~ ZHPDiag v2016.1.31.23 By Nicolas Coolman (2016/01/30)
~ Run by Pierre (Administrator) (2018/08/04 12:08:30)
~ Web: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ State version: No network file
~ Mode: Scan
~ Report: C:\Users\Pierre\Desktop\ZHPDiag.txt
~ Report: C:\Users\Pierre\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ System startup: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 16299)

---\\ Internet Browsers (3) - 1s
GCIE: Google Chrome v65.0.3325.181
MFIE: Mozilla Firefox 59.0.2 (x64 en-US)
MSIE: Internet Explorer v11.547.16299.0

---\\ Windows Product Information (3) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ System protection software (1) - 64s
Windows Defender (Activate)

---\\ System optimization software (1) - 64s
CCleaner v5.32

---\\ Surveillance software (1) - 64s
Adobe Flash Player 29 NPAPI

---\\ Information on the system (6) - 0s
~ Operating System: Intel64 Family 6 Model 78 Stepping 3, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4082.592 MB (7% free)
System Restore: Activé (Enable)
System drive C: has 777 GB () free of 936 GB

---\\ Connection to the system mode (3) - 0s
~ Computer Name: COYOTE
~ User Name: Pierre
~ Logged in as Administrator

---\\ Enumeration of the disk units (2) - 1s
~ Drive C: has 777 GB free of 936 GB (System)
~ Drive D: has 1 GB free of 16 GB

---\\ State of the Windows Security Center (7) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Search Generic System Files (25) - 7s
[MD5.4617D41657001A296F45D026B774C485] - 08/06/2018 - (.Microsoft Corporation - Windows Explorer.) -- C:\WINDOWS\Explorer.exe [3903784] {330000017469DE108B3765A8D7000000000174} =>.Microsoft Corporation
[MD5.731A783A36A8E69A6434D19D98B12A09] - 29/09/2017 - (.Microsoft Corporation - Windows host process (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [71168] =>.Microsoft Corporation
[MD5.BF3E1D9B2360C6BE4CC3094CD2DDC617] - 29/09/2017 - (.Microsoft Corporation - Windows Start-Up Application.) -- C:\WINDOWS\System32\Wininit.exe [359584] {330000016A891F494619ED646800000000016A} =>.Microsoft Corporation
[MD5.D08E7FEBC1B1A7691DE1305A670499A3] - 08/06/2018 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [3332608] =>.Microsoft Corporation
[MD5.9805F177DB8C21E10062E81499DD44B7] - 29/06/2018 - (.Microsoft Corporation - Windows Log-on Application.) -- C:\WINDOWS\System32\Winlogon.exe [716288] =>.Microsoft Corporation
[MD5.4D487E7D2B047FB929BE00117C09F9EC] - 29/09/2017 - (.Microsoft Corporation - Software Licensing Library.) -- C:\WINDOWS\System32\sppcomapi.dll [414720] =>.Microsoft Corporation
[MD5.4FD3168268A6EDC0934B79A6C0FDA89B] - 29/06/2018 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [739184] {330000017469DE108B3765A8D7000000000174} =>.Microsoft Corporation
[MD5.677721DE2125B0B65EB52754591A8D56] - 29/06/2018 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\Syswow64\dnsapi.dll [596648] {330000017469DE108B3765A8D7000000000174} =>.Microsoft Corporation
[MD5.3B34C7B9D7E22AEF58DF0CFC4C7CC82D] - 30/09/2017 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation
[MD5.9619C0D7DB55CC3A636A24A7D82B0C8E] - 30/03/2018 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [614304] {330000017469DE108B3765A8D7000000000174} =>.Microsoft Corporation
[MD5.6191B9B2EE0E8CB957C683B9B341CC86] - 29/09/2017 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28568] {33000001733031072665B8B9B3000000000173} =>.Microsoft Corporation
[MD5.9E82A95D77AC78C84BA75FF896B060BF] - 29/09/2017 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [93184] =>.Microsoft Corporation
[MD5.6D83565C1652E80447EDEA6947FA89D7] - 29/09/2017 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [159744] =>.Microsoft Corporation
[MD5.D7E6591F3D2B9FB5C4F0D05D5CF3A9F8] - 11/05/2018 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [150528] =>.Microsoft Corporation
[MD5.99A34FD1F6431A10D8C3BB50E170D0F2] - 29/09/2017 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [86016] =>.Microsoft Corporation
[MD5.56FF074E50F9042FD2856AB3418F4B18] - 29/09/2017 - (.Microsoft Corporation - i8042 Port Driver.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [105984] =>.Microsoft Corporation
[MD5.7BEC2AF23F586EFF0DB4DBF4331B0C70] - 29/09/2017 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [214016] =>.Microsoft Corporation
[MD5.71729B1EE949E1B092CB5CB75CC63715] - 10/02/2018 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [494488] {330000017469DE108B3765A8D7000000000174} =>.Microsoft Corporation
[MD5.E258CE8B8053518AF47610BC0486E915] - 11/05/2018 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [316928] =>.Microsoft Corporation
[MD5.B1864645F8CBAA45269F8A0C9B946EF3] - 14/06/2018 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2395544] {330000017469DE108B3765A8D7000000000174} =>.Microsoft Corporation
[MD5.2E07EC2C1622F5E7B535D62DCD61F3AB] - 29/09/2017 - (.Microsoft Corporation - Parallel Port Driver.) -- C:\WINDOWS\System32\drivers\Parport.sys [98816] =>.Microsoft Corporation
[MD5.E0220BB6580D34001D4D1D133052DAA4] - 29/09/2017 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [106496] =>.Microsoft Corporation
[MD5.39886C19FB466BBF8AEC31E3E77C034C] - 30/03/2018 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [182784] =>.Microsoft Corporation
[MD5.09125A12CAB5F8D5EAE9C83C25792FDD] - 30/03/2018 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [121248] {330000017469DE108B3765A8D7000000000174} =>.Microsoft Corporation
[MD5.5B27846CF4B1C21AFB3A35A8336BA02F] - 24/01/2018 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [401304] {33000001733031072665B8B9B3000000000173} =>.Microsoft Corporation

---\\ Non Microsoft non disabled Windows Services (21) - 16s
O23 - Service: AdobeUpdateService (AdobeUpdateService) . (.Adobe Systems Incorporated - Adobe Update Service.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O23 - Service: Adobe Genuine Monitor Service (AGMService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe {06B922A8397E632FE5348DA267275B4F} =>.Adobe Systems, Incorporated
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe {06B922A8397E632FE5348DA267275B4F} =>.Adobe Systems, Incorporated
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe =>.AMD
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: BTDevManager (BTDevManager) . (.Realtek Semiconductor Corp. - Realtek Bluetooth BTDevManager Service Appl.) - C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe =>.Realtek Semiconductor Corp®
O23 - Service: Service Bureau à distance Google Chrome (chromoting) . (.Google Inc. - Host Process.) - C:\Program Files (x86)\Google\Chrome Remote Desktop\66.0.3359.12\remoting_host.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O23 - Service: Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc. - Dropbox Update.) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
O23 - Service: DbxSvc (DbxSvc) . (.Dropbox, Inc. - Dropbox Service.) - C:\Windows\System32\DbxSvc.exe {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O23 - Service: @oem50.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) - C:\Windows\SysWOW64\esif_uf.exe =>.Intel(R) Software®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc. - HP Support Solutions Framework Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe {09C52C2531CDAEC35C5EDC2E95758767}
O23 - Service: HPWMISVC (HPWMISVC) . (.HP Inc. - HP WMI Service.) - c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe =>.Hewlett-Packard Company®
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\igfxCUIService.exe {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe =>.CyberLink Corp.®
O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor
O23 - Service: Realtek Bluetooth Device Manager Service (RtkBtManServ) . (.Realtek Semiconductor Corp. - Realtek Bluetooth Device Manager Service Ap.) - C:\Windows\RtkBtManServ.exe =>.Realtek Semiconductor Corp.®
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated®

---\\ Services not Microsoft (SR=Run, SS=Stop) (33) - 85s

SS - Demand [10/04/2018] [ 272384] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated
SR - Auto [14/03/2017] [ 771672] AdobeUpdateService (AdobeUpdateService) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
SR - Auto [11/05/2018] [ 2321384] Adobe Genuine Monitor Service (AGMService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe {06B922A8397E632FE5348DA267275B4F} =>.Adobe Systems, Incorporated
SR - Auto [11/05/2018] [ 2128872] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe {06B922A8397E632FE5348DA267275B4F} =>.Adobe Systems, Incorporated
SR - Auto [14/12/2016] [ 269824] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe =>.AMD
SS - Demand [14/11/2017] [ 6971400] BattlEye Service (BEService) . (...) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe =>.BattlEye Innovations e.K.®
SR - Auto [18/05/2010] [ 345376] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SR - Auto [13/05/2016] [ 125656] BTDevManager (BTDevManager) . (.Realtek Semiconductor Corp..) - C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe =>.Realtek Semiconductor Corp®
SR - Auto [06/03/2018] [ 71000] Service Bureau à distance Google Chrome (chromoting) . (.Google Inc..) - C:\Program Files (x86)\Google\Chrome Remote Desktop\66.0.3359.12\remoting_host.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
SS - Demand [06/12/2016] [ 301528] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\IntelCpHeciSvc.exe {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation
SS - Demand [06/12/2016] [ 480216] Intel(R) Content Protection HDCP Service (cplspcon) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\IntelCpHDCPSvc.exe {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation
SS - Auto [06/11/2016] [ 143144] Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SS - Demand [06/11/2016] [ 143144] Service Mise à jour Dropbox (dbupdatem) (dbupdatem) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SR - Auto [31/07/2018] [ 51392] DbxSvc (DbxSvc) . (.Dropbox, Inc..) - C:\WINDOWS\system32\DbxSvc.exe =>.Dropbox, Inc.
SS - Demand [06/02/2017] [ 1471168] Disc Soft Lite Bus Service (Disc Soft Lite Bus Service) . (.Disc Soft Ltd.) - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe =>.Disc Soft Ltd®
SR - Auto [06/03/2016] [ 1392792] @oem50.inf,%ServiceDisplayName%;ESIF Upper Framework Service (esifsvc) . (.Intel Corporation.) - C:\Windows\SysWOW64\esif_uf.exe =>.Intel(R) Software®
SS - Auto [12/09/2016] [ 153752] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [12/09/2016] [ 153752] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [28/04/2015] [ 1102472] HP Software Framework Service (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe =>.Hewlett-Packard Company®
SR - Auto [13/06/2018] [ 333688] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc..) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe {09C52C2531CDAEC35C5EDC2E95758767}
SR - Auto [11/01/2016] [ 606224] HPWMISVC (HPWMISVC) . (.HP Inc..) - c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe =>.Hewlett-Packard Company®
SS - Demand [04/04/2005] [ 69632] InstallDriver Table Manager (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe =>.Macrovision Corporation
SR - Auto [06/12/2016] [ 341976] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\igfxCUIService.exe {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation
SS - Demand [19/02/2016] [ 974632] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe {56000000310A58E8DCBBE5B2BF000000000031} =>.Intel(R) Corporation
SR - Auto [25/05/2016] [ 209184] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
SR - Auto [09/05/2018] [ 6541008] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
SS - Demand [09/05/2018] [ 194512] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Foundation
SR - Auto [14/04/2014] [ 389896] Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2004.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe =>.CyberLink Corp.®
SR - Auto [14/12/2016] [ 317960] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor
SR - Auto [24/08/2016] [ 223952] Realtek Bluetooth Device Manager Service (RtkBtManServ) . (.Realtek Semiconductor Corp..) - C:\Windows\RtkBtManServ.exe =>.Realtek Semiconductor Corp.®
SS - Auto [05/04/2017] [ 317400] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies
SR - Auto [18/08/2017] [ 278616] SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated®

