAILLE
O42 - Logiciel: Epic Games Launcher - (.Epic Games, Inc..) [HKLM][64Bits] -- {AAA3417F-FEAD-4AF7-9C01-9FAE1BB44E3D} =>.Epic Games, Inc.
O42 - Logiciel: Epic Games Launcher Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] -- {66C5838F-B854-4A55-89E6-A6138747A4DF} =>.Epic Games, Inc.
O42 - Logiciel: FileZilla Client 3.18.0 - (.Tim Kosse.) [HKCU][64Bits] -- FileZilla Client =>.Tim Kosse
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B} =>.Microsoft Corporation
O42 - Logiciel: GeoGebra 5 - (.International GeoGebra Institute.) [HKLM][64Bits] -- GeoGebra 5 =>.International GeoGebra Institute
O42 - Logiciel: GIMP 2.8.22 - (.The GIMP Team.) [HKLM][64Bits] -- GIMP-2_is1 =>.Jernej Simončič®
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Earth Pro - (.Google.) [HKLM][64Bits] -- {D9EF644E-2FAE-493B-8180-5617CC774C4F} =>.Google
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {0CC8AE1D-F5AA-4143-8FAD-E017E0E9EE70} =>.Hewlett-Packard
O42 - Logiciel: HP Photo Creations - (.HP.) [HKCU][64Bits] -- HP Photo Creations =>.RocketLife®
O42 - Logiciel: HP Support Assistant - (.HP.) [HKLM][64Bits] -- {78E2C850-ADA6-420D-BA35-2F4A9BE733CC} =>.HP
O42 - Logiciel: HP Support Solutions Framework - (.HP.) [HKLM][64Bits] -- {EB72DB50-C935-4C26-8349-69828F198902} =>.HP
O42 - Logiciel: iCloud - (.Apple Inc..) [HKLM][64Bits] -- {5B1A59DA-D1EC-4C3A-A996-DF011A0A9668} =>.Apple Inc.
O42 - Logiciel: Intel Security True Key - (.Intel Security.) [HKLM][64Bits] -- TrueKey =>.McAfee, Inc.®
O42 - Logiciel: Intel(R) Biometric and Context Agent - (.Intel Corporation.) [HKLM][64Bits] -- {526002E5-7D5B-4703-A4E3-BA566AED5D8A} =>.Intel Corporation
O42 - Logiciel: Intel(R) Biometric and Context Agent Redistributables - (.Intel Corporation.) [HKLM][64Bits] -- {E6D505B9-1A18-4F67-9BE0-D37B5164D581} =>.Intel Corporation
O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel Corporation.) [HKLM][64Bits] -- {B685D0AD-42A8-4A39-9BFE-8C063FA9AF29} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {8B0B53D2-F5B8-4A67-93B0-5960D6ED6186} =>.Intel Corporation
O42 - Logiciel: Intel(R) ME UninstallLegacy - (.Intel Corporation.) [HKLM][64Bits] -- {FD37351B-3074-4652-8188-1B3FB784EC4E} =>.Intel Corporation
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel(R) pGFX®
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {303C5CD6-2525-49C5-9E49-DBD92F9F63BD} =>.Intel Corporation
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} =>.Intel Corporation
O42 - Logiciel: Intel® RealSense™ SDK 2014 Runtime (x64): Core - (.Intel Corporation.) [HKLM][64Bits] -- {37D41A97-6B02-4C30-8753-85107BE1D674} =>.Intel Corporation
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {F0C7385A-9D20-45F3-8101-05D383885180} =>.Apple Inc.
O42 - Logiciel: Java 8 Update 161 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180161F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: KMSpico v9.3 - (..) [HKLM][64Bits] -- KMSpico_is1 =>HackTool.KMSpico
O42 - Logiciel: Launcher Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] -- {c6c5a357-c7ca-4a5f-9789-3bb1af579253} =>.Epic Games Inc.®
O42 - Logiciel: Lenovo EasyCamera - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Lenovo Experience Improvement - (.Lenovo.) [HKLM][64Bits] -- LenovoExperienceImprovement =>.LENOVO®
O42 - Logiciel: Lenovo FusionEngine - (.Lenovo, Inc..) [HKLM][64Bits] -- Lenovo FusionEngine =>.Lenovo, Inc.
O42 - Logiciel: Lenovo OneKey Recovery - (.CyberLink Corp..) [HKLM][64Bits] -- {46F4D124-20E5-4D12-BE52-EC177A7A4B42} =>.CyberLink Corp.®
O42 - Logiciel: Lenovo OneKey Recovery - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42} =>.CyberLink Corp.®
O42 - Logiciel: Lenovo Photo Master - (.CyberLink Corp..) [HKLM][64Bits] -- {BC94C56A-3649-420C-8756-2ADEBE399D33} =>.CyberLink Corp.
O42 - Logiciel: Lenovo QuickOptimizer - (.Lenovo.) [HKLM][64Bits] -- {8D2C871B-1B9F-45AC-9C43-2BB18089CDFA} =>.Lenovo
O42 - Logiciel: Logiciel de base du périphérique HP Deskjet 2050 J510 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {B7F83103-C83C-4081-B9B7-50FC6A6F929E} =>.Hewlett-Packard Co.
O42 - Logiciel: Logiciel pour périphérique à chipset Intel® - (.Intel(R) Corporation.) [HKLM][64Bits] -- {c6cff78a-cccb-49d5-be68-ae0ec5f0d48a} =>.Intel Corporation - Software and Firmware Products®
O42 - Logiciel: Manuels d'utilisateur - (.Lenovo.) [HKLM][64Bits] -- {F07C2CF8-4C53-4EC3-8162-A6221E36EB88} =>.Lenovo
O42 - Logiciel: Metric Collection SDK - (.Lenovo Group Limited.) [HKLM][64Bits] -- {DDAA788F-52E6-44EA-ADB8-92837B11BF26} =>.Lenovo Group Limited
O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM][64Bits] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196} =>.Lenovo Group Limited
O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtensio - (.Microsoft Corporation.) [HKLM][64Bits] -- {B0169E83-757B-EF66-E2F0-391944D785BC} =>.Microsoft Corporation
O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Minecraft - (.Mojang.) [HKLM][64Bits] -- {1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872} =>.Mojang
O42 - Logiciel: Mises à jour NVIDIA 2.4.5.57 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM][64Bits] -- {3BFC9CAE-091D-11E4-886A-F04DA23A5C58} =>.Sony Creative Software Inc.
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} =>.Microsoft
O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ =>.Notepad++ Team
O42 - Logiciel: NVIDIA Display Container - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Display Container LS - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA GeForce Experience 2.4.5.57 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA GeForce Experience Service - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA LED Visualizer 1.0 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.15.0428 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Network Service - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Optimus Update 2.4.5.57 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA ShadowPlay 2.4.5.57 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Virtual Audio 1.2.40 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver =>.NVIDIA Corporation
O42 - Logiciel: OpenOffice 4.1.3 - (.Apache Software Foundation.) [HKLM][64Bits] -- {3E1679DA-5081-44AA-B4C2-BF8EE7E107E0} =>.Apache Software Foundation
O42 - Logiciel: Panneau de configuration NVIDIA 376.54 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation
O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3 =>.Google, Inc.
O42 - Logiciel: Pipix version 3.0.9.2 - (.Pixelife.) [HKLM][64Bits] -- {C3894ED5-138E-43C9-92B6-47D228390FA3}_is1 =>.Pixelife
O42 - Logiciel: REACHit - (.Lenovo.) [HKLM][64Bits] -- {4532E4C5-C84D-4040-A044-ECFCC5C6995B} =>.Lenovo
O42 - Logiciel: REALTEK Bluetooth Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9D3D8C60-A5EF-4123-B2B9-172095903AB} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek Wireless LAN Adapter Software - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {E462B252-195B-47EA-98E2-BAC3C2DF7D37} =>.Realtek Semiconductor Corp.
O42 - Logiciel: Security Update for Skype for Business 2015 (KB3213568) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{70EE6BB9-3D3C-4BA1-8B88-2647A0567100} =>.Microsoft Corporation®
O42 - Logiciel: SHAREit - (.Lenovo.) [HKLM][64Bits] -- SHAREit_is1 =>.LENOVO®
O42 - Logiciel: SHIELD Streaming - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv =>.NVIDIA Corporation
O42 - Logiciel: SHIELD Wireless Controller Driver - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController =>.NVIDIA Corporation
O42 - Logiciel: Skype™ 7.40 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {3B7E914A-93D5-4A29-92BB-AF8C3F66C431} =>.Skype Technologies S.A.
O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify =>.Spotify AB®
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKCU][64Bits] -- TeamSpeak 3 Client =>.TeamSpeak Systems GmbH
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKLM][64Bits] -- TeamSpeak 3 Client =>.TeamSpeak Systems GmbH
O42 - Logiciel: TeamViewer 13 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer =>.TeamViewer GmbH®
O42 - Logiciel: Teleport Pro - (.Tennyson Maxwell Information Systems, Inc..) [HKLM][64Bits] -- Teleport Pro
O42 - Logiciel: TI Connect™ CE - (.Texas Instruments Inc..) [HKLM][64Bits] -- {8B1F3A89-E195-48CD-8487-A37BA5308E76} =>.Texas Instruments Inc.
