~ ZHPDiag v2020.10.26.247 Par Nicolas Coolman (2020/10/26)
~ Démarré par admin (Administrator) (2020/10/28 19:38:18)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\admin\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\admin\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Pro, 64-bit (Build 17763) =>.Microsoft Corporation

---\\ NAVIGATEURS INTERNET (1) - 0s
~ MSIE: Internet Explorer v11.504.17763.0

---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (3) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ INFORMATIONS SUR LE SYSTÈME (6) - 0s
~ Operating System: AMD64 Family 21 Model 112 Stepping 0, AuthenticAMD
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 7829.084 MB (61% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 442 GB (90%) free of 487 GB : OK =>.Disk Space

---\\ MODE DE CONNEXION AU SYSTÈME (3) - 0s
~ Computer Name: DESKTOP-OEDBSQJ
~ User Name: admin
~ Logged in as Administrator

---\\ ÉNUMÉRATION DES UNITÉS DE STOCKAGE (1) - 0s
~ Drive C: has 442 GB free of 487 GB (System)

---\\ ÉTAT DU CENTRE DE SÉCURITÉ WINDOWS (7) - 1s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ RECHERCHE PARTICULIÈRE DE FICHIERS GÉNÉRIQUES (26) - 9s
[MD5.2F62005FCEA7430BB871A56F7700F81C] - 17/05/2019 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [4245280] =>.Microsoft Windows®
[MD5.C73BA51880F5A7FB20C84185A23212EF] - 15/09/2018 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [71168] [Unsigned] =>.Microsoft Corporation
[MD5.4E20895E641F2C3E68AB3DB91A1A16F1] - 15/09/2018 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [388376] [Unsigned] =>.Microsoft Corporation
[MD5.75392769A74F0ADAC8E592A332FC4EA2] - 27/05/2019 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [5086208] [Unsigned] =>.Microsoft Corporation
[MD5.92419F3B74C6C3D7304B7665DA984552] - 15/09/2018 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [779776] [Unsigned] =>.Microsoft Corporation
[MD5.409DA1CF80BD0BED054E952E905A9576] - 15/09/2018 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [421376] [Unsigned] =>.Microsoft Corporation
[MD5.CEF34C5A608ED7BD604A006624397BB8] - 17/05/2019 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [799568] =>.Microsoft Windows®
[MD5.A4CB6481213A18FA184CBE82A972DB20] - 17/05/2019 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [580024] =>.Microsoft Windows®
[MD5.DA608200C5416E7523F2CCE5CCF5A41E] - 27/05/2019 - (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2999808] [Unsigned] =>.Microsoft Corporation
[MD5.1C72D5EC12FB782907B1F7F3E64D1B8F] - 27/05/2019 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19968] [Unsigned] =>.Microsoft Corporation
[MD5.5499CB2550E1B8D38314D19578F55B0E] - 17/05/2019 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\AFD.sys [655160] [Unsigned] =>.Microsoft Corporation
[MD5.A39C05B19C079401A9AF8A2EF3067B64] - 15/09/2018 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [30208] [Unsigned] =>.Microsoft Corporation
[MD5.5D9A1DC0ED8F623546550EC8F5533588] - 17/05/2019 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [100352] [Unsigned] =>.Microsoft Corporation
[MD5.D7FAEE38C867DFDAA626B886A7AEA89A] - 15/09/2018 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [165888] [Unsigned] =>.Microsoft Corporation
[MD5.C7E85EEDBC05491FF1CDD3ACA98FA1DE] - 15/09/2018 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [151040] [Unsigned] =>.Microsoft Corporation
[MD5.855678C1760AE7DCE0CF2BAFD989176E] - 15/09/2018 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [104960] [Unsigned] =>.Microsoft Corporation
[MD5.7EF070F21CAB7E8DC906F9CA8516CE5B] - 15/09/2018 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [110592] [Unsigned] =>.Microsoft Corporation
[MD5.CEC63D8B8E7A525233D2AEE19EF9A5A8] - 15/09/2018 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [224768] [Unsigned] =>.Microsoft Corporation
[MD5.3EA7FCFF3EDCD2402E6773F6149BA78D] - 17/05/2019 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [535048] [Unsigned] =>.Microsoft Corporation
[MD5.70B235DD5BC99C3A98D4D6F7A1D81190] - 17/05/2019 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [301568] [Unsigned] =>.Microsoft Corporation
[MD5.4941898858502A421357772F4443F666] - 27/05/2019 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2627600] [Unsigned] =>.Microsoft Corporation
[MD5.838C9F2D2EB6D29776AF1AC78B4AA1D7] - 15/09/2018 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [106496] [Unsigned] =>.Microsoft Corporation
[MD5.6E28E1CE915FE617D4F38BFB8543696F] - 15/09/2018 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [111616] [Unsigned] =>.Microsoft Corporation
[MD5.C430E3C43A471C7A4314EC20A0EE5846] - 17/05/2019 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [167424] [Unsigned] =>.Microsoft Corporation
[MD5.E5CE3388A455ED80480EAE3A8ADD53A9] - 15/09/2018 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [132408] [Unsigned] =>.Microsoft Corporation
[MD5.0F13F63BA93C89DA4F54B8830EB5410B] - 15/09/2018 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [427832] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES SERVICES (Non désactivés) (55) - 27s
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe =>.Advanced Micro Devices, Inc.®
O23 - Service: C:\Windows\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Générateur de points de terminaison du serv.) - C:\Windows\System32\AudioEndpointBuilder.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Service Audio Windows.) - C:\Windows\System32\Audiosrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: (AvastWscReporter) . (...) - C:\Program Files\Avast Software\Avast\wsc_proxy.exe (.not file.)
O23 - Service: C:\Windows\System32\bfe.dll (BFE) . (.Microsoft Corporation - Moteur de filtrage de base.) - C:\Windows\System32\bfe.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\qmgr.dll (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) - C:\Windows\System32\qmgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\system32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Process State Manager (PSM) Service.) - C:\Windows\System32\psmsrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Composants utilisateur Microsoft (R) CDP.) - C:\Windows\System32\CDPUserSvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service pour utilisateur de plateforme d’appareils connecté (CDPUserSvc_3655f) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: Service Microsoft Office « Démarrer en un clic » (ClickToRunSvc) . (.Microsoft Corporation - Microsoft Office Click-to-Run (SxS).) - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe =>.Microsoft®