---\\ Process running (48) - 37s
[MD5.645C9AC38573AB238C49BC408F9132C0] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [269824] [PID.1464] =>.AMD
[MD5.02EBA45A43CA1E0C13275679E4518BF7] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\igfxCUIService.exe [341976] [PID.2144] {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation
[MD5.D4CC1F3943F3F44EEB2DFDDEA0F4B9D0] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [317960] [PID.2332] {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor
[MD5.FB19CDD0273AA45DBA69C0CF0237BDDC] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1467400] [PID.2576] {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor
[MD5.99267CFA00F6FD971BBF4B01BB5DFA1F] - (.Realtek Semiconductor Corp. - Realtek Bluetooth BTDevManager Service Appl.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe [125656] [PID.2928] =>.Realtek Semiconductor Corp®
[MD5.49EDBE0603232013F7247413407F713E] - (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\SysWOW64\esif_uf.exe [1392792] [PID.2976] =>.Intel(R) Software®
[MD5.9E18DF158751CF968E7DF83256D70233] - (.Copyright 2004 - RichVideo Module.) -- C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896] [PID.3060] =>.CyberLink Corp.®
[MD5.AEE4EFE6B42133EB03BB0DA017713FE2] - (.Realtek Semiconductor Corp. - Realtek Bluetooth Device Manager Service Ap.) -- C:\Windows\RtkBtManServ.exe [223952] [PID.2608] =>.Realtek Semiconductor Corp.®
[MD5.91AF2EF13E4F1A555F16C49F50BF8746] - (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616] [PID.3128] =>.Synaptics Incorporated®
[MD5.F889EEDCD5FF5BDD3A70A26763AA6C08] - (.Google Inc. - Host Process.) -- C:\Program Files (x86)\Google\Chrome Remote Desktop\66.0.3359.12\remoting_host.exe [71000] [PID.3380] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.7109608928D8AB470D60F47BAD5D153A] - (.HP Inc. - HP WMI Service.) -- c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224] [PID.3396] =>.Hewlett-Packard Company®
[MD5.3D1BB871A893182B0058A4898D5AFE29] - (.Adobe Systems, Incorporated - Adobe Genuine Software Service.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384] [PID.3404] {06B922A8397E632FE5348DA267275B4F} =>.Adobe Systems, Incorporated
[MD5.C20CA26CDE768CA950C622B866292FC2] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872] [PID.3412] {06B922A8397E632FE5348DA267275B4F} =>.Adobe Systems, Incorporated
[MD5.5AB58C337AC65837FE404462AD6265AB] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe [345376] [PID.3420] =>.Apple Inc.®
[MD5.79EE5A2B3BF3685AF9B7AC4780371A25] - (.Adobe Systems Incorporated - Adobe Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672] [PID.3428] {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
[MD5.F7265B7490428499F2FE409FA9247866] - (.Malwarebytes - Malwarebytes Service.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008] [PID.3988] {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
[MD5.F889EEDCD5FF5BDD3A70A26763AA6C08] - (.Google Inc. - Host Process.) -- C:\Program Files (x86)\Google\Chrome Remote Desktop\66.0.3359.12\remoting_host.exe [71000] [PID.6308] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.DAD1AA633E8933010BA91C3B205D2673] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [505856] [PID.3548] =>.AMD
[MD5.0101294E7BA216B0158056AFA42A7AAB] - (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\Temp\DPTF\esif_assist_64.exe [257152] [PID.6384] =>.Intel(R) Software®
[MD5.AEBC1AFA26110E24B324B10FFD7D99D7] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [4397144] [PID.3732] =>.Synaptics Incorporated®
[MD5.0486C5A48DB97E46E7E4BE47BA302A3A] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [228960] [PID.7268] =>.Synaptics Incorporated®
[MD5.A1F58FFF448E4099297D6EE0641D4D0E] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144] [PID.8048] =>.Dropbox, Inc®
[MD5.8BD365F288053303EC084AF137FC61B6] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\igfxEM.exe [523224] [PID.6120] {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation
[MD5.025A4E7D215B3ECF28D12BAE1C54889D] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184] [PID.7976] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
[MD5.62305D013F4E1538FA071846BD62FF52] - (.f.lux Software LLC - f.lux.) -- C:\Users\Pierre\AppData\Local\FluxSoftware\Flux\flux.exe [1806344] [PID.9672] {22367DBEFD0A325C3893AF52547B14FA}
[MD5.519587E665F07955E5CCF65005FD1288] - (...) -- C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\Music.UI.exe [32597504] [PID.8016]
[MD5.192AD7F10B8FCC839ABA8219CA1C80FA] - (.Malwarebytes - Malwarebytes Tray Application.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe [3783376] [PID.6556] {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
[MD5.24AFAD9B4B24FD1D4BF7127A2DC78D92] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [9818328] [PID.12768] =>.Piriform Ltd®
[MD5.47F9DE278EC12CE12EC5AEE83086AFD0] - (.Dropbox, Inc. - Dropbox Service.) -- C:\Windows\System32\DbxSvc.exe [51392] [PID.13244] {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
[MD5.F2168DDE2504DBDEFED086C8FDB16FB8] - (.Dashlane, Inc. - Dashlane.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\Dashlane.exe [383440] [PID.11116] =>.Dashlane®
[MD5.CC1EE843D36A3F2170B8790078C74B26] - (.Dashlane, Inc. - Dashlane Plugin Agent.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\DashlanePlugin.exe [409552] [PID.9292] =>.Dashlane®
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.11404] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.8644] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.8776] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.10584] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.1400] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.340] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.11572] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.9B02BA9006BB416680443C6AD6024DE9] - (.HP Inc. - HP Support Solutions Framework Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [333688] [PID.5448] {09C52C2531CDAEC35C5EDC2E95758767}
[MD5.B42C26F211B24D4A51C6DD93F6D2AF9A] - (.Realtek Semiconductor Corporation - Realtek Bluetooth BTServer Application.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe [231640] [PID.6820] =>.Realtek Semiconductor Corp®
[MD5.78F8D380FACC2776C3CC9A0A1A212C2E] - (.Copyright (C) 2016 - League of Legends.) -- C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.158\deploy\LeagueClient.exe [3529344] [PID.5504] {0B323EA833805ADB47136D642EA9E519}
[MD5.974D0FE277B14AD0182B9AD732B49EF7] - (.Copyright (C) 2016 - League of Legends.) -- C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.158\deploy\LeagueClientUx.exe [1748608] [PID.7292] {0B323EA833805ADB47136D642EA9E519}
[MD5.9A8F044B87FCBFB323DCB73823B6DA37] - (.Copyright (C) 2016 - League of Legends.) -- C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.158\deploy\LeagueClientUxRender.exe [916096] [PID.2876] {0B323EA833805ADB47136D642EA9E519}
[MD5.9A8F044B87FCBFB323DCB73823B6DA37] - (.Copyright (C) 2016 - League of Legends.) -- C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.158\deploy\LeagueClientUxRender.exe [916096] [PID.10896] {0B323EA833805ADB47136D642EA9E519}
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.3124] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.5D9A6230D70565DB03A428B44DE524D6] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1589592] [PID.10120] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
[MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Pierre\Desktop\ZHPDiag3.exe [2105344] [PID.10580] =>.Nicolas Coolman
[MD5.4ED8EA77F57E6A723B1E572C0FD96F76] - (.Copyright (C) 2009 - League of Legends (TM) Client.) -- C:\Riot Games\League of Legends\RADS\solutions\lol_game_client_sln\releases\0.0.1.232\deploy\League of Legends.exe [25611392] [PID.11988] {0B323EA833805ADB47136D642EA9E519}

---\\ Google Chrome, Start,Search,Extensions (27) - 4s
G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://fr-fr.facebook.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://logs.dashlane.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://s2.googleusercontent.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://scontent-cdg2-1.xx.fbcdn.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://static.xx.fbcdn.net
G0 - GCSP: Preferences [User Data\Default][HomePage] http://ws1.dashlane.com
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr
G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [clellnciejhoedgepbdilbkdkaoecgpc] __MSG_search_string__
G2 - GCE: Preference [User Data\Default] [fdjamakpfbbddfjaooikfcpapjohcfmg] __MSG_ExtensionName__
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gbchcmhmhahfdphkhkmpfmihenigjmpp] __MSG_PRODUCT_NAME__
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] __MSG_name__
G2 - GCE: Preference [User Data\Default] [jkfpchpiljkaemlpmpebnglgkomamfeo] __MSG_name__
G2 - GCE: Preference [User Data\Default] [kbfnbcaeplbcioakkpcpgfkobkghlhen] Grammarly for Chrome
G2 - GCE: Preference [User Data\Default] [ldipcbpaocekfooobnbcddclnhejkcpn] __MSG_853__
G2 - GCE: Preference [User Data\Default] [lmjegmlicamnimmfhcmpkclmigmmcbeh] Application Launcher for Drive (by Google)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router

---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (2) - 3s
M0 - MFSP: prefs.js [Pierre - c05uzbzm.default] https://www.bing.com/search?FORM=INCOH1&PC=IC04&PTAG=ICO-eaaad767
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_140.dll =>.Adobe Systems Incorporated

---\\ Internet Explorer Extensions, Start, Search (16) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp15-comm.msn.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (2) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1

---\\ Line Analysis, IniFiles, Auto loading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Hosts file redirection (1) - 1s
~ Le fichier hôte est sain (The hosts file is clean) (181)

---\\ Browser Helper Object (BHO) (1) - 0s
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation

---\\ Internet Explorer Toolbars (1) - 0s
O3 - Toolbar: Dashlane Toolbar - [HKLM]{669695BC-A811-4A9D-8CDF-BA8C795F261C} . (.Dashlane, Inc. - Dashlane Toolbar.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\ie\KWIEBar.dll =>.Dashlane®

---\\ Auto loading programs from Registry and folders (31) - 10s
O4 - HKLM\..\Run: [SecurityHealth] C:\Program Files (x86)\Windows Defender\MSASCuiL.exe (.not file.)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Realtek HD Audio Manager.) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor
O4 - HKLM\..\Run: [BtServer] . (.Realtek Semiconductor Corporation - Realtek Bluetooth BTServer Application.) -- C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [StartCN] . (.Advanced Micro Devices, Inc. - Radeon Settings: Host Application.) -- C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe {72DCD35B1DBBF28F0F9848EC766A1BDF} =>.Advanced Micro Devices, Inc.
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O4 - HKLM\..\Run: [AdobeGCInvoker-1.0] . (.Adobe Systems, Incorporated - Adobe GC Invoker Utility.) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe {06B922A8397E632FE5348DA267275B4F} =>.Adobe Systems, Incorporated
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\OneDrive.exe {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation
O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google
O4 - HKCU\..\Run: [f.lux] . (.f.lux Software LLC - f.lux.) -- C:\Users\Pierre\AppData\Local\FluxSoftware\Flux\flux.exe {22367DBEFD0A325C3893AF52547B14FA}
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd®
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A.
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKCU\..\Run: [Lync] . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe {33000001B1DDEDBA54E965B85F0001000001B1} =>.Microsoft Corporation
O4 - HKCU\..\Run: [Dashlane] . (.Dashlane, Inc. - Dashlane.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - HKCU\..\Run: [DashlanePlugin] . (.Dashlane, Inc. - Dashlane Plugin Agent.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\DashlanePlugin.exe =>.Dashlane®
O4 - HKLM\..\Wow6432Node\Run: [HPMessageService] . (.HP Inc. - HP Message Service.) -- C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe =>.Hewlett-Packard Company®
O4 - HKLM\..\Wow6432Node\Run: [HPRadioMgr] . (.HP - HP Radio Manager.) -- C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe {7DF6663C9426BB4538D723CF5E9CF9F1} =>.HP
O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [Dropbox] . (.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe {330000004C80D5F9985076B09C00010000004C} =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe {330000004C80D5F9985076B09C00010000004C} =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\OneDrive.exe {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [f.lux] . (.f.lux Software LLC - f.lux.) -- C:\Users\Pierre\AppData\Local\FluxSoftware\Flux\flux.exe {22367DBEFD0A325C3893AF52547B14FA}
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [DAEMON Tools Lite Automount] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTAgent.exe =>.Disc Soft Ltd®
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [Lync] . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe {33000001B1DDEDBA54E965B85F0001000001B1} =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [Dashlane] . (.Dashlane, Inc. - Dashlane.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - HKUS\S-1-5-21-3730925736-1926371800-1087466453-1001\..\Run: [DashlanePlugin] . (.Dashlane, Inc. - Dashlane Plugin Agent.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\DashlanePlugin.exe =>.Dashlane®