O42 - Logiciel: Update for Skype for Business 2015 (KB4011638) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8B0F5A1C-5EFC-423D-91C5-EAB7F8CEC9E7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Skype for Business 2015 (KB4011638) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8B0F5A1C-5EFC-423D-91C5-EAB7F8CEC9E7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Skype for Business 2015 (KB4011638) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{8B0F5A1C-5EFC-423D-91C5-EAB7F8CEC9E7} =>.Microsoft Corporation®
O42 - Logiciel: User Manuals - (.Lenovo.) [HKLM][64Bits] -- InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88} =>.Lenovo
O42 - Logiciel: Vegas Pro 13.0 (64-bit) - (.Sony.) [HKLM][64Bits] -- {384476AE-091D-11E4-A980-F04DA23A5C58} =>.Sony
O42 - Logiciel: VirtualDJ 8 - (.Atomix Productions.) [HKLM][64Bits] -- {E1962904-0960-42F6-9072-3EC7D66A5495} =>.Atomix Productions
O42 - Logiciel: WebZIP - (..) [HKLM][64Bits] -- WebZIP
O42 - Logiciel: WinHTTrack Website Copier 3.48-22 (x64) - (.HTTrack.) [HKLM][64Bits] -- WinHTTrack Website Copier_is1 =>.Open Source Developer, Xavier Roche®
O42 - Logiciel: WinRAR 5.31 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®

---\\ HKCU & HKLM Software Keys (169) - 88s
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\Caphyon =>.Caphyon
HKLM\SOFTWARE\CDDB =>.Cddb Software
HKLM\SOFTWARE\Cyberlink =>.CyberLink Corporation
HKLM\SOFTWARE\DivXNetworks =>.DivXNetworks
HKLM\SOFTWARE\Dropbox =>.Dropbox
HKLM\SOFTWARE\DropboxUpdate =>.Dropbox Inc.
HKLM\SOFTWARE\Epic Games =>.Epic Games
HKLM\SOFTWARE\EpicGames =>.Epic Games
HKLM\SOFTWARE\FileZilla 3 =>.FileZilla
HKLM\SOFTWARE\FusionEngine =>.FusionEngine
HKLM\SOFTWARE\Gabest =>.Gabest
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\Greatis =>.Greatis Software
HKLM\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\IM Providers =>.IM Providers
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\Intel Security =>.Intel Security
HKLM\SOFTWARE\InterVideo =>.InterVideo
HKLM\SOFTWARE\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Khronos =>.Khronos
HKLM\SOFTWARE\Lenovo =>.Lenovo
HKLM\SOFTWARE\LogMeInRescueCallingCard =>.LogMeIn Entreprise
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\Mojang =>.Mojang
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Notepad++ =>.Don Ho
HKLM\SOFTWARE\Nuance =>.Nuance
HKLM\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OpenOffice =>.SourceForge
HKLM\SOFTWARE\Oracle =>.Oracle
HKLM\SOFTWARE\PowerPivot =>.PowerPivot
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RtWLan =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Skype =>.Skype
HKLM\SOFTWARE\Sony Creative Software =>.Sony Creative Software
HKLM\SOFTWARE\TeamViewer =>.TeamViewer
HKLM\SOFTWARE\Tennyson Maxwell
HKLM\SOFTWARE\Texas Instruments =>.Texas Instruments
HKLM\SOFTWARE\TrueKey =>.Intel Corporation
HKLM\SOFTWARE\VirtualDJ =>.Atomix Production
HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\WOW6432Node\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\WOW6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\WOW6432Node\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\WOW6432Node\Caphyon =>.Caphyon
HKLM\SOFTWARE\WOW6432Node\CDDB =>.Cddb Software
HKLM\SOFTWARE\WOW6432Node\Cyberlink =>.CyberLink Corporation
HKLM\SOFTWARE\WOW6432Node\DivXNetworks =>.DivXNetworks
HKLM\SOFTWARE\WOW6432Node\Dropbox =>.Dropbox
HKLM\SOFTWARE\WOW6432Node\DropboxUpdate =>.Dropbox Inc.
HKLM\SOFTWARE\WOW6432Node\Epic Games =>.Epic Games
HKLM\SOFTWARE\WOW6432Node\EpicGames =>.Epic Games
HKLM\SOFTWARE\WOW6432Node\FileZilla 3 =>.FileZilla
HKLM\SOFTWARE\WOW6432Node\FusionEngine =>.FusionEngine
HKLM\SOFTWARE\WOW6432Node\Gabest =>.Gabest
HKLM\SOFTWARE\WOW6432Node\Google =>.Google
HKLM\SOFTWARE\WOW6432Node\Greatis =>.Greatis Software
HKLM\SOFTWARE\WOW6432Node\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\WOW6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel
HKLM\SOFTWARE\WOW6432Node\Intel Security =>.Intel Security
HKLM\SOFTWARE\WOW6432Node\InterVideo =>.InterVideo
HKLM\SOFTWARE\WOW6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\WOW6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\WOW6432Node\Lenovo =>.Lenovo
HKLM\SOFTWARE\WOW6432Node\LogMeInRescueCallingCard =>.LogMeIn Entreprise
HKLM\SOFTWARE\WOW6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfee.com =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\Mojang =>.Mojang
HKLM\SOFTWARE\WOW6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\WOW6432Node\Notepad++ =>.Don Ho
HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\WOW6432Node\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\WOW6432Node\OpenOffice =>.SourceForge
HKLM\SOFTWARE\WOW6432Node\Oracle =>.Oracle
HKLM\SOFTWARE\WOW6432Node\PowerPivot =>.PowerPivot
HKLM\SOFTWARE\WOW6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\WOW6432Node\RtWLan =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\WOW6432Node\Skype =>.Skype
HKLM\SOFTWARE\WOW6432Node\Sony Creative Software =>.Sony Creative Software
HKLM\SOFTWARE\WOW6432Node\TeamViewer =>.TeamViewer
HKLM\SOFTWARE\WOW6432Node\Tennyson Maxwell
HKLM\SOFTWARE\WOW6432Node\Texas Instruments =>.Texas Instruments
HKLM\SOFTWARE\WOW6432Node\TrueKey =>.Intel Corporation
HKLM\SOFTWARE\WOW6432Node\VirtualDJ =>.Atomix Production
HKLM\SOFTWARE\WOW6432Node\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Ankama =>.Ankama
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\ASProtect =>.ASPack Software
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\CyberLink =>.CyberLink Corporation
HKCU\SOFTWARE\Dashlane =>.Dashlane
HKCU\SOFTWARE\Dashlane_profiles =>.Dashlane, Inc
HKCU\SOFTWARE\DirectShow =>.Microsoft Corporation
HKCU\SOFTWARE\Dropbox =>.Dropbox
HKCU\SOFTWARE\DropboxUpdate =>.Dropbox Inc.
HKCU\SOFTWARE\Eek
HKCU\SOFTWARE\Epic Games =>.Epic Games
HKCU\SOFTWARE\FileZilla Client =>.Tim Kosse
HKCU\SOFTWARE\Gabest =>.Gabest
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Greatis =>.Greatis Software
HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKCU\SOFTWARE\HP =>.HP
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\Intel Security =>.Intel Security
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Lenovo =>.Lenovo
HKCU\SOFTWARE\LogiShrd =>.LogiShrd
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Mojang =>.Mojang
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\OpenOffice =>.SourceForge
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\Pixart =>.Pixart Imaging Inc
HKCU\SOFTWARE\Pixelife =>.Pixelife
HKCU\SOFTWARE\ProtectedStorage =>.Microsoft Corporation
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RealtekVTIC =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\RocketDock =>.Punk Software
HKCU\SOFTWARE\RocketLife =>.RocketLife
HKCU\SOFTWARE\RocketLifeNetwork =>.RocketLife Network
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\skypeapp-a6d74ddd7c20 =>.Skype Technologies
HKCU\SOFTWARE\Sony Creative Software =>.Sony Creative Software
HKCU\SOFTWARE\Spidersoft
HKCU\SOFTWARE\Spotify =>.Spotify
HKCU\SOFTWARE\Synaptics =>.Synaptics
HKCU\SOFTWARE\SyncEngines =>.Microsoft Corporation
HKCU\SOFTWARE\TeamSpeak 3 Client =>.TeamSpeak
HKCU\SOFTWARE\TeamViewer =>.TeamViewer
HKCU\SOFTWARE\Tennyson Maxwell
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\Unity =>.Unity
HKCU\SOFTWARE\VirtualDJ =>.Atomix Production
HKCU\SOFTWARE\Visan =>.Visan Software
HKCU\SOFTWARE\WinHTTrack Website Copier =>.Xavier Roche
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft

---\\ Contents of the Common Files folders (339) - 140s
O43 - CFD: 30/12/2016 - [] AD -- C:\Program Files\Bonjour =>.Apple Inc.