O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll =>.Microsoft Windows®
O23 - Service: C:\Windows\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Services de chiffrement.) - C:\Windows\System32\cryptsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - Service client DHCP.) - C:\Windows\System32\dhcpcore.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\diagtrack.dll (DiagTrack) . (.Microsoft Corporation - Suivi des diagnostics Microsoft Windows.) - C:\Windows\System32\diagtrack.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - Service de résolution du cache DNS.) - C:\Windows\System32\dnsrslvr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Service Consommation des données.) - C:\Windows\System32\dusmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Service journal des événements.) - C:\Windows\System32\wevtsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Service de cache de police Windows.) - C:\Windows\System32\FntCache.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) - C:\Windows\System32\gpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc. - HP Support Solutions Framework Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.HP Inc.®
O23 - Service: C:\Windows\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) - C:\Windows\System32\iphlpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - DLL du service Serveur.) - C:\Windows\System32\srvsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - DLL du service Station de travail.) - C:\Windows\System32\wkssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\system32\lsm.dll (LSM) . (.Microsoft Corporation - Service du gestionnaire de session locale.) - C:\Windows\System32\lsm.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Service de protection Microsoft.) - C:\Windows\System32\mpssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) - C:\Windows\System32\nlasvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Serveur RPC de l’interface du magasin résea.) - C:\Windows\System32\nsisvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\Windows\System32\APHostService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Hôte de synchronisation_3655f (OneSyncSvc_3655f) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\umpo.dll (Power) . (.Microsoft Corporation - Service d’alimentation en mode utilisateur.) - C:\Windows\System32\umpo.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\Windows\System32\profsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\rasmans.dll (RasMan) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) - C:\Windows\System32\rasmans.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: RelevantKnowledge (RelevantKnowledge) . (.TMRG, Inc. - Relevant-Knowledge.) - C:\Program Files (x86)\RelevantKnowledge\rlservice.exe {36EC9BFE7DCD0284DB79D2D85BE694CF}.
O23 - Service: C:\Windows\system32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - Mappeur de point de terminaison RPC.) - C:\Windows\System32\RpcEpMap.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\Windows\System32\rpcss.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp.®
O23 - Service: Realtek Bluetooth Device Manager Service (RtkBtManServ) . (.Realtek Semiconductor Corp. - Realtek Bluetooth BTDevManager Service Appl.) - C:\Windows\RtkBtManServ.exe =>.Microsoft®
O23 - Service: C:\Windows\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) - C:\Windows\System32\schedsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\Sens.dll (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) - C:\Windows\System32\sens.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\SgrmBroker.exe,-100 (SgrmBroker) . (.Microsoft Corporation - Service Broker du moniteur d'exécution Syst.) - C:\Windows\System32\SgrmBroker.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) - C:\Windows\System32\shsvcs.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Service de la plateforme de protection logi.) - C:\Windows\System32\sppsvc.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: SynTPEnhService (SynTPEnhService) . (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) - C:\Windows\System32\SynTPEnhService.exe [Unsigned] =>.Synaptics Incorporated
O23 - Service: C:\Windows\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - Hôte de Service SysMain.) - C:\Windows\System32\sysmain.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\system32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) - C:\Windows\System32\SystemEventsBrokerServer.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\themeservice.dll (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) - C:\Windows\System32\themeservice.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - UserMgr.) - C:\Windows\System32\usermgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\usocore.dll (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) - C:\Windows\System32\usocore.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - DLL du service de gestion des connexions Wi.) - C:\Windows\System32\wcmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wbem\wmisvc.dll (Winmgmt) . (.Microsoft Corporation - WMI.) - C:\Windows\System32\wbem\WMIsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wlansvc.dll (WlanSvc) . (.Microsoft Corporation - DLL du service de configuration automatique.) - C:\Windows\System32\wlansvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) - C:\Windows\System32\WpnService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - Service utilisateur de notifications Push W.) - C:\Windows\System32\WpnUserService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service utilisateur de notifications Push Windows_3655f (WpnUserService_3655f) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®