---\\ Global shortcuts Startup (53) - 40s
O4 - GS\Desktop [Administrateur]: Adobe Creative Cloud.lnk . (.Adobe Systems Incorporated - Adobe Creative Cloud.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O4 - GS\Desktop [Administrateur]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - GS\Desktop [Administrateur]: CodeBlocks.lnk . (.Code::Blocks Team - Code::Blocks IDE.) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Desktop [Administrateur]: Dashlane.lnk . (.Dashlane, Inc. - Dashlane.) C:\Users\Pierre\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - GS\Desktop [Administrateur]: Documents.lnk . (...) C:\Users\Pierre\Documents
O4 - GS\Desktop [Administrateur]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O4 - GS\Desktop [Administrateur]: Molotov.lnk . (.GitHub - Update.) C:\Users\Pierre\AppData\Local\Molotov\Update.exe
O4 - GS\Desktop [Administrateur]: SML Coventry -.lnk . (...) C:\Users\Pierre\Documents\Bachelor Européen Management & Development\Year 2 Coventry
O4 - GS\Desktop [Administrateur]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files\Sublime Text 3\sublime_text.exe {7F74C210CC0D477C7F54A8D4822D6A} =>.Sublime HQ Pty Ltd
O4 - GS\Desktop [Administrateur]: VeraCrypt.lnk . (.IDRIX - VeraCrypt.) C:\Program Files\VeraCrypt\VeraCrypt.exe {4881735DD957F825E7FDBFF04234A30E} =>.IDRIX
O4 - GS\Quicklaunch [Administrateur]: Adobe Digital Editions 4.5.lnk . (.Adobe Systems Incorporated - Adobe Digital Editions 4.5.7.) C:\Program Files (x86)\Adobe\Adobe Digital Editions 4.5\DigitalEditions.exe {0477A22187DB153954FFAE56B17E2FB1} =>.Adobe Systems Incorporated
O4 - GS\Quicklaunch [Administrateur]: CodeBlocks.lnk . (.Code::Blocks Team - Code::Blocks IDE.) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Quicklaunch [Administrateur]: XMind 8 Update 1.lnk . (...) C:\Program Files (x86)\XMind\XMind.exe
O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A.
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Desktop [Pierre]: Adobe Creative Cloud.lnk . (.Adobe Systems Incorporated - Adobe Creative Cloud.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O4 - GS\Desktop [Pierre]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - GS\Desktop [Pierre]: CodeBlocks.lnk . (.Code::Blocks Team - Code::Blocks IDE.) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Desktop [Pierre]: Dashlane.lnk . (.Dashlane, Inc. - Dashlane.) C:\Users\Pierre\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - GS\Desktop [Pierre]: Documents.lnk . (...) C:\Users\Pierre\Documents
O4 - GS\Desktop [Pierre]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O4 - GS\Desktop [Pierre]: Molotov.lnk . (.GitHub - Update.) C:\Users\Pierre\AppData\Local\Molotov\Update.exe
O4 - GS\Desktop [Pierre]: SML Coventry -.lnk . (...) C:\Users\Pierre\Documents\Bachelor Européen Management & Development\Year 2 Coventry
O4 - GS\Desktop [Pierre]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files\Sublime Text 3\sublime_text.exe {7F74C210CC0D477C7F54A8D4822D6A} =>.Sublime HQ Pty Ltd
O4 - GS\Desktop [Pierre]: VeraCrypt.lnk . (.IDRIX - VeraCrypt.) C:\Program Files\VeraCrypt\VeraCrypt.exe {4881735DD957F825E7FDBFF04234A30E} =>.IDRIX
O4 - GS\Quicklaunch [Pierre]: Adobe Digital Editions 4.5.lnk . (.Adobe Systems Incorporated - Adobe Digital Editions 4.5.7.) C:\Program Files (x86)\Adobe\Adobe Digital Editions 4.5\DigitalEditions.exe {0477A22187DB153954FFAE56B17E2FB1} =>.Adobe Systems Incorporated
O4 - GS\Quicklaunch [Pierre]: CodeBlocks.lnk . (.Code::Blocks Team - Code::Blocks IDE.) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Quicklaunch [Pierre]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Quicklaunch [Pierre]: XMind 8 Update 1.lnk . (...) C:\Program Files (x86)\XMind\XMind.exe
O4 - GS\sendTo [Pierre]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A.
O4 - GS\TaskBar [Pierre]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Desktop [WDAGUtilityAccount]: Adobe Creative Cloud.lnk . (.Adobe Systems Incorporated - Adobe Creative Cloud.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O4 - GS\Desktop [WDAGUtilityAccount]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - GS\Desktop [WDAGUtilityAccount]: CodeBlocks.lnk . (.Code::Blocks Team - Code::Blocks IDE.) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Desktop [WDAGUtilityAccount]: Dashlane.lnk . (.Dashlane, Inc. - Dashlane.) C:\Users\Pierre\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - GS\Desktop [WDAGUtilityAccount]: Documents.lnk . (...) C:\Users\Pierre\Documents
O4 - GS\Desktop [WDAGUtilityAccount]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O4 - GS\Desktop [WDAGUtilityAccount]: Molotov.lnk . (.GitHub - Update.) C:\Users\Pierre\AppData\Local\Molotov\Update.exe
O4 - GS\Desktop [WDAGUtilityAccount]: SML Coventry -.lnk . (...) C:\Users\Pierre\Documents\Bachelor Européen Management & Development\Year 2 Coventry
O4 - GS\Desktop [WDAGUtilityAccount]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files\Sublime Text 3\sublime_text.exe {7F74C210CC0D477C7F54A8D4822D6A} =>.Sublime HQ Pty Ltd
O4 - GS\Desktop [WDAGUtilityAccount]: VeraCrypt.lnk . (.IDRIX - VeraCrypt.) C:\Program Files\VeraCrypt\VeraCrypt.exe {4881735DD957F825E7FDBFF04234A30E} =>.IDRIX
O4 - GS\Quicklaunch [WDAGUtilityAccount]: Adobe Digital Editions 4.5.lnk . (.Adobe Systems Incorporated - Adobe Digital Editions 4.5.7.) C:\Program Files (x86)\Adobe\Adobe Digital Editions 4.5\DigitalEditions.exe {0477A22187DB153954FFAE56B17E2FB1} =>.Adobe Systems Incorporated
O4 - GS\Quicklaunch [WDAGUtilityAccount]: CodeBlocks.lnk . (.Code::Blocks Team - Code::Blocks IDE.) C:\Program Files (x86)\CodeBlocks\codeblocks.exe
O4 - GS\Quicklaunch [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\Quicklaunch [WDAGUtilityAccount]: XMind 8 Update 1.lnk . (...) C:\Program Files (x86)\XMind\XMind.exe
O4 - GS\sendTo [WDAGUtilityAccount]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A.
O4 - GS\TaskBar [WDAGUtilityAccount]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O4 - GS\CommonDesktop [Public]: Adobe Digital Editions 4.5.lnk . (.Adobe Systems Incorporated - Adobe Digital Editions 4.5.7.) C:\Program Files (x86)\Adobe\Adobe Digital Editions 4.5\DigitalEditions.exe {0477A22187DB153954FFAE56B17E2FB1} =>.Adobe Systems Incorporated
O4 - GS\CommonDesktop [Public]: DAEMON Tools Lite.lnk . (.Disc Soft Ltd - DAEMON Tools Lite.) C:\Program Files\DAEMON Tools Lite\DTLauncher.exe =>.Disc Soft Ltd®
O4 - GS\CommonDesktop [Public]: Malwarebytes.lnk . (.Malwarebytes - Malwarebytes.) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
O4 - GS\Programs [Public]: 4K Video Downloader.lnk . (...) C:\Program Files (x86)\4KDownload\4kvideodownloader\4kvideodownloader.exe
O4 - GS\Programs [Public]: f.lux.lnk . (.f.lux Software LLC - f.lux.) C:\Users\Pierre\AppData\Local\FluxSoftware\Flux\flux.exe {22367DBEFD0A325C3893AF52547B14FA}

---\\ Lop.com/Domain Hijackers (8) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{00c58edd-3988-46b3-8c43-296cd2462fe8}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0cb7835f-be3e-4818-9d04-0e98c0cd44ec}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4255a4c9-b037-47ed-98ff-59f31d1150ac}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7f66ea01-d022-4ff4-b8b5-836e1301148a}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{b22212d7-4a64-4679-89ed-224c57851e78}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{e1a7090e-f830-4fe9-8e59-3722106f3164}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0cb7835f-be3e-4818-9d04-0e98c0cd44ec}: DhcpDomain = lan

---\\ Extra protocols (27) - 2s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: mso-minsb-roaming.16 [64Bits] - {83C25742-A9F7-49FB-9138-434302C88D07} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation
O18 - Handler: mso-minsb.16 [64Bits] - {42089D2D-912D-4018-9087-2B87803E93FB} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation
O18 - Handler: osf-roaming.16 [64Bits] - {42089D2D-912D-4018-9087-2B87803E93FB} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation
O18 - Handler: osf.16 [64Bits] - {5504BE45-A83B-4808-900A-3A5C36E7F77A} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX control for streaming video.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSOXMLMF.DLL {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation

---\\ List of key exploring StartupApproved (26) - 1s
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Monitoring
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Chromium
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleDriveSync
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Skype
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:f.lux
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:DAEMON Tools Lite Automount
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:uTorrent
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Steam
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Lync
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:ApowerMirror
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Dashlane
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:DashlanePlugin
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Monitoring
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Chromium
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:GoogleDriveSync
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Skype
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:f.lux
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:DAEMON Tools Lite Automount
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:uTorrent
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Steam
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Lync
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:ApowerMirror
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Dashlane
[HKEY_USERS\S-1-5-21-3730925736-1926371800-1087466453-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:DashlanePlugin