O43 - CFD: 17/12/2017 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 17/12/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Dolby Digital Plus =>.Dolby Laboratories Inc
O43 - CFD: 15/12/2017 - [] D -- C:\Program Files\Epic Games =>.Epic Games
O43 - CFD: 21/04/2016 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 02/06/2016 - [] D -- C:\Program Files\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 22/12/2017 - [] D -- C:\Program Files\GIMP 2 =>.Jernej Simončič®
O43 - CFD: 10/02/2018 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files\HP =>.Hewlett-Packard
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Intel =>.Intel Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files\Intel Security =>.Intel Corporation
O43 - CFD: 06/01/2018 - [] D -- C:\Program Files\internet explorer =>.Microsoft Corporation
O43 - CFD: 06/06/2017 - [] D -- C:\Program Files\iPod =>.Apple Inc.®
O43 - CFD: 06/06/2017 - [] AD -- C:\Program Files\iTunes =>.Apple Inc.
O43 - CFD: 23/02/2017 - [] AD -- C:\Program Files\KMSpico =>HackTool.KMSpico
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Lenovo =>.Lenovo
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] AD -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files\Microsoft SQL Server =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files\Sony =>.Sony
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated®
O43 - CFD: 02/07/2016 - [] AD -- C:\Program Files\TeamSpeak 3 Client =>.TeamSpeak
O43 - CFD: 01/05/2016 - [] D -- C:\Program Files\TrueKey =>.Intel Corporation
O43 - CFD: 13/02/2016 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] AD -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\windows nt =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 10/02/2018 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 12/01/2017 - [] AD -- C:\Program Files\WinHTTrack =>.HTTrack
O43 - CFD: 30/04/2016 - [] AD -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 06/06/2017 - [] AD -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.
O43 - CFD: 04/05/2016 - [] AD -- C:\Program Files (x86)\Audacity =>.Audacity
O43 - CFD: 30/12/2016 - [] AD -- C:\Program Files (x86)\Bonjour =>.Apple Inc.
O43 - CFD: 23/09/2015 - [] D -- C:\Program Files (x86)\Cisco =>.Cisco Systems, Inc.
O43 - CFD: 11/02/2018 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 25/11/2016 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink Corporation
O43 - CFD: 30/10/2017 - [] D -- C:\Program Files (x86)\Dashlane =>.Dashlane
O43 - CFD: 10/02/2018 - [] D -- C:\Program Files (x86)\Dropbox =>.Dropbox, Inc®
O43 - CFD: 15/12/2017 - [] D -- C:\Program Files (x86)\Epic Games =>.Epic Games
O43 - CFD: 08/01/2017 - [] AD -- C:\Program Files (x86)\GeoGebra 5.0 =>.International GeoGebra Institute
O43 - CFD: 10/02/2018 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 17/12/2016 - [] D -- C:\Program Files (x86)\GUM96EF.tmp =>.Google Inc®
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files (x86)\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard
O43 - CFD: 25/11/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 23/09/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 06/01/2018 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 11/02/2018 - [] D -- C:\Program Files (x86)\Java =>.Oracle
O43 - CFD: 06/08/2017 - [] D -- C:\Program Files (x86)\Jingle Palette
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Lenovo =>.Lenovo
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 31/10/2016 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET =>.Microsoft Corporation
O43 - CFD: 23/09/2015 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files (x86)\Microsoft SQL Server =>.Microsoft Corporation
O43 - CFD: 27/10/2016 - [] AD -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 06/08/2017 - [] AD -- C:\Program Files (x86)\Minecraft =>.Microsoft Corporation
O43 - CFD: 02/11/2016 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 05/06/2016 - [] D -- C:\Program Files (x86)\Notepad++ =>.Don Ho
O43 - CFD: 23/09/2015 - [] D -- C:\Program Files (x86)\NSIS Uninstall Information =>.MSIS
O43 - CFD: 10/02/2017 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 24/08/2017 - [] AD -- C:\Program Files (x86)\OpenOffice 4 =>.OpenOffice.org
O43 - CFD: 02/06/2016 - [] AD -- C:\Program Files (x86)\Pipix =>.Minecraft Games
O43 - CFD: 23/09/2015 - [] AD -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 23/09/2015 - [] AD -- C:\Program Files (x86)\Realtek Wireless LAN Adapter Software =>.Realtek Semiconductor Corp.
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 17/12/2017 - [] RD -- C:\Program Files (x86)\Skype =>.Skype
O43 - CFD: 30/04/2016 - [] D -- C:\Program Files (x86)\Sony =>.Sony
O43 - CFD: 10/02/2018 - [] AD -- C:\Program Files (x86)\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 18/02/2017 - [] D -- C:\Program Files (x86)\Teleport Pro
O43 - CFD: 23/09/2015 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation
O43 - CFD: 30/09/2017 - [] AD -- C:\Program Files (x86)\TI Education =>.Texas Instruments®
O43 - CFD: 24/07/2017 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 14/01/2018 - [] D -- C:\Program Files (x86)\VirtualDJ =>.Atomix Production
O43 - CFD: 18/02/2017 - [] D -- C:\Program Files (x86)\WebZIP 6
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 27/10/2016 - [] AD -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\windows nt =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 30/09/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 14/12/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 17/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby =>.Dolby
O43 - CFD: 10/02/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox =>.Dropbox
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EduPython =>.Python
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 5 =>.International GeoGebra Institute
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP =>.Hewlett-Packard
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support =>.Hewlett-Packard
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud =>.Apple Inc.
O43 - CFD: 02/12/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel =>.Intel Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes =>.Apple Inc.
O43 - CFD: 11/02/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
O43 - CFD: 02/12/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo =>.Lenovo
O43 - CFD: 29/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 11/01/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ =>.Don Ho
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 02/12/2017 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3 =>.SourceForge
O43 - CFD: 16/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 =>.Google Inc.
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pipix =>.Minecraft Games
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek =>.Realtek
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony =>.Sony
O43 - CFD: 29/09/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Tools =>.Texas Instruments
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack =>.HTTrack
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 04/01/2018 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 20/06/2016 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 20/06/2016 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc.
O43 - CFD: 02/12/2017 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 18/12/2017 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 17/12/2017 - [] D -- C:\ProgramData\BootRacer =>.Greatis Software
O43 - CFD: 21/04/2016 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\Comms =>.Microsoft Corporation
O43 - CFD: 26/11/2016 - [] D -- C:\ProgramData\CyberLink =>.CyberLink Corporation
O43 - CFD: 02/12/2017 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 13/02/2017 - [] D -- C:\ProgramData\Dropbox =>.Dropbox
O43 - CFD: 30/12/2016 - [] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 =>.Gearbox Software
O43 - CFD: 15/12/2017 - [] D -- C:\ProgramData\Epic =>.Epic
O43 - CFD: 30/04/2016 - [] D -- C:\ProgramData\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 30/04/2016 - [] D -- C:\ProgramData\HP =>.Hewlett-Packard
O43 - CFD: 23/09/2015 - [] D -- C:\ProgramData\install_clap =>.Microsoft Corporation
O43 - CFD: 23/09/2015 - [] D -- C:\ProgramData\Intel =>.Intel Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\Lenovo =>.Lenovo
O43 - CFD: 02/05/2016 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 21/04/2016 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 03/12/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 11/01/2018 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 03/12/2017 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 21/04/2016 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 11/02/2018 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 16/12/2017 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 23/09/2015 - [] D -- C:\ProgramData\OneKey Recovery =>.Lenovo Group Limited
O43 - CFD: 11/02/2018 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 15/12/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 14/10/2017 - [] D -- C:\ProgramData\Realtek =>.Realtek
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\regid.1986-12.com.adobe =>.Adobe Inc.
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 17/12/2017 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 29/09/2017 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\ProgramData\Sony =>.Sony
O43 - CFD: 25/11/2016 - [0] D -- C:\ProgramData\SUPPORTDIR =>.Microsoft Corporation
O43 - CFD: 25/11/2016 - [] D -- C:\ProgramData\Temp =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 30/09/2017 - [] D -- C:\ProgramData\WindowsHolographicDevices =>.Microsoft Corporation
O43 - CFD: 13/01/2018 - [] AD -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 17/12/2016 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc.