---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (73) - 40s
SR - Boot [15/09/2018] [ 107520] (3ware) . (.LSI.) - C:\Windows\System32\drivers\3ware.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 1135616] (ADP80XX) . (.PMC-Sierra.) - C:\Windows\System32\drivers\ADP80XX.SYS =>.Microsoft Windows®
SR - Auto [18/09/2019] [ 508000] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe =>.Advanced Micro Devices, Inc.®
SR - Demand [24/10/2020] [ 35848] AmdAS4 service (AmdAS4) . (.Advanced Micro Devices, INC..) - C:\Windows\System32\drivers\AmdAS4.sys =>.Advanced Micro Devices Inc.®
SR - Demand [18/09/2019] [55249504] (amdkmdag) . (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmdag.sys =>.Advanced Micro Devices, Inc.®
SR - Demand [18/09/2019] [ 595040] (amdkmdap) . (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmpag.sys =>.Advanced Micro Devices, Inc.®
SR - Boot [15/09/2018] [ 83456] (amdsata) . (.Advanced Micro Devices.) - C:\Windows\System32\drivers\amdsata.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 259384] (amdsbs) . (.AMD Technologies Inc..) - C:\Windows\System32\drivers\amdsbs.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 27136] (amdxata) . (.Advanced Micro Devices.) - C:\Windows\System32\drivers\amdxata.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 131896] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\Windows\System32\drivers\arcsas.sys =>.Microsoft Windows®
SR - Demand [24/10/2020] [ 107936] AMD Function Driver f (AtiHDAudioService) . (.Advanced Micro Devices.) - C:\Windows\System32\drivers\AtihdWT6.sys =>.Microsoft®
SR - Auto [00/00/0000] [ 0] (AvastWscReporter) . (...) - C:\Program Files\Avast Software\Avast\wsc_proxy.exe (.not file.) [Unsigned]
SR - Boot [15/09/2018] [ 533816] QLogic Network Adapter VBD (b06bdrv) . (.QLogic Corporation.) - C:\Windows\System32\drivers\bxvbda.sys =>.Microsoft Windows®
SR - Demand [15/09/2018] [ 9728] bcmfn2 Service (bcmfn2) . (...) - C:\Windows\System32\drivers\bcmfn2.sys [Unsigned] =>.Broadcom Corporation
SR - Boot [15/09/2018] [ 319488] (cht4iscsi) . (.Chelsio Communications.) - C:\Windows\System32\drivers\cht4sx64.sys =>.Microsoft Windows®
SR - Demand [15/09/2018] [ 1866768] Chelsio Virtual Bus Driver (cht4vbd) . (.Chelsio Communications.) - C:\Windows\System32\drivers\cht4vx64.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 3419152] QLogic 10 Gigabit Ethernet Ada (ebdrv) . (.QLogic Corporation.) - C:\Windows\System32\drivers\evbda.sys =>.Microsoft Windows®
SR - Demand [00/00/0000] [ 0] WDF Insyde IO Device Driver (H2OFFT) . (...) - C:\Windows\System32\drivers\H2OFFT64.sys (.not file.) [Unsigned]
SS - Demand [07/06/2018] [ 1149480] HP CASL Framework Service (hpqcaslwmiex) . (.HP.) - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe =>.HP Inc.®
SR - Demand [24/10/2020] [ 37112] HpqKbFilter Driver (HpqKbFiltr) . (.Hewlett-Packard Company.) - C:\Windows\System32\drivers\HpqKbFiltr64.sys =>.Hewlett-Packard Company®
SR - Boot [15/09/2018] [ 64312] (HpSAMD) . (.Hewlett-Packard Company.) - C:\Windows\System32\drivers\HpSAMD.sys =>.Microsoft Windows®
SR - Auto [20/08/2020] [ 379736] HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) . (.HP Inc..) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.HP Inc.®
SR - Demand [15/09/2018] [ 36352] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\Windows\System32\drivers\iagpio.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [15/09/2018] [ 91136] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\Windows\System32\drivers\iai2c.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [15/09/2018] [ 79360] Intel(R) S (iaLPSS2i_GPIO2) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 93184] In (iaLPSS2i_GPIO2_BXT_P) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 112128] Intel( (iaLPSS2i_GPIO2_CNL) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 96256] Intel( (iaLPSS2i_GPIO2_GLK) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 171520] Intel(R) Seria (iaLPSS2i_I2C) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 175104] Intel( (iaLPSS2i_I2C_BXT_P) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 180736] Intel(R) S (iaLPSS2i_I2C_CNL) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 177664] Intel(R) S (iaLPSS2i_I2C_GLK) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys [Unsigned] =>.Intel Corporation
SR - Demand [15/09/2018] [ 38128] Intel(R) Serial IO (iaLPSSi_GPIO) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSSi_GPIO.sys =>.Intel Corporation - Client Components Group®
SR - Demand [15/09/2018] [ 113152] Intel(R) Serial IO I (iaLPSSi_I2C) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaLPSSi_I2C.sys [Unsigned] =>.Intel Corporation
SR - Boot [15/09/2018] [ 885048] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaStorAVC.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 411960] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaStorV.sys =>.Microsoft Windows®
SR - Demand [15/09/2018] [ 566800] Mellanox InfiniBand Bus/A (ibbus) . (.Mellanox.) - C:\Windows\System32\drivers\ibbus.sys =>.Microsoft Windows®