---\\ Software installed (126) - 37s
O42 - Logiciel: 4K Video Downloader 4.4 - (.Open Media LLC.) [HKLM][64Bits] -- {F350AF86-CD2C-45DC-9F5E-9C1A6789E537} =>.Open Media LLC
O42 - Logiciel: Adobe Creative Cloud - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Creative Cloud {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Digital Editions 4.5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Digital Editions 4.5 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 29 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Photoshop CC 2017 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- PHSP_18_1_1 {6DC3ED4566163E279D2784C99FFFD787} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Shockwave Player 12.1 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player =>.Adobe Systems, Inc.
O42 - Logiciel: Age of Empires - (.R.G. Mechanics, Panky.) [HKLM][64Bits] -- Age of Empires_R.G. Mechanics_is1
O42 - Logiciel: Age of Empires III - Complete Collection - (...) [HKLM][64Bits] -- Age of Empires III - Complete Collection_is1
O42 - Logiciel: AMD Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F6587D07-0518-9D13-757C-DA9B5CE95494} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: AMD Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- AMD Catalyst Install Manager {72DCD35B1DBBF28F0F9848EC766A1BDF} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: AMD Settings - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4E931AA8-B078-33AF-6ED0-EDBED4FA55B1} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: AMD Settings - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A48379F6-3331-3007-7C24-5E1354764B7A} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: AMD Settings - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {DCC3D1D4-368A-452A-BC0E-70FE057DB2E9} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Battle for Wesnoth 1.12.6 - (...) [HKLM][64Bits] -- Battle for Wesnoth 1.12.6
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {B91110FB-33B4-468B-90C2-4D5E8AE3FAE1} =>.Apple Inc.
O42 - Logiciel: Brackets - (.brackets.io.) [HKLM][64Bits] -- {52DEA4FA-97A9-4319-8CC7-5A2DC909EA45} =>.brackets.io
O42 - Logiciel: Catalyst Control Center Next Localization BR - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {990A818A-23DE-F425-E8B4-78341E95694B} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization CHS - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {842F1C45-EB39-AA4F-2934-2A22E03C95AF} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization CHT - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9C368472-2529-72F9-7DC3-98B1C8954188} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization CS - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {1E774F55-4593-93A1-C5A1-B1EFFA15259C} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization DA - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {CB3F96D2-AEEE-7E4D-1650-45A33F0A52D6} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization DE - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {25C480D6-0954-E30A-FF8A-3061AA2F6F6E} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization EL - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F271E21D-ADF7-7D12-BDC9-FC1F4ACEAF70} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization ES - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {B6A3C338-F8D1-79FB-F313-F13798FAD1A4} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization FI - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {7A1C1FC3-5F6D-B713-F03B-07F82812E4F5} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization FR - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {95F53CAE-1224-D221-823D-6212778BB14C} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization HU - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {791E8BFE-4C74-E908-A9D2-0130855EED07} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization IT - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {75C985EB-94BF-FFDB-9137-8020CB536DDB} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization JA - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {879C208E-D878-DEFC-DB7D-507C5F9B82CD} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization KO - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {7C98D0BB-C8BA-1C84-BD5F-B7045237EA6D} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization NL - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {557B2A4E-D2CB-B061-B54A-875CF9927C5E} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization NO - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {30EFA954-0DD1-F213-9E87-5ECFFB610202} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization PL - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {8C2BF250-50A1-EA32-49F2-D5C3F639BD93} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization RU - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F776812E-84AB-213D-49E6-A149F12AE58A} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization SV - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4CC8D5F2-C67C-9831-6BE9-E02093BB6E94} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization TH - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4DBA5600-02D4-2B71-2AF5-DA4EADC46A1C} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Next Localization TR - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4D900229-FE15-713B-E917-569EB8DBB13C} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Chrome Remote Desktop Host - (.Google Inc..) [HKLM][64Bits] -- {FBB43A99-0B72-461A-A6D2-2F1B54D36B69} =>.Google Inc.
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {AF312B06-5C5C-468E-89B3-BE6DE2645722} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F} =>.Cisco Systems, Inc.
O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU][64Bits] -- CodeBlocks =>.The Code::Blocks Team
O42 - Logiciel: CyberLink Power Media Player 14 - (.CyberLink Corp..) [HKLM][64Bits] -- {32C8E300-BDB4-4398-92C2-E9B7D8A233DB} =>.CyberLink Corp.
O42 - Logiciel: CyberLink PowerDirector 12 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093} =>.CyberLink Corp.®
O42 - Logiciel: CyberLink PowerDirector 12 - (.Nom de votre société.) [HKLM][64Bits] -- {E1646825-D391-42A0-93AA-27FA810DA093} =>.CyberLink Corp.®
O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.Disc Soft Ltd®
O42 - Logiciel: Dashlane - (.Dashlane, Inc..) [HKCU][64Bits] -- Dashlane
O42 - Logiciel: DisableMSDefender - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {74FE39A0-FB76-47CD-84BA-91E2BBB17EF2} =>.Hewlett-Packard Company
O42 - Logiciel: DriverDoc - (.Solvusoft Corporation.) [HKLM][64Bits] -- {650580EA-978C-4C04-81B9-BA53BB34BCBE} =>.Superfluous.Solvusoft
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKLM][64Bits] -- Dropbox {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O42 - Logiciel: Dropbox 25 GB - (.Dropbox, Inc..) [HKLM][64Bits] -- {0867A88D-764F-366E-9E21-130DA8B472C3} =>.Dropbox, Inc.
O42 - Logiciel: Dropbox Update Helper - (.Dropbox, Inc..) [HKLM][64Bits] -- {099218A5-A723-43DC-8DB5-6173656A1E94} =>.Dropbox, Inc.
O42 - Logiciel: Energy Star - (.HP Inc..) [HKLM][64Bits] -- {5CB22648-35F8-41BC-9C35-1E41FE6E12A5}
O42 - Logiciel: Epic Games Launcher - (.Epic Games, Inc..) [HKLM][64Bits] -- {2397C85A-6BB0-4398-99ED-06D6233E478A} =>.Epic Games, Inc.
O42 - Logiciel: Epic Games Launcher Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] -- {66C5838F-B854-4A55-89E6-A6138747A4DF} =>.Epic Games, Inc.
O42 - Logiciel: EPSON XP-205 207 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON XP-205 207 Series =>.SEIKO EPSON Corporation®
O42 - Logiciel: f.lux - (.f.lux Software LLC.) [HKCU][64Bits] -- Flux
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {9BC95947-92FD-438B-A168-C01F9A5B7292} =>.Google, Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {C9EF1AAF-B542-41C8-A537-1142DA5D4AEC} =>.Hewlett-Packard
O42 - Logiciel: HP Documentation - (.HP.) [HKLM][64Bits] -- HP_Documentation =>.HP
O42 - Logiciel: HP ePrint SW - (.HP.) [HKLM][64Bits] -- {3C246BB4-8985-480D-8163-0E075A23AB04} =>.HP
O42 - Logiciel: HP ePrint SW - (.HP.) [HKLM][64Bits] -- {7855A8A5-0B5B-41A9-AC8B-A50405FB72FE} =>.HP
O42 - Logiciel: HP ePrint SW - (.HP.) [HKLM][64Bits] -- {7ADB025F-BFB1-480B-B3BF-B2FF8F115FB8} =>.HP
O42 - Logiciel: HP ePrint SW - (.HP.) [HKLM][64Bits] -- {88970959-baf7-4864-a39a-69a58e8ae5cf} {00871FF341E259949C6F9897442ACE2AEB} =>.HP
O42 - Logiciel: HP ePrint SW - (.HP.) [HKLM][64Bits] -- {E2A0A04B-C0A4-49F5-A496-4B93E1D0710D} =>.HP
O42 - Logiciel: HP ePrint SW - (.HP.) [HKLM][64Bits] -- {EFDACC2F-510D-4A1A-A988-196D58B4B915} =>.HP
O42 - Logiciel: HP PC Hardware Diagnostics UEFI - (.HP.) [HKLM][64Bits] -- {924D3ABC-FC75-4042-9DDB-FB846A45848D} =>.HP
O42 - Logiciel: HP Recovery Manager - (.HP.) [HKLM][64Bits] -- {64BAA990-F1FC-4145-A7B1-E41FBBC9DA47} =>.HP
O42 - Logiciel: HP Registration Service - (.Hewlett-Packard.) [HKLM][64Bits] -- {D1E8F2D7-7794-4245-B286-87ED86C1893C} =>.Hewlett-Packard
O42 - Logiciel: HP Support Assistant - (.HP.) [HKLM][64Bits] -- {E959FD01-BD01-4CC4-9BB8-4EBE8309BF37} =>.HP
O42 - Logiciel: HP Support Solutions Framework - (.HP.) [HKLM][64Bits] -- {C18278AC-049A-4F02-A97F-4FD7294CC4F5} =>.HP
O42 - Logiciel: HP System Event Utility - (.HP Inc..) [HKLM][64Bits] -- {09D0DB68-90EA-4015-983E-A0BD777D5A02}
O42 - Logiciel: HP Welcome - (.HP Inc..) [HKLM][64Bits] -- HPWelcome
O42 - Logiciel: HP Wireless Button Driver - (.HP.) [HKLM][64Bits] -- {099DAD2B-56C5-4919-9F82-418C2A018CAE} =>.HP
O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel Corporation.) [HKLM][64Bits] -- {FEBB7B48-CC1C-4A50-A497-FA21413F6BE9} =>.Intel Corporation
O42 - Logiciel: Intel(R) Dynamic Platform and Thermal Framework - (.Intel Corporation.) [HKLM][64Bits] -- {654EE65D-FAA4-4EA6-8C07-DC94E6A304D4} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {54EC951C-4197-4AA4-803B-101F127BBB38} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {BD135157-92CB-471A-9BFF-BB04E6ECF25B} =>.Intel Corporation
O42 - Logiciel: Intel(R) ME UninstallLegacy - (.Intel Corporation.) [HKLM][64Bits] -- {335F9123-9306-4DB0-AF07-9C636317EE9D} =>.Intel Corporation
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} =>.Intel Corporation
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {98A452E7-A559-4687-A58C-0C6A3EBEB625} =>.Intel Corporation
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {3973721B-C2ED-4505-98B6-752897ECF2F1} =>.Intel Corporation
O42 - Logiciel: Java 8 Update 131 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180131F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Launcher Prerequisites (x64) - (.Epic Games, Inc..) [HKLM][64Bits] -- {c6c5a357-c7ca-4a5f-9789-3bb1af579253} =>.Epic Games Inc.®
O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM][64Bits] -- {11B73856-A062-4E6B-A80E-A3F380BBAB65} =>.Riot Games
O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM][64Bits] -- League of Legends 4.2.1 =>.Riot Games
O42 - Logiciel: Logiciel pour périphérique à chipset Intel® - (.Intel(R) Corporation.) [HKLM][64Bits] -- {619e726e-d2b4-4e28-9568-c964fd81ee6c} {5600000071934283BFC7A54FBD000000000071} =>.Intel(R) Corporation
O42 - Logiciel: Malwarebytes version 3.5.1.2522 - (.Malwarebytes.) [HKLM][64Bits] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
O42 - Logiciel: Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtensio - (.Microsoft Corporation.) [HKLM][64Bits] -- {B0169E83-757B-EF66-E2F0-391944D785BC} =>.Microsoft Corporation
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation
O42 - Logiciel: Molotov - (.Molotov.) [HKCU][64Bits] -- Molotov
O42 - Logiciel: Mozilla Firefox 59.0.2 (x64 en-US) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 59.0.2 (x64 en-US) {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} =>.Microsoft Corporation
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9} =>.NVIDIA Corporation
O42 - Logiciel: OEM Application Profile - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {B4B7FD8F-06FC-E277-4F29-8F75F8281D8F} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-0000-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component 64-bit Registration - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-00DD-0000-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008F-0000-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Office 16 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-040C-0000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU][64Bits] -- PhotoFiltre 7
O42 - Logiciel: PX Profile Update - (.AMD.) [HKLM][64Bits] -- {1E6B7DAA-FB3A-B936-16A6-4062256FB769} =>.AMD
O42 - Logiciel: PX Profile Update - (.AMD.) [HKLM][64Bits] -- {3E213129-0089-388B-0CB7-DA55852F2184} =>.AMD
O42 - Logiciel: REALTEK Bluetooth Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {9D3D8C60-A5EF-4123-B2B9-172095903AB} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconduct Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor Corp.
O42 - Logiciel: REALTEK Wireless LAN Driver - (.REALTEK Semiconductor Corp..) [HKLM][64Bits] -- {A5107464-AA9B-4177-8129-5FF2F42DD322} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Skype™ 7.36 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {3B7E914A-93D5-4A29-92BB-AF8C3F66C431} =>.Skype Technologies S.A.
O42 - Logiciel: Sublime Text Build 3126 - (.Sublime HQ Pty Ltd.) [HKLM][64Bits] -- Sublime Text 3_is1 {7F74C210CC0D477C7F54A8D4822D6A} =>.Sublime HQ Pty Ltd
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} =>.Adobe Systems, Inc
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated
O42 - Logiciel: TmNationsForever - (.Nadeo.) [HKLM][64Bits] -- TmNationsForever_is1 =>.Nadeo
O42 - Logiciel: Update for Windows 10 for x64-based Systems (KB4023057) - (.Microsoft Corporation.) [HKLM][64Bits] -- {479E8CC7-CD68-4EB4-BB04-34A5C2C74102} =>.Microsoft Corporation
O42 - Logiciel: VeraCrypt - (.IDRIX.) [HKLM][64Bits] -- VeraCrypt {4881735DD957F825E7FDBFF04234A30E} =>.IDRIX
O42 - Logiciel: VirtualDJ 8 - (.Atomix Productions.) [HKLM][64Bits] -- {0BFED560-B459-42C6-BE7D-E7235AE5407A} =>.Atomix Productions
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: WinRAR 5.40 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®
O42 - Logiciel: XMind 8 Update 1 (v3.7.1) - (.XMind Ltd..) [HKLM][64Bits] -- XMind_is1 =>.XMind Ltd.