O43 - CFD: 16/12/2017 - [] D -- C:\Program Files (x86)\Common Files\BattlEye =>.BattlEye
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation
O43 - CFD: 23/09/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation =>.Intel Corporation
O43 - CFD: 11/02/2018 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 23/09/2015 - [] D -- C:\Program Files (x86)\Common Files\LENOVO =>.Lenovo
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 17/12/2017 - [] D -- C:\Program Files (x86)\Common Files\Skype =>.Skype
O43 - CFD: 02/12/2017 - [] D -- C:\Program Files (x86)\Common Files\system =>.Microsoft Corporation
O43 - CFD: 27/10/2016 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 08/08/2017 - [] D -- C:\Users\User\AppData\Roaming\.minecraft =>.Microsoft Corporation
O43 - CFD: 13/01/2018 - [] D -- C:\Users\User\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 15/10/2017 - [] D -- C:\Users\User\AppData\Roaming\AnkamaCertificates =>.Ankama
O43 - CFD: 15/10/2017 - [] D -- C:\Users\User\AppData\Roaming\app =>.Ankama
O43 - CFD: 17/12/2016 - [] D -- C:\Users\User\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 04/05/2016 - [] D -- C:\Users\User\AppData\Roaming\Audacity =>.Audacity
O43 - CFD: 30/09/2017 - [] D -- C:\Users\User\AppData\Roaming\com.ti.et.elg.tiConnect.TIConnectApplication
O43 - CFD: 11/02/2018 - [] D -- C:\Users\User\AppData\Roaming\Dashlane =>.Dashlane
O43 - CFD: 20/01/2018 - [] D -- C:\Users\User\AppData\Roaming\discord =>.GitHub
O43 - CFD: 15/10/2017 - [] D -- C:\Users\User\AppData\Roaming\Dofus =>.Ankama
O43 - CFD: 13/02/2017 - [] D -- C:\Users\User\AppData\Roaming\Dropbox =>.Dropbox
O43 - CFD: 20/06/2016 - [] D -- C:\Users\User\AppData\Roaming\FileZilla =>.FileZilla
O43 - CFD: 08/01/2017 - [] D -- C:\Users\User\AppData\Roaming\GeoGebra 5.0 =>.International GeoGebra Institute
O43 - CFD: 27/04/2017 - [] D -- C:\Users\User\AppData\Roaming\Google =>.Google
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Roaming\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 08/06/2017 - [] D -- C:\Users\User\AppData\Roaming\HP Photo Creations =>.HP Photo Creations
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Roaming\hpqLog =>.Hewlett-Packard
O43 - CFD: 21/04/2016 - [] D -- C:\Users\User\AppData\Roaming\Intel Corporation =>.Intel Corporation
O43 - CFD: 29/04/2016 - [] D -- C:\Users\User\AppData\Roaming\java =>.Oracle
O43 - CFD: 29/04/2016 - [] D -- C:\Users\User\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 30/04/2016 - [0] D -- C:\Users\User\AppData\Roaming\Media Player Classic =>.Microsoft Corporation
O43 - CFD: 14/01/2018 - [] SD -- C:\Users\User\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Roaming\My Bluetooth =>.Legitimate
O43 - CFD: 05/06/2016 - [] D -- C:\Users\User\AppData\Roaming\Notepad++ =>.Don Ho
O43 - CFD: 01/06/2016 - [] D -- C:\Users\User\AppData\Roaming\NVIDIA =>.nVidia Corporation
O43 - CFD: 24/08/2017 - [] D -- C:\Users\User\AppData\Roaming\OpenOffice =>.SourceForge
O43 - CFD: 30/04/2016 - [0] D -- C:\Users\User\AppData\Roaming\Publish Providers =>.Legitimate
O43 - CFD: 15/10/2017 - [] D -- C:\Users\User\AppData\Roaming\Reg
O43 - CFD: 24/09/2017 - [] D -- C:\Users\User\AppData\Roaming\Skype =>.Skype
O43 - CFD: 02/01/2018 - [] D -- C:\Users\User\AppData\Roaming\Sony =>.Sony
O43 - CFD: 27/10/2016 - [] D -- C:\Users\User\AppData\Roaming\Sony Creative Software Inc =>.Sony Corporation
O43 - CFD: 18/02/2017 - [] D -- C:\Users\User\AppData\Roaming\Spadix =>.Spadix
O43 - CFD: 26/01/2018 - [] D -- C:\Users\User\AppData\Roaming\Spotify =>.Spotify
O43 - CFD: 29/04/2016 - [] D -- C:\Users\User\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 16/01/2018 - [] D -- C:\Users\User\AppData\Roaming\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 23/11/2016 - [] D -- C:\Users\User\AppData\Roaming\Texas Instruments =>.Texas Instruments
O43 - CFD: 17/12/2017 - [] D -- C:\Users\User\AppData\Roaming\TS3Client =>.TeamSpeak
O43 - CFD: 17/12/2017 - [] D -- C:\Users\User\AppData\Roaming\uTorrent
O43 - CFD: 07/09/2016 - [] D -- C:\Users\User\AppData\Roaming\Visan =>.Visan Industries
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 11/02/2018 - [] D -- C:\Users\User\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 31/05/2016 - [0] D -- C:\Users\User\AppData\Local\ActiveSync =>.Microsoft Corporation
O43 - CFD: 13/01/2018 - [] D -- C:\Users\User\AppData\Local\Adobe =>.Adobe
O43 - CFD: 15/10/2017 - [] D -- C:\Users\User\AppData\Local\Ankama =>.Ankama
O43 - CFD: 20/06/2016 - [] D -- C:\Users\User\AppData\Local\Apple =>.Apple Inc.
O43 - CFD: 17/12/2016 - [] D -- C:\Users\User\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 17/12/2016 - [] D -- C:\Users\User\AppData\Local\Apple Inc =>.Apple Inc.
O43 - CFD: 02/12/2017 - [0] SHD -- C:\Users\User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Local\CEF =>.CEF
O43 - CFD: 20/01/2018 - [] D -- C:\Users\User\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 03/12/2017 - [] D -- C:\Users\User\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 03/02/2018 - [] D -- C:\Users\User\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 21/04/2016 - [] D -- C:\Users\User\AppData\Local\CyberLink =>.CyberLink Corporation
O43 - CFD: 29/07/2017 - [0] D -- C:\Users\User\AppData\Local\DBG =>.DBG
O43 - CFD: 08/02/2018 - [0] D -- C:\Users\User\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 20/01/2018 - [] D -- C:\Users\User\AppData\Local\Discord =>.GitHub
O43 - CFD: 01/06/2016 - [] D -- C:\Users\User\AppData\Local\Downloaded Installations =>.Microsoft Corporation
O43 - CFD: 01/06/2017 - [] D -- C:\Users\User\AppData\Local\Dropbox =>.Dropbox
O43 - CFD: 07/11/2017 - [] D -- C:\Users\User\AppData\Local\E2A6D3DB-491E-4E0F-AB4C-FBECB0595FD0.aplzod
O43 - CFD: 02/11/2016 - [0] D -- C:\Users\User\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 15/12/2017 - [] D -- C:\Users\User\AppData\Local\EpicGamesLauncher =>.Epic Games
O43 - CFD: 17/12/2017 - [0] D -- C:\Users\User\AppData\Local\Facebook =>.Facebook
O43 - CFD: 22/12/2017 - [] D -- C:\Users\User\AppData\Local\fontconfig =>.Portable Apps
O43 - CFD: 16/12/2017 - [] D -- C:\Users\User\AppData\Local\FortniteGame
O43 - CFD: 22/12/2017 - [] D -- C:\Users\User\AppData\Local\gegl-0.2 =>.Portable Apps
O43 - CFD: 16/12/2017 - [] D -- C:\Users\User\AppData\Local\Google =>.Google
O43 - CFD: 26/12/2017 - [] D -- C:\Users\User\AppData\Local\gtk-2.0 =>.GTK Project
O43 - CFD: 07/09/2016 - [] D -- C:\Users\User\AppData\Local\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 02/12/2017 - [0] SHD -- C:\Users\User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Local\HP =>.Hewlett-Packard
O43 - CFD: 30/10/2017 - [] D -- C:\Users\User\AppData\Local\Lenovo =>.Lenovo
O43 - CFD: 03/01/2018 - [] D -- C:\Users\User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 13/01/2018 - [] D -- C:\Users\User\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 29/04/2016 - [] D -- C:\Users\User\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 29/04/2016 - [0] D -- C:\Users\User\AppData\Local\NetworkTiles =>.NetworkTiles
O43 - CFD: 21/09/2016 - [] D -- C:\Users\User\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 21/09/2016 - [] D -- C:\Users\User\AppData\Local\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 03/02/2018 - [] D -- C:\Users\User\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 03/12/2017 - [] D -- C:\Users\User\AppData\Local\PackageStaging =>.Apcera
O43 - CFD: 02/06/2016 - [] D -- C:\Users\User\AppData\Local\Pipix-3 =>.Microsoft Corporation
O43 - CFD: 10/12/2017 - [0] D -- C:\Users\User\AppData\Local\PlaceholderTileLogoFolder
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 21/04/2016 - [] D -- C:\Users\User\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 06/08/2017 - [] D -- C:\Users\User\AppData\Local\Recovery =>.Recovery Labs
O43 - CFD: 07/09/2016 - [] D -- C:\Users\User\AppData\Local\RLPlatform =>.Djeman
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Local\Sony =>.Sony
O43 - CFD: 25/02/2017 - [] D -- C:\Users\User\AppData\Local\speech =>.Microsoft Corporation
O43 - CFD: 26/01/2018 - [] D -- C:\Users\User\AppData\Local\Spotify =>.Spotify
O43 - CFD: 04/10/2017 - [] D -- C:\Users\User\AppData\Local\SquirrelTemp =>.Squirrels
O43 - CFD: 04/10/2017 - [] D -- C:\Users\User\AppData\Local\TeamSpeak 3 Client =>.TeamSpeak
O43 - CFD: 16/01/2018 - [] D -- C:\Users\User\AppData\Local\TeamViewer =>.TeamViewer GmbH
O43 - CFD: 11/02/2018 - [] D -- C:\Users\User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [0] SHD -- C:\Users\User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 03/12/2017 - [] D -- C:\Users\User\AppData\Local\TileDataLayer =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\Local\tkdata =>.TK-Data
O43 - CFD: 24/05/2017 - [] D -- C:\Users\User\AppData\Local\UNP =>.Microsoft Corporation
O43 - CFD: 16/12/2017 - [] D -- C:\Users\User\AppData\Local\UnrealEngine =>.Unreal Software
O43 - CFD: 15/12/2017 - [] D -- C:\Users\User\AppData\Local\UnrealEngineLauncher =>.Unreal Software
O43 - CFD: 14/01/2018 - [] D -- C:\Users\User\AppData\Local\VirtualDJ =>.Atomix Production
O43 - CFD: 06/08/2017 - [] D -- C:\Users\User\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 04/01/2018 - [] D -- C:\Users\User\AppData\Local\Windows Live =>.Microsoft Corporation
O43 - CFD: 11/02/2018 - [] D -- C:\Users\User\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 30/04/2016 - [0] D -- C:\Users\User\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 30/04/2016 - [] D -- C:\Users\User\AppData\LocalLow\Adobe =>.Adobe
O43 - CFD: 30/10/2017 - [] D -- C:\Users\User\AppData\LocalLow\Dashlane =>.Dashlane
O43 - CFD: 22/04/2017 - [] D -- C:\Users\User\AppData\LocalLow\Eek
O43 - CFD: 16/12/2017 - [] D -- C:\Users\User\AppData\LocalLow\Google =>.Google
O43 - CFD: 23/08/2017 - [] D -- C:\Users\User\AppData\LocalLow\Lenovo =>.Lenovo
O43 - CFD: 10/12/2016 - [] SD -- C:\Users\User\AppData\LocalLow\Microsoft =>.Microsoft Corporation
O43 - CFD: 29/04/2016 - [] D -- C:\Users\User\AppData\LocalLow\Sun =>.Oracle
O43 - CFD: 26/10/2016 - [] D -- C:\Users\User\AppData\LocalLow\Temp =>.Microsoft Corporation