SR - Demand [23/04/2020] [ 7328856] Service for Realtek HD Audio (WDM) (IntcAzAudAddService) . (.Realtek Semiconductor Corp..) - C:\Windows\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp.®
SR - Boot [15/09/2018] [ 148480] (ItSas35i) . (.Avago Technologies.) - C:\Windows\System32\drivers\ItSas35i.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 109056] (LSI_SAS) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sas.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 124416] (LSI_SAS2i) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sas2i.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 128512] (LSI_SAS3i) . (.Avago Technologies.) - C:\Windows\System32\drivers\lsi_sas3i.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 82944] (LSI_SSS) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sss.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 59904] (megasas) . (.Avago Technologies.) - C:\Windows\System32\drivers\megasas.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 75264] (megasas2i) . (.Avago Technologies.) - C:\Windows\System32\drivers\MegaSas2i.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 79872] (megasas35i) . (.Avago Technologies.) - C:\Windows\System32\drivers\megasas35i.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 575800] (megasr) . (.LSI Corporation, Inc..) - C:\Windows\System32\drivers\megasr.sys =>.Microsoft Windows®
SR - Demand [15/09/2018] [ 1150496] Mellanox ConnectX Bus E (mlx4_bus) . (.Mellanox.) - C:\Windows\System32\drivers\mlx4_bus.sys =>.Microsoft Windows®
SS - Demand [14/10/2020] [ 243408] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Boot [15/09/2018] [ 63800] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\Windows\System32\drivers\mvumis.sys =>.Microsoft Windows®
SR - Demand [15/09/2018] [ 153616] NetworkDirect Service (ndfltr) . (.Mellanox.) - C:\Windows\System32\drivers\ndfltr.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 150528] (nvraid) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvraid.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 166400] (nvstor) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvstor.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 58880] (percsas2i) . (.Avago Technologies.) - C:\Windows\System32\drivers\percsas2i.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 68608] (percsas3i) . (.Avago Technologies.) - C:\Windows\System32\drivers\percsas3i.sys =>.Microsoft Windows®
SR - Auto [10/04/2020] [ 170352] RelevantKnowledge (RelevantKnowledge) . (.TMRG, Inc..) - C:\Program Files (x86)\RelevantKnowledge\rlservice.exe {36EC9BFE7DCD0284DB79D2D85BE694CF}.
SR - Demand [24/10/2020] [ 1146456] Realtek RT640 NT Driver (rt640x64) . (.Realtek.) - C:\Windows\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp.®
SR - Auto [23/04/2020] [ 269840] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp.®
SR - Demand [30/11/2019] [ 787232] Realtek Bluetooth Filter Driver (RtkBtFilter) . (.Realtek Semiconductor Corporation.) - C:\Windows\System32\drivers\RtkBtfilter.sys =>.WDKTestCert VSAuto,131800073559665678®
SR - Auto [30/11/2019] [ 738712] Realtek Bluetooth Device M (RtkBtManServ) . (.Realtek Semiconductor Corp..) - C:\Windows\RtkBtManServ.exe =>.Microsoft®
SR - Demand [24/10/2020] [11828312] Realtek Wireless L (RTWlanE) . (.Realtek Semiconductor Corporation.) - C:\Windows\System32\drivers\rtwlane.sys =>.Realtek Semiconductor Corp.®
SR - Boot [15/09/2018] [ 45056] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\Windows\System32\drivers\SiSRaid2.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 81920] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\Windows\System32\drivers\sisraid4.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 219960] (SmartSAMD) . (.Microsemi Corportation.) - C:\Windows\System32\drivers\SmartSAMD.sys =>.Microsoft Windows®
SR - Demand [25/03/2019] [ 48688] (SmbDrv) . (.Synaptics Incorporated.) - C:\Windows\System32\drivers\Smb_driver_AMDASF.sys =>.Synaptics Incorporated®
SR - Boot [15/09/2018] [ 31032] (stexstor) . (.Promise Technology, Inc..) - C:\Windows\System32\drivers\stexstor.sys =>.Microsoft Windows®
SR - Demand [24/10/2020] [ 760664] Synaptics TouchPad Driver (SynTP) . (.Synaptics Incorporated.) - C:\Windows\System32\drivers\SynTP.sys =>.Synaptics Incorporated®
SR - Auto [24/10/2020] [ 375640] SynTPEnhService (SynTPEnhService) . (.Synaptics Incorporated.) - C:\Windows\System32\SynTPEnhService.exe =>.Synaptics Incorporated®
SR - Boot [15/09/2018] [ 166712] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\Windows\System32\drivers\vsmraid.sys =>.Microsoft Windows®
SR - Boot [15/09/2018] [ 305464] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\Windows\System32\drivers\vstxraid.sys =>.Microsoft Windows®
SR - Demand [15/09/2018] [ 37688] WinMad Service (WinMad) . (.Mellanox.) - C:\Windows\System32\drivers\winmad.sys =>.Microsoft Windows®
SR - Demand [15/09/2018] [ 77856] WinVerbs Service (WinVerbs) . (.Mellanox.) - C:\Windows\System32\drivers\winverbs.sys =>.Microsoft Windows®
SR - Demand [08/06/2020] [ 35392] HP Wireless Button Driver Service (WirelessButtonDriver64) . (.HP.) - C:\Windows\System32\drivers\WirelessButtonDriver64.sys =>.HP Inc.®