---\\ HKCU & HKLM Software Keys (118) - 37s
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies
HKLM\SOFTWARE\Wow6432Node\Battle for Wesnoth
HKLM\SOFTWARE\Wow6432Node\Brackets
HKLM\SOFTWARE\Wow6432Node\Canon
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Dropbox
HKLM\SOFTWARE\Wow6432Node\DropboxUpdate
HKLM\SOFTWARE\Wow6432Node\Electronic Arts
HKLM\SOFTWARE\Wow6432Node\Epic Games
HKLM\SOFTWARE\Wow6432Node\EpicGames
HKLM\SOFTWARE\Wow6432Node\EPSON
HKLM\SOFTWARE\Wow6432Node\GOG.com
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard
HKLM\SOFTWARE\Wow6432Node\HP
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\PandaViewer
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Riot Games
HKLM\SOFTWARE\Wow6432Node\RtWLan
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\VirtualDJ
HKLM\SOFTWARE\Wow6432Node\WinRAR
HKLM\SOFTWARE\Wow6432Node\WOW6432Node
HKLM\SOFTWARE\Wow6432Node\XMind Ltd
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\4kdownload.com
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AMD
HKCU\SOFTWARE\Andy
HKCU\SOFTWARE\Apowersoft
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Artem Izmaylov
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Brackets
HKCU\SOFTWARE\BugSplat
HKCU\SOFTWARE\Canon
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\CodeBlocks
HKCU\SOFTWARE\Cyberlink
HKCU\SOFTWARE\Dashlane
HKCU\SOFTWARE\Dashlane_profiles
HKCU\SOFTWARE\Disc Soft
HKCU\SOFTWARE\DMGR1.25
HKCU\SOFTWARE\Dropbox
HKCU\SOFTWARE\DropboxUpdate
HKCU\SOFTWARE\Epic Games
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\GameSpy
HKCU\SOFTWARE\GOG.com
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\HP
HKCU\SOFTWARE\IGA
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\IMDownloader
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Logitech
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Malwarebytes
HKCU\SOFTWARE\Michael Herf
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\nwjs
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Open Media LLC
HKCU\SOFTWARE\PDFsam Enhanced 4
HKCU\SOFTWARE\PhotoFiltre 7
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\Popcorn Time
HKCU\SOFTWARE\PopcornTime
HKCU\SOFTWARE\ProtectedStorage
HKCU\SOFTWARE\Psiphon3
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\SecuROM
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\skypeapp-b7c5a0408057
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\SyncEngines
HKCU\SOFTWARE\TheGreenBow
HKCU\SOFTWARE\Ubisoft
HKCU\SOFTWARE\undefined =>.Superfluous.Downloader
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\VirtualDJ
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\WixSharp
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software