O43 - CFD: 12/11/2017 - [] D -- C:\Users\User\AppData\LocalLow\uTorrent
O43 - CFD: 16/12/2017 - [] RD -- C:\Users\User\Desktop\Cours 1S
O43 - CFD: 16/12/2017 - [] RD -- C:\Users\User\Desktop\Cours 2nd
O43 - CFD: 05/01/2018 - [] RAD -- C:\Users\User\Desktop\Cours TS
O43 - CFD: 09/12/2017 - [] RD -- C:\Users\User\Desktop\Crack
O43 - CFD: 06/01/2018 - [] RD -- C:\Users\User\Desktop\Films
O43 - CFD: 17/11/2016 - [] RD -- C:\Users\User\Desktop\Musiques
O43 - CFD: 11/02/2018 - [] RD -- C:\Users\User\Desktop\Perso Bordel
O43 - CFD: 29/09/2017 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 03/12/2017 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 06/01/2018 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 11/02/2018 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dashlane =>.Dashlane
O43 - CFD: 20/01/2018 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
O43 - CFD: 02/12/2017 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 02/12/2017 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HP =>.Hewlett-Packard
O43 - CFD: 02/12/2017 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud =>.Apple Inc.
O43 - CFD: 29/09/2017 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 06/01/2018 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Teleport Pro
O43 - CFD: 14/01/2018 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ =>.Atomix Production
O43 - CFD: 02/12/2017 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WebZIP
O43 - CFD: 29/09/2017 - [] RD -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] D -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 02/12/2017 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 13/10/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 30/09/2017 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 31/10/2016 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 13/10/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 30/09/2017 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 31/10/2016 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 29/09/2017 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 17/12/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\AVAST Software =>.AVAST Software
O43 - CFD: 28/01/2018 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 03/12/2017 - [0] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DBG =>.DBG
O43 - CFD: 08/12/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Dropbox =>.Dropbox
O43 - CFD: 02/12/2017 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 02/12/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 08/12/2017 - [] -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Dropbox =>.Dropbox

---\\ ShellIconOverlayIdentifiers (SIOI) (14) - 1s
O106 - SIOI: DropboxExt1 Class [ DropboxExt01] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt7 Class [ DropboxExt02] - {FB314EDF-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt9 Class [ DropboxExt03] - {FB314EE1-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt3 Class [ DropboxExt04] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt2 Class [ DropboxExt05] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt4 Class [ DropboxExt06] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt5 Class [ DropboxExt07] - {FB314EDD-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt8 Class [ DropboxExt08] - {FB314EE0-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt10 Class [ DropboxExt09] - {FB314EE2-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt6 Class [ DropboxExt10] - {FB314EDE-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation

---\\ Search Context Menu Handlers (SCMH) (38) - 5s
O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (. - ShellHandler for Notepad++ (64 bit).) -- C:\Program Files (x86)\Notepad++\NppShell_06.dll =>.Notepad++®
O108 - CMH1: BtSendToMenuEx [64Bits] - {CF24E6B8-F148-4BCB-9108-ADF313966E80} . (.Realtek Semiconductor Corporation - Realtek Bluetooth Device Menu DLL.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\DevMenuExt.dll =>.Realtek Semiconductor Corp®
O108 - CMH1: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O108 - CMH1: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\shellext.dll =>.Microsoft Windows®
O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH1: PhotoStreamsExt [64Bits] - {89D984B3-813B-406A-8298-118AFA3A22AE} . (.Apple Inc. - ShellStreams.) -- C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll =>.Apple Inc.®
O108 - CMH1: SHAREit.FileContextMenuExt [64Bits] - {430BD134-576D-4E75-87CD-0F5C6221A82B} . (.Lenovo - Shell Extension.) -- C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll =>.LENOVO®
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH1: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH2: BtSendToMenuEx [64Bits] - {CF24E6B8-F148-4BCB-9108-ADF313966E80} . (.Realtek Semiconductor Corporation - Realtek Bluetooth Device Menu DLL.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\DevMenuExt.dll =>.Realtek Semiconductor Corp®
O108 - CMH2: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O108 - CMH2: NvAppShExt [64Bits] - {A929C4CE-FD36-4270-B4F5-34ECAC5BD63C} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) -- C:\WINDOWS\system32\nv3dappshext.dll =>.NVIDIA Corporation
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH2: OpenGLShExt [64Bits] - {E97DEC16-A50D-49bb-AE24-CF682282E08D} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) -- C:\WINDOWS\system32\nv3dappshext.dll =>.NVIDIA Corporation
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH4: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O108 - CMH4: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\shellext.dll =>.Microsoft Windows®
O108 - CMH4: SHAREit.FileContextMenuExt [64Bits] - {430BD134-576D-4E75-87CD-0F5C6221A82B} . (.Lenovo - Shell Extension.) -- C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll =>.LENOVO®
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH5: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll =>.Dropbox, Inc®
O108 - CMH5: igfxcui [64Bits] - {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} . (.Orphan.)
O108 - CMH5: igfxDTCM [64Bits] - {9B5F5829-A529-4B12-814A-E81BCB8D93FC} . (.Intel Corporation - igfxDTCM Module.) -- C:\WINDOWS\system32\igfxDTCM.dll =>.Intel Corporation
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH5: NvCplDesktopContext [64Bits] - {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} . (.NVIDIA Corporation - NVIDIA Display Shell Extension.) -- C:\WINDOWS\System32\nvshext.dll =>.NVIDIA Corporation
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Microsoft (C) Work Folders Shell Extension.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - Windows Shell Common Dll.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - App Resolver.) -- C:\Windows\System32\appresolver.dll =>.Microsoft Windows®
O108 - CMH6: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - Windows Enhanced Storage Shell Extension DL.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O108 - CMH7: EPP [64Bits] - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Microsoft Security Client Shell Extension.) -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\shellext.dll =>.Microsoft Windows®
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Shell extensions for sharing.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Image File Execution Options (18) - 17s
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows®
O50 - IFEO:C:\WINDOWS\System32\drvinst.exe - (.Microsoft Corporation - Driver Installation Module.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - IE Per-User Initialisation Utility.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - IE 7.0 Unattended Install Utility.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Microsoft Windows Malicious Software Remova.) [CFGOptions\\1] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Microsoft (R) HTML Application host.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Windows host process (Rundll32).) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Spooler SubSystem App.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Host Process for Windows Services.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Host Process for Windows Services.) [MitigationAuditOptions\\17660905521152] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation

---\\ System Drivers List (84) - 124s
O58 - SDL:2017/09/29 14:41:02 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107416] =>.Microsoft Windows®
O58 - SDL:2015/06/15 09:00:05 A . (.Lenovo Corporation - ACPI Virtual Power Controller Driver.) -- C:\WINDOWS\System32\drivers\AcpiVpc.sys [42328] =>.LENOVO®
O58 - SDL:2017/09/29 14:41:02 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135512] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83352] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [258592] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [27032] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131992] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2017/09/29 14:41:01 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533912] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [141208] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [357272] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [1723288] =>.Microsoft Windows®
O58 - SDL:2018/02/08 21:10:38 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-canary.sys [45640] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2018/02/08 21:10:38 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-dev.sys [45672] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2018/02/08 21:10:38 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-stable.sys [45640] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2017/09/29 14:41:01 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3419032] =>.Microsoft Windows®
O58 - SDL:2011/10/31 17:12:34 A . (.Hewlett-Packard. - USB HID Upper Filter Driver.) -- C:\WINDOWS\System32\drivers\HPMoA407.sys [25088] =>.Hewlett-Packard.
O58 - SDL:2017/09/29 14:41:02 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [63520] =>.Microsoft Windows®
O58 - SDL:2012/06/14 09:37:22 A . (.Hewlett-Packard. - USB HID Filter Driver.) -- C:\WINDOWS\System32\drivers\HPubA407.sys [18944] =>.Hewlett-Packard.
O58 - SDL:2017/09/29 14:40:59 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [36864] =>.Intel(R) Corporation
O58 - SDL:2017/09/29 14:40:59 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [91648] =>.Intel(R) Corporation
O58 - SDL:2017/09/29 14:40:59 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] =>.Intel Corporation
O58 - SDL:2017/09/29 14:40:59 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [88576] =>.Intel Corporation
O58 - SDL:2017/09/29 14:40:59 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] =>.Intel Corporation
O58 - SDL:2017/09/29 14:40:59 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [174592] =>.Intel Corporation
O58 - SDL:2017/09/29 14:41:01 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2017/09/29 14:40:59 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2015/07/24 15:30:14 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver -.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [1455552] =>.Intel Corporation - Rapid Storage Technology®
O58 - SDL:2017/09/29 14:41:03 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [674200] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:03 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412056] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [526232] =>.Microsoft Windows®
O58 - SDL:2017/04/23 21:26:58 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [7970296] =>.Intel(R) pGFX®
O58 - SDL:2016/05/12 04:32:26 N . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [481768] =>.Intel(R) OWR®
O58 - SDL:2017/12/17 11:16:44 A . (...) -- C:\WINDOWS\System32\drivers\lpsport.sys [61304] =>.AVG Technologies CZ, s.r.o.®
O58 - SDL:2017/09/29 14:41:02 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108064] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [123800] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [103320] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82840] =>.Microsoft Windows®
O58 - SDL:2008/07/26 14:22:22 A . (.Logitech Inc. - Audio filter for Express Plus.) -- C:\WINDOWS\System32\drivers\lv302a64.sys [15768] =>.Logitech Inc®
O58 - SDL:2008/07/26 14:22:34 A . (.Logitech Inc. - Logitech QuickCam Driver.) -- C:\WINDOWS\System32\drivers\LV302V64.SYS [2624408] =>.Logitech Inc®
O58 - SDL:2008/07/26 14:25:48 A . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Dr.) -- C:\WINDOWS\System32\drivers\lvrs64.sys [790424] =>.Logitech Inc®
O58 - SDL:2008/07/26 14:26:34 A . (.Logitech Inc. - USB Statistic Driver.) -- C:\WINDOWS\System32\drivers\LVUSBS64.sys [50072] =>.Logitech Inc®
O58 - SDL:2017/09/29 14:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59800] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [63520] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575896] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [842648] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63896] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [108952] =>.Microsoft Windows®
O58 - SDL:2014/08/15 22:13:34 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\WINDOWS\System32\drivers\netaapl64.sys [23040] =>.Apple Inc.
O58 - SDL:2017/09/29 14:41:02 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150424] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166296] =>.Microsoft Windows®
O58 - SDL:2016/04/14 06:38:19 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\WINDOWS\System32\drivers\nvvad64v.sys [56384] =>.NVIDIA Corporation®
O58 - SDL:2017/09/29 14:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58776] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [61848] =>.Microsoft Windows®
O58 - SDL:2015/06/23 03:37:04 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 64-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [895256] =>.Realtek Semiconductor Corp®
O58 - SDL:2017/09/29 14:41:14 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [59904] =>.Realtek
O58 - SDL:2015/05/21 11:55:12 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth A2DP Driver.) -- C:\WINDOWS\System32\drivers\RtkA2dp.sys [182288] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2015/05/12 00:12:08 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth AVRCP Driver.) -- C:\WINDOWS\System32\drivers\RtkAvrcp.sys [60944] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2015/05/12 00:14:44 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Avrcp Controller Driver.) -- C:\WINDOWS\System32\drivers\RtkAvrcpCtrlr.sys [70672] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2015/08/06 09:54:04 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Filter Driver.) -- C:\WINDOWS\System32\drivers\RtkBtfilter.sys [602352] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/05/12 00:19:14 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Hands-free-AG Audio Drive.) -- C:\WINDOWS\System32\drivers\RtkHfp.sys [95248] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2015/05/19 11:12:58 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4466392] =>.Realtek Semiconductor Corp®
O58 - SDL:2016/05/18 12:44:27 A . (.Realsil Semiconductor Corporation - RTS PCIE READER Driver.) -- C:\WINDOWS\System32\drivers\RtsPer.sys [761600] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/06/11 09:55:34 A . (.Realtek Semiconductor Corp. - Realtek UVC Driver for Vista/Win7/Win8/Win8.) -- C:\WINDOWS\System32\drivers\rtsuvc.sys [3059416] =>.Realtek Semiconductor Corp®
O58 - SDL:2017/09/29 14:40:59 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 47528 20362.) -- C:\WINDOWS\System32\drivers\rtwlane.sys [6320640] =>.Realtek Semiconductor Corporation
O58 - SDL:2017/09/29 14:41:02 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44952] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81816] =>.Microsoft Windows®
O58 - SDL:2015/08/07 04:28:10 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_AMDASF_Aux.sys [33448] =>.Synaptics Incorporated®
O58 - SDL:2015/08/07 04:28:10 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [33960] =>.Synaptics Incorporated®
O58 - SDL:2015/08/07 04:28:10 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel_Aux.sys [33960] =>.Synaptics Incorporated®
O58 - SDL:2016/09/05 04:47:06 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [131712] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/09/05 05:47:12 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [165504] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2017/09/29 14:41:02 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31128] =>.Microsoft Windows®
O58 - SDL:2015/08/07 04:28:06 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [612008] =>.Synaptics Incorporated®
O58 - SDL:2016/04/21 10:10:04 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\tap0901.sys [27136] =>.The OpenVPN Project
O58 - SDL:2015/06/12 03:54:56 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [183584] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O58 - SDL:2016/07/12 18:34:00 A . (.Texas Instruments Inc. - TI Educational Handheld Device.) -- C:\WINDOWS\System32\drivers\tiehdusb.sys [38664] =>.Texas Instruments, Inc.®
O58 - SDL:2016/04/29 20:24:22 A . (...) -- C:\WINDOWS\System32\drivers\t_mouse.sys [6144] =>.iBall
O58 - SDL:2015/06/17 16:04:24 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys [54784] =>.Apple, Inc.