---\\ Contents of the Common Files folders (281) - 111s
O43 - CFD: 14/12/2017 - [] D -- C:\Program Files (x86)\Adobe {0477A22187DB153954FFAE56B17E2FB1}
O43 - CFD: 06/04/2017 - [] D -- C:\Program Files (x86)\AIMP Classic
O43 - CFD: 07/06/2016 - [] AD -- C:\Program Files (x86)\AMD
O43 - CFD: 01/04/2018 - [] D -- C:\Program Files (x86)\AoE 1
O43 - CFD: 07/06/2016 - [] AD -- C:\Program Files (x86)\ATI Technologies
O43 - CFD: 18/04/2017 - [] D -- C:\Program Files (x86)\Battle for Wesnoth 1.12.6
O43 - CFD: 07/01/2018 - [] AD -- C:\Program Files (x86)\Bonjour =>.Apple Inc.®
O43 - CFD: 09/02/2017 - [] AD -- C:\Program Files (x86)\Brackets {452FE397C722A729B58C15488C644C76}
O43 - CFD: 07/06/2016 - [] D -- C:\Program Files (x86)\Cisco
O43 - CFD: 08/04/2018 - [] D -- C:\Program Files (x86)\CodeBlocks
O43 - CFD: 01/08/2018 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 03/10/2016 - [] D -- C:\Program Files (x86)\Cyberlink
O43 - CFD: 06/02/2018 - [] D -- C:\Program Files (x86)\Dashlane =>.Dashlane®
O43 - CFD: 02/08/2018 - [] D -- C:\Program Files (x86)\Dropbox =>.Dropbox, Inc®
O43 - CFD: 28/08/2017 - [] D -- C:\Program Files (x86)\EA Games {046916BFD4AC3A4461A1EDCC98C30AAE}
O43 - CFD: 07/10/2017 - [] AD -- C:\Program Files (x86)\Epic Games =>.Epic Games Inc.®
O43 - CFD: 26/03/2018 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 07/06/2016 - [] AD -- C:\Program Files (x86)\Hewlett-Packard =>.Hewlett-Packard Company®
O43 - CFD: 17/05/2017 - [] AD -- C:\Program Files (x86)\HP
O43 - CFD: 03/04/2018 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information {0320BE3EB866526927F999B97B04346E}
O43 - CFD: 24/01/2018 - [] D -- C:\Program Files (x86)\Intel {330000B898AA86B5A39E5A1BBD00020000B898}
O43 - CFD: 11/04/2018 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 25/05/2017 - [] D -- C:\Program Files (x86)\Java =>.Oracle America, Inc.®
O43 - CFD: 08/05/2017 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET
O43 - CFD: 01/08/2018 - [] AD -- C:\Program Files (x86)\Microsoft Office {33000001B1DDEDBA54E965B85F0001000001B1}
O43 - CFD: 02/04/2018 - [] D -- C:\Program Files (x86)\Microsoft Studios
O43 - CFD: 24/01/2018 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 27/02/2017 - [] D -- C:\Program Files (x86)\Movie Maker 2.6
O43 - CFD: 09/05/2018 - [] AD -- C:\Program Files (x86)\Mozilla Firefox {0C5396DCB2949C70FAC48AB08A07338E}
O43 - CFD: 13/05/2018 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service {0C5396DCB2949C70FAC48AB08A07338E}
O43 - CFD: 24/01/2018 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 02/04/2018 - [0] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 07/06/2016 - [] D -- C:\Program Files (x86)\NSIS Uninstall Information
O43 - CFD: 09/02/2017 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 07/06/2016 - [] RD -- C:\Program Files (x86)\Online Services
O43 - CFD: 02/11/2016 - [] D -- C:\Program Files (x86)\PhotoFiltre 7
O43 - CFD: 14/12/2016 - [] AD -- C:\Program Files (x86)\Realtek =>.Realtek Semiconductor Corp®
O43 - CFD: 24/01/2018 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 29/05/2017 - [] RD -- C:\Program Files (x86)\Skype {330000008AF4BE0B29747A0FA000000000008A}
O43 - CFD: 14/12/2016 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 17/11/2016 - [] AD -- C:\Program Files (x86)\TmNationsForever
O43 - CFD: 19/09/2016 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 28/12/2016 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 12/08/2017 - [] AD -- C:\Program Files (x86)\VirtualDJ {59E035CD9FB3F4AE7656CF5892A9112E}
O43 - CFD: 14/02/2017 - [] D -- C:\Program Files (x86)\WildTangent Games =>.WildTangent Inc®
O43 - CFD: 02/02/2018 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 24/01/2018 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 09/05/2018 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\windows nt
O43 - CFD: 02/02/2018 - [] D -- C:\Program Files (x86)\Windows Photo Viewer {3300000178255AB5CD23C65F95000100000178}
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 29/09/2017 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 09/02/2017 - [] AD -- C:\Program Files (x86)\WinRAR =>.win.rar GmbH®
O43 - CFD: 03/04/2017 - [] AD -- C:\Program Files (x86)\XMind
O43 - CFD: 29/09/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 11/07/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 11/07/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
O43 - CFD: 24/01/2018 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle for Wesnoth 1.12.6
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 08/04/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
O43 - CFD: 02/08/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 24/01/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
O43 - CFD: 24/01/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
O43 - CFD: 29/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 27/06/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
O43 - CFD: 02/04/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Studios
O43 - CFD: 17/05/2017 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
O43 - CFD: 01/08/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
O43 - CFD: 01/05/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016
O43 - CFD: 01/04/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 29/09/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 15/03/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TheGreenBowVPN
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMind
O43 - CFD: 12/05/2017 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 17/04/2018 - [] D -- C:\ProgramData\Age of Empires 3
O43 - CFD: 15/04/2016 - [] D -- C:\ProgramData\Apple
O43 - CFD: 24/01/2018 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 14/12/2016 - [] D -- C:\ProgramData\ATI
O43 - CFD: 06/04/2017 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 14/12/2017 - [0] D -- C:\ProgramData\BlueStacksSetup
O43 - CFD: 12/09/2016 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 19/10/2016 - [] HD -- C:\ProgramData\CanonBJ
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\Comms
O43 - CFD: 20/09/2016 - [0] D -- C:\ProgramData\corss
O43 - CFD: 25/08/2017 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 08/02/2017 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 24/01/2018 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 15/04/2016 - [] D -- C:\ProgramData\Dropbox
O43 - CFD: 07/10/2017 - [] D -- C:\ProgramData\Epic
O43 - CFD: 02/12/2016 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 05/04/2017 - [] D -- C:\ProgramData\Google
O43 - CFD: 12/09/2016 - [] D -- C:\ProgramData\Hewlett-Packard
O43 - CFD: 12/09/2016 - [] D -- C:\ProgramData\HP
O43 - CFD: 07/06/2016 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 14/12/2016 - [] D -- C:\ProgramData\Intel
O43 - CFD: 08/04/2018 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 15/09/2016 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 12/09/2016 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 24/01/2018 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 22/09/2016 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 12/09/2016 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 25/05/2017 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 07/10/2017 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 01/08/2018 - [] D -- C:\ProgramData\Packages
O43 - CFD: 17/05/2017 - [] D -- C:\ProgramData\Realtek
O43 - CFD: 01/08/2018 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 17/09/2016 - [] D -- C:\ProgramData\Riot Games
O43 - CFD: 29/05/2017 - [] D -- C:\ProgramData\Skype
O43 - CFD: 29/09/2017 - [0] D -- C:\ProgramData\SoftwareDistribution
O43 - CFD: 17/05/2017 - [] D -- C:\ProgramData\SRS Labs
O43 - CFD: 03/10/2016 - [] D -- C:\ProgramData\SUPPORTDIR
O43 - CFD: 07/06/2016 - [] D -- C:\ProgramData\Synaptics
O43 - CFD: 03/10/2016 - [] D -- C:\ProgramData\Temp
O43 - CFD: 29/06/2017 - [] D -- C:\ProgramData\TheGreenBow
O43 - CFD: 01/12/2017 - [] D -- C:\ProgramData\TrackMania
O43 - CFD: 08/02/2017 - [] D -- C:\ProgramData\Ubisoft
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\USOPrivate
O43 - CFD: 24/01/2018 - [] D -- C:\ProgramData\USOShared
O43 - CFD: 14/02/2017 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 30/09/2017 - [] D -- C:\ProgramData\WindowsHolographicDevices
O43 - CFD: 11/06/2017 - [] AD -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 20/09/2016 - [0] D -- C:\Program Files (x86)\Common Files\Apps
O43 - CFD: 14/01/2018 - [] D -- C:\Program Files (x86)\Common Files\BattlEye
O43 - CFD: 01/08/2018 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 01/04/2018 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 24/01/2018 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 25/05/2017 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 01/08/2018 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 29/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 29/05/2017 - [] AD -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 09/08/2017 - [] D -- C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 02/02/2018 - [] D -- C:\Program Files (x86)\Common Files\system
O43 - CFD: 04/07/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\.minecraft
O43 - CFD: 27/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Adobe
O43 - CFD: 01/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Age of Empires
O43 - CFD: 07/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Apowersoft
O43 - CFD: 28/08/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\ATI
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\AVAST Software
O43 - CFD: 01/10/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\bf2battlelog
O43 - CFD: 09/02/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\Brackets
O43 - CFD: 08/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\CodeBlocks
O43 - CFD: 25/08/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\CyberLink
O43 - CFD: 03/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 02/08/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Dashlane
O43 - CFD: 08/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Dropbox
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\DropboxOEM
O43 - CFD: 30/04/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\Google
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\Hewlett-Packard
O43 - CFD: 13/09/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\Identities
O43 - CFD: 08/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Kefikihabe
O43 - CFD: 18/09/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\LolClient
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\Macromedia
O43 - CFD: 24/01/2018 - [] SD -- C:\Users\Pierre\AppData\Roaming\Microsoft
O43 - CFD: 18/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Molotov
O43 - CFD: 03/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Mozilla
O43 - CFD: 27/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\PDAppFlex
O43 - CFD: 26/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\PDFsam Enhanced 4
O43 - CFD: 02/11/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\PhotoFiltre 7
O43 - CFD: 26/05/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Psiphon3
O43 - CFD: 26/06/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\Riot Games
O43 - CFD: 08/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Sagune
O43 - CFD: 24/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Skype
O43 - CFD: 09/05/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\SmartSteamEmu
O43 - CFD: 27/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Sublime Text 3
O43 - CFD: 25/05/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\Sun
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Roaming\Synaptics
O43 - CFD: 24/09/2017 - [0] D -- C:\Users\Pierre\AppData\Roaming\VeraCrypt
O43 - CFD: 01/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\vlc
O43 - CFD: 07/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Vysor
O43 - CFD: 14/02/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\WildTangent
O43 - CFD: 09/02/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\WinRAR
O43 - CFD: 03/04/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\XMind
O43 - CFD: 04/08/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\ZHP
O43 - CFD: 14/12/2017 - [] D -- C:\Users\Pierre\AppData\Local\4kdownload.com
O43 - CFD: 13/02/2017 - [0] HD -- C:\Users\Pierre\AppData\Local\7f68e25e20c1a9dd
O43 - CFD: 12/09/2016 - [0] D -- C:\Users\Pierre\AppData\Local\ActiveSync
O43 - CFD: 04/08/2018 - [] D -- C:\Users\Pierre\AppData\Local\Adobe
O43 - CFD: 14/12/2017 - [] D -- C:\Users\Pierre\AppData\Local\Adobe_Systems_Incorporate
O43 - CFD: 12/05/2017 - [] D -- C:\Users\Pierre\AppData\Local\AMD
O43 - CFD: 24/01/2018 - [0] SHD -- C:\Users\Pierre\AppData\Local\Application Data
O43 - CFD: 28/08/2017 - [] D -- C:\Users\Pierre\AppData\Local\ATI
O43 - CFD: 28/05/2018 - [] D -- C:\Users\Pierre\AppData\Local\bf2battlelog
O43 - CFD: 14/12/2017 - [] D -- C:\Users\Pierre\AppData\Local\BlueStacks
O43 - CFD: 06/04/2018 - [0] HD -- C:\Users\Pierre\AppData\Local\Canon
O43 - CFD: 16/11/2016 - [] D -- C:\Users\Pierre\AppData\Local\CEF
O43 - CFD: 18/02/2018 - [] D -- C:\Users\Pierre\AppData\Local\Chromium
O43 - CFD: 07/12/2017 - [] D -- C:\Users\Pierre\AppData\Local\Comms
O43 - CFD: 24/01/2018 - [] D -- C:\Users\Pierre\AppData\Local\ConnectedDevicesPlatform
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Local\CyberLink
O43 - CFD: 18/05/2017 - [0] D -- C:\Users\Pierre\AppData\Local\DBG
O43 - CFD: 15/02/2018 - [0] D -- C:\Users\Pierre\AppData\Local\Diagnostics
O43 - CFD: 08/02/2017 - [] D -- C:\Users\Pierre\AppData\Local\Disc_Soft_Ltd
O43 - CFD: 08/04/2018 - [] D -- C:\Users\Pierre\AppData\Local\Dropbox
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Local\DropboxOEM
O43 - CFD: 12/05/2018 - [0] D -- C:\Users\Pierre\AppData\Local\ElevatedDiagnostics
O43 - CFD: 07/10/2017 - [] D -- C:\Users\Pierre\AppData\Local\EpicGamesLauncher
O43 - CFD: 14/11/2016 - [] D -- C:\Users\Pierre\AppData\Local\FluxSoftware
O43 - CFD: 07/10/2017 - [] D -- C:\Users\Pierre\AppData\Local\FortniteGame
O43 - CFD: 01/11/2016 - [] D -- C:\Users\Pierre\AppData\Local\Google
O43 - CFD: 15/10/2017 - [] D -- C:\Users\Pierre\AppData\Local\Hewlett-Packard
O43 - CFD: 24/01/2018 - [0] SHD -- C:\Users\Pierre\AppData\Local\Historique
O43 - CFD: 23/11/2016 - [] D -- C:\Users\Pierre\AppData\Local\HP
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Local\HP_Inc
O43 - CFD: 12/12/2017 - [] D -- C:\Users\Pierre\AppData\Local\Macromedia
O43 - CFD: 23/02/2018 - [] D -- C:\Users\Pierre\AppData\Local\Microsoft
O43 - CFD: 31/01/2017 - [] D -- C:\Users\Pierre\AppData\Local\Microsoft Help
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Local\MicrosoftEdge
O43 - CFD: 27/05/2017 - [] D -- C:\Users\Pierre\AppData\Local\milanesit
O43 - CFD: 17/04/2018 - [] D -- C:\Users\Pierre\AppData\Local\Molotov
O43 - CFD: 28/11/2016 - [] D -- C:\Users\Pierre\AppData\Local\Mozilla
O43 - CFD: 25/08/2017 - [] D -- C:\Users\Pierre\AppData\Local\Myst V End of Ages
O43 - CFD: 19/09/2016 - [0] D -- C:\Users\Pierre\AppData\Local\NetworkTiles
O43 - CFD: 14/01/2018 - [] D -- C:\Users\Pierre\AppData\Local\NVIDIA Corporation
O43 - CFD: 25/06/2018 - [] D -- C:\Users\Pierre\AppData\Local\Packages
O43 - CFD: 31/03/2018 - [0] D -- C:\Users\Pierre\AppData\Local\PlaceholderTileLogoFolder
O43 - CFD: 27/07/2017 - [] D -- C:\Users\Pierre\AppData\Local\PopcornTime
O43 - CFD: 27/10/2016 - [] D -- C:\Users\Pierre\AppData\Local\Programs
O43 - CFD: 12/09/2016 - [] D -- C:\Users\Pierre\AppData\Local\Publishers
O43 - CFD: 22/01/2018 - [] D -- C:\Users\Pierre\AppData\Local\Recovery
O43 - CFD: 25/10/2016 - [] D -- C:\Users\Pierre\AppData\Local\Setup1049155468
O43 - CFD: 25/10/2017 - [] D -- C:\Users\Pierre\AppData\Local\speech
O43 - CFD: 07/01/2018 - [] D -- C:\Users\Pierre\AppData\Local\SquirrelTemp
O43 - CFD: 29/06/2017 - [] D -- C:\Users\Pierre\AppData\Local\Steam
O43 - CFD: 27/01/2018 - [] D -- C:\Users\Pierre\AppData\Local\Sublime Text 3
O43 - CFD: 04/08/2018 - [] D -- C:\Users\Pierre\AppData\Local\Temp
O43 - CFD: 24/01/2018 - [0] SHD -- C:\Users\Pierre\AppData\Local\Temporary Internet Files
O43 - CFD: 27/01/2018 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign3ecc7cc854d10f54
O43 - CFD: 12/05/2017 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign4ab3eefa555157b8
O43 - CFD: 12/05/2017 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign58a97cb599e1cad2
O43 - CFD: 27/01/2018 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign661b8227978c5ca3
O43 - CFD: 12/05/2017 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign767cb590bc48fa78
O43 - CFD: 27/01/2018 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign8d1169695a28c515
O43 - CFD: 12/05/2017 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign9a57a9bc849348d8
O43 - CFD: 12/05/2017 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign9b1659480ecb25c5
O43 - CFD: 27/01/2018 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsign9e3886ec6991aed3
O43 - CFD: 27/01/2018 - [0] D -- C:\Users\Pierre\AppData\Local\Tempzxpsigne8975b2b1f601513
O43 - CFD: 24/01/2018 - [] D -- C:\Users\Pierre\AppData\Local\TileDataLayer
O43 - CFD: 17/05/2017 - [] D -- C:\Users\Pierre\AppData\Local\UNP
O43 - CFD: 09/12/2017 - [] D -- C:\Users\Pierre\AppData\Local\UnrealEngine
O43 - CFD: 07/10/2017 - [] D -- C:\Users\Pierre\AppData\Local\UnrealEngineLauncher
O43 - CFD: 08/04/2018 - [0] HD -- C:\Users\Pierre\AppData\Local\uTorrent
O43 - CFD: 12/08/2017 - [0] D -- C:\Users\Pierre\AppData\Local\VirtualDJ
O43 - CFD: 08/02/2017 - [] D -- C:\Users\Pierre\AppData\Local\VirtualStore
O43 - CFD: 03/04/2018 - [] D -- C:\Users\Pierre\AppData\Local\Vysor
O43 - CFD: 22/06/2017 - [0] D -- C:\Users\Pierre\AppData\Local\{66795025-42D1-3C9D-2F49-19750B21E5ED} =>.Empty
O43 - CFD: 01/01/2018 - [] D -- C:\Users\Pierre\AppData\Local\{941DA2A6-B14F-CFD0-DA79-E80206AB153C}
O43 - CFD: 07/03/2017 - [0] D -- C:\Users\Pierre\AppData\Local\{9440A21C-B0E8-CEA4-DD70-EB4CF91817D4} =>.Empty
O43 - CFD: 27/05/2017 - [] D -- C:\Users\Pierre\AppData\Local\{B9718F2D-9DD9-E395-F041-C67DD4293AE5}
O43 - CFD: 22/06/2017 - [0] D -- C:\Users\Pierre\AppData\Local\{EA83DCDF-CE2B-B067-A3B3-958F87DB6917} =>.Empty
O43 - CFD: 29/09/2017 - [] RD -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 24/01/2018 - [] RD -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 13/06/2018 - [] RD -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 06/02/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
O43 - CFD: 03/04/2018 - [0] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ClockworkMod
O43 - CFD: 08/04/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks
O43 - CFD: 02/08/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dashlane
O43 - CFD: 29/09/2017 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 24/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Molotov
O43 - CFD: 24/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 28/05/2018 - [0] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spencer Sharkey
O43 - CFD: 13/06/2018 - [] RD -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 29/09/2017 - [] RD -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 24/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\undefined
O43 - CFD: 24/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
O43 - CFD: 29/09/2017 - [] RD -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
O43 - CFD: 24/01/2018 - [] D -- C:\Users\Pierre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Latest files created in Prefetcher (1) - 19s
O45 - LFCP:[MD5.32F63D5A91E7417DD1684326BD7BCA74] 31/03/2018 A -- C:\WINDOWS\Prefetch\SYSTEMHEALER.TMP-88720D66.pf =>PUP.Optional.SystemHealer