O58 - SDL:2017/09/29 14:41:02 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166808] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305560] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [32152] =>.Microsoft Windows®
O58 - SDL:2017/09/29 14:41:02 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [64920] =>.Microsoft Windows®
O58 - SDL:2012/06/13 17:10:32 A . (."CyberLink - Cyberlink Virtual Disk Driver.) -- C:\WINDOWS\System32\drivers\wsvd.sys [102376] =>.CyberLink®

---\\ Last modified or created user files (1) - 475s
O61 - LFC: 2018/02/11 14:43:22 A . (..) -- C:\Users\User\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\Dashlane.exe [0]

---\\ File Associations Shell Spawning (10) - 2s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- %1" %*
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Start Menu Internet (8) - 1s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Search Browser Infection (4) - 0s
O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] [64Bits]{410F4F20-0D0F-41FD-9995-1A13F670025B} [DefaultScope] [NTURL] - () - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] [64Bits]{410F4F20-0D0F-41FD-9995-1A13F670025B} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com

---\\ Search Svchost Services (48) - 7s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smart card Certificate Propagatio.) -- C:\WINDOWS\System32\certprop.dll [188928] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smart card Certificate Propagatio.) -- C:\Windows\System32\certprop.dll [188928] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\Windows\System32\srvsvc.dll [270848] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\Windows\System32\gpsvc.dll [1275904] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\Windows\System32\IKEEXT.DLL [984064] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\Windows\System32\iphlpsvc.dll [820224] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Log-on Service DLL.) -- C:\Windows\System32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\Windows\System32\appinfo.dll [144896] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\Windows\System32\iscsiexe.dll [150528] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\Windows\System32\eapsvc.dll [109056] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\Windows\System32\schedsvc.dll [880640] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [220160] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [407040] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [387584] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\Windows\System32\wercplsupport.dll [108544] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [254976] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [194560] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1272320] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Natural Authentication Service.) -- C:\Windows\System32\NaturalAuth.dll [795136] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Token Broker.) -- C:\Windows\System32\TokenBroker.dll [1231872] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation Service.) -- C:\Windows\System32\lfsvc.dll [46080] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [1107968] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infrared Monitor.) -- C:\Windows\System32\irmon.dll [24576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\Windows\System32\rasauto.dll [104960] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\Windows\System32\rasmans.dll [930304] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [491520] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\Windows\System32\Sens.dll [73216] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\Windows\System32\ipnathlp.dll [601088] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [307200] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\Windows\System32\wuaueng.dll [2783744] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\Windows\System32\qmgr.dll [1345536] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [613376] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows Managent Service DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [702464] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Flight Settings.) -- C:\Windows\System32\flightsettings.dll [779264] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) -- C:\Windows\System32\WpnService.dll [284672] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1143808] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Core.) -- C:\Windows\System32\usocore.dll [1289216] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [951808] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [1313792] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\Windows\System32\themeservice.dll [69632] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\Windows\System32\bdesvc.dll [387072] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\Windows\System32\DeviceSetupManager.dll [238080] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Network Setup Service.) -- C:\Windows\System32\NetSetupSvc.dll [307712] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\Windows\System32\NcaSvc.dll [170496] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\Windows\System32\wlidsvc.dll [2223104] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\Windows\System32\browser.dll [132608] =>.Microsoft Corporation

---\\ Firewall Active Exception List (2) - 30s
O87 - FAEL: "TCP Query User{340B0E21-DD83-4134-B48D-5F32FAD9585F}C:\edupython\app\python.exe" [In-None-P6-TRUE] .(...) -- C:\edupython\app\python.exe
O87 - FAEL: "UDP Query User{796A9B03-8138-4564-B57C-012A210283DC}C:\edupython\app\python.exe" [In-None-P17-TRUE] .(...) -- C:\edupython\app\python.exe

---\\ Windows Installer Scan (63) - 350s
[MD5.12D2FB957E5E287C87FB1401EAAA070C] [WIS][2015/06/24 00:11:38] (.Intel Corporation - Intel(R) ME UninstallLegacy.) -- C:\WINDOWS\Installer\10735.msi [397312] =>.Intel Corporation
[MD5.417AB74E979775659B0CE9C8BC911941] [WIS][2015/06/24 00:11:50] (.Intel Corporation - Intel(R) Management Engine Components.) -- C:\WINDOWS\Installer\1073c.msi [9719808] =>.Intel Corporation
[MD5.EF5A290BF44C3A30F07E02B4B0678AC3] [WIS][2015/07/25 10:11:10] (.Intel Corporation - Intel(R) Rapid Storage Technology.) -- C:\WINDOWS\Installer\10743.msi [3022848] =>.Intel Corporation
[MD5.CA1FC4B8BE5D9CF27CB2F58229BAB296] [WIS][2016/09/29 18:11:18] (.OpenOffice - OpenOffice 4.1.3.) -- C:\WINDOWS\Installer\126ad7cb.msi [2314240] =>.OpenOffice
[MD5.1504667BA3C10D841C0B76B6412FAFB5] [WIS][2015/03/17 09:41:29] (.Adobe Systems Incorporated.) -- C:\WINDOWS\Installer\12912a.msi [2805760] =>.Adobe Systems Incorporated
[MD5.37A0C7A58DACB06F2074A4593B9750C7] [WIS][2018/02/11 16:18:26] (.Oracle Corporation - Java SE Runtime Environment 8 Update 161.) -- C:\WINDOWS\Installer\134c14.msi [61681664] =>.Oracle Corporation
[MD5.1CE69AAB7A515676FA76AD9072411664] [WIS][2018/02/11 16:18:17] (.Oracle Corporation - Java Auto Updater.) -- C:\WINDOWS\Installer\134c1f.msi [765952] =>.Oracle Corporation
[MD5.691233D67634E001EAA42937FD973454] [WIS][2017/09/30 13:55:17] (.Texas Instruments Inc. - TI Connect™ CE.) -- C:\WINDOWS\Installer\134ef28.msi [6164992] =>.Texas Instruments Inc.
[MD5.F0EE2E7F283866A2A0FEA9BE2D12A979] [WIS][2017/11/14 16:45:22] (.Google Inc. - Google Update Helper.) -- C:\WINDOWS\Installer\145118fb.msi [40960] =>.Google Inc.
[MD5.D3C81F3668E84837967F93B766CAF525] [WIS][2018/01/14 13:06:10] (.Atomix Productions - VirtualDJ 8 Installer.) -- C:\WINDOWS\Installer\150a4c.msi [39608320] =>.Atomix Productions
[MD5.1B7C1FDDB641474AC4340CCE72AD90C3] [WIS][2017/06/06 16:46:02] (.Apple Inc. - Apple Application Support Installer.) -- C:\WINDOWS\Installer\19e9ef7f.msi [48156672] =>.Apple Inc.
[MD5.54FCF46D877C3B3FA8AB0495CB6B06BD] [WIS][2017/06/06 16:46:55] (.Apple Inc. - Apple Application Support Installer.) -- C:\WINDOWS\Installer\19e9f144.msi [43057152] =>.Apple Inc.
[MD5.E5D5BE27EE42AA69A3C9C14B75502A97] [WIS][2017/06/06 16:47:02] (.Apple Inc. - Apple Software Update Installer.) -- C:\WINDOWS\Installer\19e9f1b1.msi [2420736] =>.Apple Inc.
[MD5.5792A6B2CD304664BE8DEBFB9F3DEA47] [WIS][2017/06/06 16:56:02] (.Apple Inc. - iCloud for Windows installer.) -- C:\WINDOWS\Installer\19e9f1ef.msi [36315136] =>.Apple Inc.
[MD5.D74A72659B78CB88EB36EF3C35B1C6D2] [WIS][2017/06/06 17:10:23] (.Apple Inc. - Apple Mobile Device Support Installer.) -- C:\WINDOWS\Installer\19e9f263.msi [13926400] =>.Apple Inc.
[MD5.B86DB6386AA72E09CF30CB59C12FF295] [WIS][2017/06/06 17:14:25] (.Apple Inc. - iTunes Installer.) -- C:\WINDOWS\Installer\19ea01b9.msi [161579008] =>.Apple Inc.
[MD5.E0BEE57B802ADF755C69CAE057F6D001] [WIS][2015/11/25 20:05:50] (.Intel Corporation - Intel(R) Biometric and Context Agent Redist.) -- C:\WINDOWS\Installer\1cde36.msi [34631680] =>.Intel Corporation
[MD5.003A1A6D128303A7A271AAA746008DD2] [WIS][2015/11/25 20:05:42] (.Intel Corporation - Intel(R) Biometric and Context Agent 2.0.87.) -- C:\WINDOWS\Installer\1cde3b.msi [15446016] =>.Intel Corporation
[MD5.A04E16FA33082B02CB691F122BAB15B3] [WIS][2015/10/27 07:55:00] (.Intel Corporation - Intel® RealSense™ SDK 2014 Runtime (x64): .) -- C:\WINDOWS\Installer\1cde40.msi [2801664] =>.Intel Corporation
[MD5.28643E5BD41FC927D679610C87604CFE] [WIS][2015/06/26 15:21:04] (.Intel Corporation - Intel(R) Chipset Device Software.) -- C:\WINDOWS\Installer\2079d.msi [778240] =>.Intel Corporation
[MD5.16D3F94BA8D38A212EF92277404754EC] [WIS][2016/10/23 15:54:21] (.Mojang - Minecraft.) -- C:\WINDOWS\Installer\23dd5649.msi [2314240] =>.Mojang
[MD5.80A88F928CC23FA80E683B6B6390B879] [WIS][2015/09/23 03:47:02] (.Lenovo.) -- C:\WINDOWS\Installer\25b36.msi [7424512] =>.Lenovo
[MD5.F6B05B5D08B70E576EAEB26937D4F948] [WIS][2015/11/06 11:24:48] (.CyberLink Corp..) -- C:\WINDOWS\Installer\2c741c6e.msi [1314816] =>.CyberLink Corp.
[MD5.7FE76FF8DA563454E3EB90B42DEAD271] [WIS][2015/09/28 14:10:24] (.Lenovo - Lenovo QuickOptimizer.) -- C:\WINDOWS\Installer\2c741d54.msi [12255744] =>.Lenovo
[MD5.86E2B390629665FBC20E06DFBF01A48F] [WIS][2016/10/18 02:03:58] (.Apple Inc. - [ProductName] Installer.) -- C:\WINDOWS\Installer\3299809e.msi [2732032] =>.Apple Inc.
[MD5.EF46E045680F9C3F8E520334475178EE] [WIS][2018/02/10 20:42:04] (.Google - Google Earth Pro.) -- C:\WINDOWS\Installer\34bd79.msi [60190720] =>.Google
[MD5.3A6F581777F935A2223C6FB5DB7452D0] [WIS][2015/09/23 03:48:51] (.Lenovo Group Limited - Metric Collection SDK Redistributable.) -- C:\WINDOWS\Installer\3d9eb.msi [2161152] =>.Lenovo Group Limited
[MD5.5029BCEA2ECBA9D5466E793898155206] [WIS][2015/06/27 16:15:35] (.Lenovo - User Manuals.) -- C:\WINDOWS\Installer\3d9ef.msi [1185792] =>.Lenovo
[MD5.34FCC3A7FC2C90D7085751B6ADE7B9AA] [WIS][2014/07/11 23:45:18] (.Sony Creative Software Inc. - MSVCRT Redists.) -- C:\WINDOWS\Installer\4e000.msi [5423104] =>.Sony Creative Software Inc.
[MD5.37052417A8C3C9FD54FFEFED6C9F00BD] [WIS][2016/04/30 11:00:08] (.Sony - Vegas Pro 13.0 (64-bit).) -- C:\WINDOWS\Installer\4e005.msi [638976] =>.Sony
[MD5.2EB24F3D14100882E0135D4C6109E0A4] [WIS][2016/04/30 11:01:59] (.Lenovo Group Limited - Metric Collection SDK Redistributable.) -- C:\WINDOWS\Installer\4e00d.msi [2173440] =>.Lenovo Group Limited
[MD5.AA127870E4A0CE340811F11B3B512D62] [WIS][2017/12/15 17:47:45] (.Epic Games, Inc. - Epic Games Launcher.) -- C:\WINDOWS\Installer\521a9fb.msi [32145408] =>.Epic Games, Inc.
[MD5.7873ACD3BFA53B19469E6AB5606C80FE] [WIS][2015/11/19 10:56:58] (.Epic Games, Inc. - Epic Games Launcher Prerequisites (x64).) -- C:\WINDOWS\Installer\52d0120.msi [11919360] =>.Epic Games, Inc.
[MD5.5CC700CB9A91AB2A7F06427D5A5D43E5] [WIS][2017/02/13 16:11:49] (.Dropbox, Inc. - Dropbox Update Helper.) -- C:\WINDOWS\Installer\664443b.msi [31232] =>.Dropbox, Inc.
[MD5.A666B14C461CC7207C0C9B3D0D2D28F3] [WIS][2017/11/17 20:02:50] (.Adobe Systems Incorporated - Adobe ARM Installer.) -- C:\WINDOWS\Installer\6dfbad.msi [880128] =>.Adobe Systems Incorporated
[MD5.03543511597F4EEA60712650D1CA12BA] [WIS][2014/04/07 09:18:18] (.Dolby Laboratories Inc - Dolby Digital Plus Home Theater.) -- C:\WINDOWS\Installer\717ce.msi [33980416] =>.Dolby Laboratories Inc
[MD5.871A18E7BA6F3B862DCC5B1103AFDF47] [WIS][2016/04/30 13:09:36] (.HP - HP Support Solutions Framework.) -- C:\WINDOWS\Installer\7b4830.msi [9306112] =>.HP
[MD5.FEA50D413B6B3D3CE21FEAD04CC4A765] [WIS][2012/10/03 00:19:43] (.Hewlett-Packard Co. - HP Deskjet 2050 J510 series Basic Device So.) -- C:\WINDOWS\Installer\7b4836.msi [2633728] =>.Hewlett-Packard Co.
[MD5.3FC36EF669376540BB082615F9ECADB2] [WIS][2014/03/17 15:45:48] (.Cisco Systems, Inc..) -- C:\WINDOWS\Installer\7cb94.msi [836608] =>.Cisco Systems, Inc.
[MD5.626978BF496BABC1E6F1464D697B707D] [WIS][2014/03/17 15:45:48] (.Cisco Systems, Inc..) -- C:\WINDOWS\Installer\7cb9b.msi [1304064] =>.Cisco Systems, Inc.
[MD5.F3393D3FF18B824864B806E0B86F0A67] [WIS][2014/03/17 15:45:48] (.Cisco Systems, Inc..) -- C:\WINDOWS\Installer\7cba2.msi [1559552] =>.Cisco Systems, Inc.
[MD5.D0E1D93479D6A1D14B73EA4BC3FB5953] [WIS][2015/07/16 03:04:04] (.Lenovo - Plugins.) -- C:\WINDOWS\Installer\7cbcc.msi [68233216] =>.Lenovo
[MD5.A0C3D95A5090E9719A50EE64B9E07539] [WIS][2016/06/01 11:28:31] (.Lenovo.) -- C:\WINDOWS\Installer\85bd397.msi [8390656] =>.Lenovo
[MD5.7D8C95C6AFD8C52938037FA5F88BD5AB] [WIS][2016/04/30 13:29:18] (.HP - HP Support Assistant.) -- C:\WINDOWS\Installer\8d301c.msi [14425088] =>.HP
[MD5.8D9378D81025784C60CD3DDF061309F5] [WIS][2016/04/30 13:29:57] (.Hewlett-Packard.) -- C:\WINDOWS\Installer\8d3021.msi [635392] =>.Hewlett-Packard
[MD5.16F6D765A6FB792EF45C0319D14DAF10] [WIS][2017/12/17 11:29:46] (.Skype Technologies S.A. - Skype.) -- C:\WINDOWS\Installer\e139f0e.msi [45527040] =>.Skype Technologies S.A.
[MD5.CF478CA41BB57CA934019B65FCD35FB2] [WIS][2017/08/11 11:05:31] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\1238e7ed.msp [100052992] =>.Adobe Systems, Incorporated
[MD5.53B0FC6601C0D177F230AC4FF04C5C32] [WIS][2016/02/27 00:05:24] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\12912b.msp [64245760] =>.SUP.Obsolete.Adobe
[MD5.E3869EFD0836C950E46B02D3CBC67184] [WIS][2017/01/09 04:41:00] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\1400ed.msp [25853952] =>.Adobe Systems, Incorporated
[MD5.77AB51250501ADDD4D491DECDB6121FD] [WIS][2017/08/28 17:40:46] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\1e59e3c6.msp [2424832] =>.Adobe Systems, Incorporated
[MD5.3617A09ABC822D955214EBE86A991CF3] [WIS][2017/11/29 11:42:28] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\1f023dd6.msp [1355776] =>.Adobe Systems, Incorporated
[MD5.BD4423645209FA4CE380C43C1633F4E4] [WIS][2016/07/12 04:25:29] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\22ad5c7b.msp [39538688] =>.SUP.Obsolete.Adobe
[MD5.C233BD1DB45AF8BACD0F3C0D8A646740] [WIS][2016/05/19 04:30:11] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\238b069c.msp [1429504] =>.SUP.Obsolete.Adobe
[MD5.0762EDB0E4C8D62A4328C3360BC7AD2C] [WIS][2017/07/11 05:57:12] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\450e3fde.msp [1732608] =>.Adobe Systems, Incorporated
[MD5.50A28B22FFDE4D837B145DB7A22E94C5] [WIS][2016/05/10 04:20:29] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\57abdc.msp [58986496] =>.SUP.Obsolete.Adobe
[MD5.CECF2A7991F74C858965EA972A43CE3F] [WIS][2017/04/10 06:34:32] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\60270955.msp [57815040] =>.Adobe Systems, Incorporated
[MD5.F767152C881F505C5BBAC71A825C1263] [WIS][2017/02/21 13:33:51] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\643a28.msp [12845056] =>.Adobe Systems, Incorporated
[MD5.F9FD1AB516C661D9938213AA661350B7] [WIS][2016/08/02 12:49:06] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\65ad9b6e.msp [1511424] =>.SUP.Obsolete.Adobe
[MD5.82F476D2A7125BB7EBF5A2A657BAB293] [WIS][2017/11/13 05:26:16] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\6dfc62.msp [23506944] =>.Adobe Systems, Incorporated
[MD5.339631DF934AFC2BE35E2B27A6F7DB06] [WIS][2016/11/03 08:25:06] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\7f33b9.msp [1642496] =>.SUP.Obsolete.Adobe
[MD5.4D64DE5B41C39FA6192C22CBCD826FBA] [WIS][2016/10/10 08:29:03] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\89c99081.msp [36499456] =>.SUP.Obsolete.Adobe
[MD5.557170C4FCC0754B372A5FC174735242] [WIS][2016/06/02 05:48:41] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\b0fc7c9.msp [2772992] =>.SUP.Obsolete.Adobe
[MD5.72C91237F7C7A0527FA5F0752CF81A66] [WIS][2017/01/19 11:28:55] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\fd81f36.msp [1937408] =>.Adobe Systems, Incorporated

---\\ Additional Scan (O88) (19) - 109s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 =>HackTool.KMSpico
C:\Program Files\KMSpico =>HackTool.KMSpico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\WINDOWS\Installer\12912b.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\22ad5c7b.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\238b069c.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\57abdc.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\65ad9b6e.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\7f33b9.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\89c99081.msp =>.SUP.Obsolete.Adobe
C:\WINDOWS\Installer\b0fc7c9.msp =>.SUP.Obsolete.Adobe
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\002 =>.SUP.Temporary.Chrome
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\Plugins =>.SUP.Temporary.Chrome

---\\ Summary of the elements found (4) - 0s
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Obsolete.Adobe
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Chrome

~ Unselected Options: O82,
~ End of the scan, 68899 items in 30mn10s (1480)(0)