---\\ ShellIconOverlayIdentifiers (SIOI) (16) - 2s
O106 - SIOI: DropboxExt1 Class [ DropboxExt01] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt7 Class [ DropboxExt02] - {FB314EDF-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt9 Class [ DropboxExt03] - {FB314EE1-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt3 Class [ DropboxExt04] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt2 Class [ DropboxExt05] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt4 Class [ DropboxExt06] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt5 Class [ DropboxExt07] - {FB314EDD-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt8 Class [ DropboxExt08] - {FB314EE0-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt10 Class [ DropboxExt09] - {FB314EE2-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: DropboxExt6 Class [ DropboxExt10] - {FB314EDE-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.22.0.dll {08C59BC23C534BF2B514F7E7C28603A6} =>.Dropbox, Inc.
O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\FileSyncShell.dll {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation
O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\FileSyncShell.dll {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation
O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\FileSyncShell.dll {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation
O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\FileSyncShell.dll {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation
O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\FileSyncShell.dll {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation
O106 - SIOI: ReadOnlyOverlayHandler Class [ OneDrive6] - {9AA2F32D-362A-42D9-9328-24A483E2CCC3}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Pierre\AppData\Local\Microsoft\OneDrive\17.3.7131.1115\FileSyncShell.dll {3300000178255AB5CD23C65F95000100000178} =>.Microsoft Corporation

---\\ System Drivers List (83) - 35s
O58 - SDL:2017/09/29 15:41:02 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107416] {33000001733031072665B8B9B3000000000173} =>.LSI
O58 - SDL:2017/09/29 15:41:02 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135512] {33000001733031072665B8B9B3000000000173} =>.PMC-Sierra
O58 - SDL:2016/03/06 11:15:05 A . (.Advanced Micro Devices, Inc. - AMD PCI Root Bus Lower Filter.) -- C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2017/09/29 15:41:02 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83352] {33000001733031072665B8B9B3000000000173} =>.Advanced Micro Devices
O58 - SDL:2017/09/29 15:41:02 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [258592] {33000001733031072665B8B9B3000000000173} =>.AMD Technologies Inc.
O58 - SDL:2017/09/29 15:41:02 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [27032] {33000001733031072665B8B9B3000000000173} =>.Advanced Micro Devices
O58 - SDL:2017/09/29 15:41:02 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131992] {33000001733031072665B8B9B3000000000173} =>.PMC-Sierra, Inc.
O58 - SDL:2016/03/06 11:16:10 A . (...) -- C:\WINDOWS\System32\drivers\atikmdag.sys [23982080]
O58 - SDL:2016/03/06 11:16:10 A . (...) -- C:\WINDOWS\System32\drivers\atikmpag.sys [674816]
O58 - SDL:2017/09/29 15:41:02 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2017/09/29 15:41:01 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533912] {33000001733031072665B8B9B3000000000173} =>.QLogic Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [141208] {33000001733031072665B8B9B3000000000173}
O58 - SDL:2017/09/29 15:41:02 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [357272] {33000001733031072665B8B9B3000000000173}
O58 - SDL:2017/09/29 15:41:02 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [1723288] {33000001733031072665B8B9B3000000000173}
O58 - SDL:2018/07/31 03:25:38 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-canary.sys [50232] {330000001F9800C911029569BE00000000001F} =>.Dropbox, Inc.
O58 - SDL:2018/07/31 03:25:38 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-dev.sys [50232] {330000001F9800C911029569BE00000000001F} =>.Dropbox, Inc.
O58 - SDL:2018/07/31 03:25:38 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\WINDOWS\System32\drivers\dbx-stable.sys [45640] {3300000018A7C64EDA383A9F79000000000018} =>.Dropbox, Inc.
O58 - SDL:2016/03/06 09:45:54 A . (.Intel Corporation - DPTF CPU Device (64-Bit).) -- C:\WINDOWS\System32\drivers\dptf_cpu.sys [52200] =>.Intel(R) Software®
O58 - SDL:2017/02/08 22:44:51 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) -- C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264] =>.Disc Soft Ltd®
O58 - SDL:2017/02/08 22:47:23 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual USB Bus Driver.) -- C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672] =>.Disc Soft Ltd®
O58 - SDL:2016/03/06 09:45:56 A . (.Intel Corporation - DPTF Zone (64-Bit).) -- C:\WINDOWS\System32\drivers\esif_lf.sys [260072] =>.Intel(R) Software®
O58 - SDL:2017/09/29 15:41:01 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3419032] {33000001733031072665B8B9B3000000000173} =>.QLogic Corporation
O58 - SDL:2015/05/07 11:49:50 A . (.Intel Corporation - BIOS Update Driver.) -- C:\WINDOWS\System32\drivers\flashud.sys [51712] =>.Intel Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [63520] {33000001733031072665B8B9B3000000000173} =>.Hewlett-Packard Company
O58 - SDL:2017/09/29 15:40:59 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [36864] =>.Intel(R) Corporation
O58 - SDL:2017/09/29 15:40:59 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [91648] =>.Intel(R) Corporation
O58 - SDL:2017/09/29 15:40:59 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [79360] =>.Intel Corporation
O58 - SDL:2017/09/29 15:40:59 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [88576] =>.Intel Corporation
O58 - SDL:2017/09/29 15:40:59 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [171520] =>.Intel Corporation
O58 - SDL:2017/09/29 15:40:59 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [174592] =>.Intel Corporation
O58 - SDL:2017/09/29 15:41:01 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2017/09/29 15:40:59 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2015/11/24 09:45:10 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver -.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [1468416] =>.Intel(R) Rapid Storage Technology®
O58 - SDL:2017/09/29 15:41:03 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [674200] {33000001733031072665B8B9B3000000000173} =>.Intel Corporation
O58 - SDL:2017/09/29 15:41:03 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412056] {33000001733031072665B8B9B3000000000173} =>.Intel Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [526232] {33000001733031072665B8B9B3000000000173} =>.Mellanox
O58 - SDL:2016/10/07 09:25:26 N . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [822248] {330000B85395C584DD5249B00800020000B853} =>.Intel(R) Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108064] {33000001733031072665B8B9B3000000000173} =>.LSI Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [123800] {33000001733031072665B8B9B3000000000173} =>.LSI Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [103320] {33000001733031072665B8B9B3000000000173} =>.Avago Technologies
O58 - SDL:2017/09/29 15:41:02 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82840] {33000001733031072665B8B9B3000000000173} =>.LSI Corporation
O58 - SDL:2018/07/22 06:27:52 A . (.Malwarebytes - Malwarebytes Anti-Exploit.) -- C:\WINDOWS\System32\drivers\mbae64.sys [152688] {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
O58 - SDL:2018/07/22 06:28:23 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [253664] {044E3BF58976880FFD074448A8F7A058} =>.Malwarebytes
O58 - SDL:2017/09/29 15:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59800] {33000001733031072665B8B9B3000000000173} =>.Avago Technologies
O58 - SDL:2017/09/29 15:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [63520] {33000001733031072665B8B9B3000000000173} =>.Avago Technologies
O58 - SDL:2017/09/29 15:41:02 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575896] {33000001733031072665B8B9B3000000000173} =>.LSI Corporation, Inc.
O58 - SDL:2017/09/29 15:41:02 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [842648] {33000001733031072665B8B9B3000000000173} =>.Mellanox
O58 - SDL:2017/09/29 15:41:02 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63896] {33000001733031072665B8B9B3000000000173} =>.Marvell Semiconductor, Inc.
O58 - SDL:2017/09/29 15:41:02 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [108952] {33000001733031072665B8B9B3000000000173} =>.Mellanox
O58 - SDL:2017/09/29 15:41:02 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150424] {33000001733031072665B8B9B3000000000173} =>.NVIDIA Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166296] {33000001733031072665B8B9B3000000000173} =>.NVIDIA Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58776] {33000001733031072665B8B9B3000000000173} =>.Avago Technologies
O58 - SDL:2017/09/29 15:41:02 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [61848] {33000001733031072665B8B9B3000000000173} =>.Avago Technologies
O58 - SDL:2016/02/25 20:43:01 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 64-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [935168] =>.Realtek Semiconductor Corp®
O58 - SDL:2017/09/29 15:41:14 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [59904] =>.Realtek
O58 - SDL:2017/07/20 06:41:10 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Filter Driver.) -- C:\WINDOWS\System32\drivers\RtkBtfilter.sys [723920] {03DA4C26C76E1255DC8279AA9A751ACC} =>.Realtek Semiconductor Corporation
O58 - SDL:2015/09/09 18:19:28 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Hands-free-AG Audio Drive.) -- C:\WINDOWS\System32\drivers\RtkHfp.sys [104688] =>.Realtek Semiconductor Corp®
O58 - SDL:2016/12/14 19:40:43 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [5337608] {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor Corp.
O58 - SDL:2016/02/25 19:59:06 A . (.Realsil Semiconductor Corporation - RTS USB READER Driver.) -- C:\WINDOWS\System32\drivers\RtsUer.sys [413912] =>.Realtek Semiconductor Corp®
O58 - SDL:2017/08/18 00:47:18 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 55887 55838.) -- C:\WINDOWS\System32\drivers\rtwlane.sys [6895984] {0320BE3EB866526927F999B97B04346E} =>.Realtek Semiconductor Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44952] {33000001733031072665B8B9B3000000000173} =>.Silicon Integrated Systems Corp.
O58 - SDL:2017/09/29 15:41:02 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81816] {33000001733031072665B8B9B3000000000173} =>.Silicon Integrated Systems
O58 - SDL:2016/02/24 04:27:04 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [58984] =>.Synaptics Incorporated®
O58 - SDL:2017/08/18 02:23:50 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_AMDASF_Aux.sys [53848] =>.Synaptics Incorporated®
O58 - SDL:2017/08/18 02:23:50 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [55384] =>.Synaptics Incorporated®
O58 - SDL:2017/08/18 02:23:50 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel_Aux.sys [55384] =>.Synaptics Incorporated®
O58 - SDL:2016/09/05 05:47:06 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [131712] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/09/05 05:47:12 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [165504] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2017/09/29 15:41:02 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31128] {33000001733031072665B8B9B3000000000173} =>.Promise Technology, Inc.
O58 - SDL:2017/08/18 02:23:52 A . (.Synaptics Incorporated - Synaptics I2C Driver.) -- C:\WINDOWS\System32\drivers\SynRMIHID_Aux.sys [66136] =>.Synaptics Incorporated®
O58 - SDL:2017/08/18 02:23:52 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [716384] =>.Synaptics Incorporated®
O58 - SDL:2016/04/26 15:10:00 A . (.Tunngle.net GmbH - TAP-Win32 Virtual Network Driver (NDIS 6.0).) -- C:\WINDOWS\System32\drivers\tap0901t.sys [48824] {1121A377C1EF3BC56B4465236944AB02A805} =>.Tunngle.net GmbH
O58 - SDL:2016/03/28 23:01:56 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys [186424] {5600000027396847078B466FFF000000000027} =>.Intel Corporation
O58 - SDL:2014/10/28 16:22:58 A . (.TheGreenBow - TheGreenBow VPN Miniport Enumerator.) -- C:\WINDOWS\System32\drivers\TGBMPEnum.sys [39096] {27A8C140A512096F00E49C46C0B2FE90}
O58 - SDL:2016/08/16 03:18:34 A . (.MBB - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\usb2ser.sys [159936] {7FE63AB8AB9D36964BC29EAD7641180A} =>.MBB
O58 - SDL:2017/01/16 18:38:36 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Host-Only Network Adapt.) -- C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [131144] {65D365A24EE7E137105BBAC2335816D8} =>.Oracle Corporation
O58 - SDL:2017/01/16 18:38:38 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Lightweight Filter Driv.) -- C:\WINDOWS\System32\drivers\VBoxNetLwf.sys [205440] {65D365A24EE7E137105BBAC2335816D8} =>.Oracle Corporation
O58 - SDL:2017/09/24 14:07:28 A . (.IDRIX - VeraCrypt Driver.) -- C:\WINDOWS\System32\drivers\veracrypt.sys [631200] {4881735DD957F825E7FDBFF04234A30E} =>.IDRIX
O58 - SDL:2017/09/29 15:41:02 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166808] {33000001733031072665B8B9B3000000000173} =>.VIA Technologies Inc.,Ltd
O58 - SDL:2017/09/29 15:41:02 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305560] {33000001733031072665B8B9B3000000000173} =>.VIA Corporation
O58 - SDL:2017/09/29 15:41:02 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [32152] {33000001733031072665B8B9B3000000000173} =>.Mellanox
O58 - SDL:2017/09/29 15:41:02 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [64920] {33000001733031072665B8B9B3000000000173} =>.Mellanox
O58 - SDL:2017/06/21 17:04:22 A . (.HP - HP Wireless Button Driver.) -- C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368] {0BE5F20C15519E2ABD71DB9B8D41AB08} =>.HP

---\\ Last modified or created user files (72) - 167s
O61 - LFC: 2018/07/31 22:34:47 A . (.The OpenSSL Project, http://www.openssl.org/.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\libeay32.dll [1211392]
O61 - LFC: 2018/07/31 22:34:47 A . (.The OpenSSL Project, http://www.openssl.org/.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\ssleay32.dll [276480]
O61 - LFC: 2018/07/31 22:35:24 A . (..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\ie\IEInstaller.bat [157]
O61 - LFC: 2018/07/31 22:35:24 A . (..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\IEInstaller.bat [157]
O61 - LFC: 2018/07/31 22:34:47 A . (.The OpenSSL Project, http://www.openssl.org/.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Ssl\libeay32.dll [1211392]
O61 - LFC: 2018/07/31 22:34:47 A . (.The OpenSSL Project, http://www.openssl.org/.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Ssl\ssleay32.dll [276480]
O61 - LFC: 2018/07/31 22:34:48 A . (..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\libEGL.dll [13312]
O61 - LFC: 2018/07/31 22:34:48 A . (..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\libGLESv2.dll [1950720]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Core.dll [4833792]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Gui.dll [5146624]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Network.dll [970752]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Positioning.dll [237568]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5PrintSupport.dll [268288]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Qml.dll [2783232]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Quick.dll [2960384]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5QuickWidgets.dll [58880]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Sql.dll [156672]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Svg.dll [264704]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5WebChannel.dll [86528]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5WebEngineCore.dll [52104704]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5WebEngineWidgets.dll [183808]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\Qt5Widgets.dll [4402688]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\QtWebEngineProcess.exe [14336]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\styles\qwindowsvistastyle.dll [122880]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\sqldrivers\qsqlite.dll [844288]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\platforms\qwindows.dll [1155072]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qgif.dll [26112]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qicns.dll [33280]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qico.dll [26624]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qjpeg.dll [297472]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qsvg.dll [21504]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qtga.dll [20992]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qtiff.dll [327680]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qwbmp.dll [19968]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\Qt\imageformats\qwebp.dll [401408]
O61 - LFC: 2018/07/31 22:35:18 A . (.Intel Corpration.) -- C:\Users\Pierre\AppData\Roaming\Dashlane\6.0.3.11395\bin\IntelPSW\CryptoProviderInstaller.exe [7638352] {56000001C6E13E8C5787AABC9F0000000001C6}
O61 - LFC: 2018/08/02 22:31:07 A . (..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\Dashlane.exe [0]
O61 - LFC: 2018/07/31 22:35:24 A . (..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\IEInstaller.bat [157]
O61 - LFC: 2018/07/31 22:34:47 A . (.The OpenSSL Project, http://www.openssl.org/.) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Ssl\libeay32.dll [1211392]
O61 - LFC: 2018/07/31 22:34:47 A . (.The OpenSSL Project, http://www.openssl.org/.) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Ssl\ssleay32.dll [276480]
O61 - LFC: 2018/07/31 22:34:48 A . (..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\libEGL.dll [13312]
O61 - LFC: 2018/07/31 22:34:48 A . (..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\libGLESv2.dll [1950720]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Core.dll [4833792]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Gui.dll [5146624]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Network.dll [970752]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Positioning.dll [237568]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5PrintSupport.dll [268288]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Qml.dll [2783232]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Quick.dll [2960384]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5QuickWidgets.dll [58880]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Sql.dll [156672]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Svg.dll [264704]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5WebChannel.dll [86528]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5WebEngineCore.dll [52104704]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5WebEngineWidgets.dll [183808]
O61 - LFC: 2018/07/31 22:34:47 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\Qt5Widgets.dll [4402688]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\QtWebEngineProcess.exe [14336]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\styles\qwindowsvistastyle.dll [122880]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\sqldrivers\qsqlite.dll [844288]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\platforms\qwindows.dll [1155072]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qgif.dll [26112]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qicns.dll [33280]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qico.dll [26624]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qjpeg.dll [297472]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qsvg.dll [21504]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qtga.dll [20992]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qtiff.dll [327680]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qwbmp.dll [19968]
O61 - LFC: 2018/07/31 22:34:48 A . (.The Qt Company Ltd..) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\Qt\imageformats\qwebp.dll [401408]
O61 - LFC: 2018/07/31 22:35:18 A . (.Intel Corpration.) -- C:\Users\Pierre\AppData\Local\Packages\windows_ie_ac_001\AC\Dashlane\6.0.3.11395\bin\IntelPSW\CryptoProviderInstaller.exe [7638352] {56000001C6E13E8C5787AABC9F0000000001C6}
O61 - LFC: 2018/08/03 09:51:31 A . (..) -- C:\Users\Pierre\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\LocalState\Features\du.bin [2294]
O61 - LFC: 2018/08/04 11:04:20 A . (..) -- C:\Users\Pierre\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148]

---\\ File Associations Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Event Viewer Snapin Launcher.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registry Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Start Menu Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe {33000001797C2E574E52E1CAD6000100000179} =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialisation Utility.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Search Browser Infection (9) - 9s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing Search Engine) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {2211d4a5-48d0-47f5-a7cd-81e861470f7f} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {26080cad-4adc-49ac-8c63-eda16e595cbd} - (Bing Search Engine) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {2f23ab71-4ac6-41f2-a955-ea576e553146} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {f79e5d1c-5148-469e-9f98-a11d8d7863f4} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {2211d4a5-48d0-47f5-a7cd-81e861470f7f} - (Bing Search Engine) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {26080cad-4adc-49ac-8c63-eda16e595cbd} - (Bing Search Engine) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {2f23ab71-4ac6-41f2-a955-ea576e553146} - (Bing) - http://www.bing.com/

---\\ Search Svchost Services (48) - 3s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smart card Certificate Propagatio.) -- C:\Windows\System32\certprop.dll [188928] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smart card Certificate Propagatio.) -- C:\WINDOWS\System32\certprop.dll [188928] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [270848] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Group Policy Client.) -- C:\WINDOWS\System32\gpsvc.dll [1275904] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE extension.) -- C:\WINDOWS\System32\ikeext.dll [984064] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service that offers IPv6 connectivity over.) -- C:\WINDOWS\System32\iphlpsvc.dll [820224] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - Secondary Log-on Service DLL.) -- C:\WINDOWS\system32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Application Information Service.) -- C:\WINDOWS\System32\appinfo.dll [144896] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI Discovery service.) -- C:\WINDOWS\system32\iscsiexe.dll [150528] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost service.) -- C:\WINDOWS\System32\eapsvc.dll [109056] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Task Scheduler Service.) -- C:\WINDOWS\system32\schedsvc.dll [880640] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [220160] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [408064] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remote Desktop Configuration service.) -- C:\Windows\System32\SessEnv.dll [387584] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problem Reports and Solutions.) -- C:\WINDOWS\System32\wercplsupport.dll [108544] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\WINDOWS\system32\PushToInstall.dll [254976] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll [194560] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1272320] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Natural Authentication Service.) -- C:\WINDOWS\System32\NaturalAuth.dll [795136] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Token Broker.) -- C:\Windows\System32\TokenBroker.dll [1236480] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation Service.) -- C:\WINDOWS\System32\lfsvc.dll [46080] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [1107968] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infrared Monitor.) -- C:\WINDOWS\System32\irmon.dll [24576] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\System32\rasauto.dll [104960] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\System32\rasmans.dll [930816] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\Windows\System32\mprdim.dll [491520] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\System32\sens.dll [73216] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT Helper Components.) -- C:\WINDOWS\System32\ipnathlp.dll [601088] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft® Windows(TM) Telephony Server.) -- C:\Windows\System32\tapisrv.dll [307200] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update Agent.) -- C:\WINDOWS\system32\wuaueng.dll [2786304] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Background Intelligent Transfer Service.) -- C:\WINDOWS\System32\qmgr.dll [1346560] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows Shell Services Dll.) -- C:\Windows\System32\shsvcs.dll [613376] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows Managent Service DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [702464] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Flight Settings.) -- C:\WINDOWS\system32\flightsettings.dll [779264] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Windows Push Notification System Service.) -- C:\WINDOWS\system32\WpnService.dll [284672] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1143808] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Update Session Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [1300992] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [951808] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [1314304] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows Shell Theme Service Dll.) -- C:\WINDOWS\system32\themeservice.dll [69632] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE Service.) -- C:\WINDOWS\System32\bdesvc.dll [387072] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Device Setup Manager.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [238080] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Network Setup Service.) -- C:\WINDOWS\System32\NetSetupSvc.dll [308224] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft Network Connectivity Assistant Se.) -- C:\WINDOWS\System32\ncasvc.dll [170496] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft® Account Service.) -- C:\WINDOWS\system32\wlidsvc.dll [2223616] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\WINDOWS\System32\XboxGipSvc.dll [57856] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\System32\browser.dll [132608] =>.Microsoft Corporation

---\\ Firewall Active Exception List (2) - 3s
O87 - FAEL: "TCP Query User{EDDC6BC3-9F25-4353-9990-AA01A0449460}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe" [In-None-P6-TRUE] .(.Copyright (C) 2016 - League of Legends.) -- C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe {0B323EA833805ADB47136D642EA9E519}
O87 - FAEL: "UDP Query User{446F2DBC-BAFE-4D9B-A542-653D586D161F}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe" [In-None-P17-TRUE] .(.Copyright (C) 2016 - League of Legends.) -- C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.158\deploy\leagueclient.exe {0B323EA833805ADB47136D642EA9E519}

---\\ Additional Scan (O88) (4) - 0s
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{650580EA-978C-4C04-81B9-BA53BB34BCBE} =>.Superfluous.Solvusoft
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{650580EA-978C-4C04-81B9-BA53BB34BCBE} =>.Superfluous.Solvusoft
HKCU\SOFTWARE\undefined =>.Superfluous.Downloader
C:\WINDOWS\Prefetch\SYSTEMHEALER.TMP-88720D66.pf =>PUP.Optional.SystemHealer

---\\ Summary of the elements found (3) - 0s
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Solvusoft
http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader
http://www.nicolascoolman.fr/pup-optional-systemhealer/ =>PUP.Optional.SystemHealer

~ End of the scan, 33895 items in 00h30mn32s (1177)(0)