---\\ TÂCHES PLANIFIÉES EN AUTOMATIQUE (Registre) (2) - 121s
O38 - TASK: {A234D751-39B8-4182-ABC9-468B9770E90C} [64Bits][\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB] - (.Mozilla Foundation - Firefox Default Browser Agent.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe [667856] =>.Mozilla Foundation
C:\Windows\System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - (.Mozilla Foundation.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe [do-task "308046B0AF4A39CB.do-task] =>.Mozilla Foundation

---\\ APPLICATIONS LANCÉES AU DÉMARRAGE DU SYSTÈME (4) - 2s
O4 - HKCU\..\Run: [kgserv.exe] . (...) -- C:\Program Files (x86)\KLGratuit\kgserv.exe [Unsigned]
O4 - HKUS\S-1-5-19\..\RunOnce: [Explorer_Privacy_WebsiteIDAccess_Disable] . (. - .) -- REG ADD "HKCU\Control Panel\International\User Profile" .User =>.SUP.Orphan
O4 - HKUS\S-1-5-20\..\RunOnce: [Explorer_Privacy_WebsiteIDAccess_Disable] . (. - .) -- REG ADD "HKCU\Control Panel\International\User Profile" .User =>.SUP.Orphan
O4 - HKUS\S-1-5-21-100840001-1542088837-3273673715-1001\..\Run: [kgserv.exe] . (...) -- C:\Program Files (x86)\KLGratuit\kgserv.exe [Unsigned]

---\\ PROCESSUS LANCÉS (25) - 23s
[MD5.82C9933AC7D2C0BC87318929B382C4F8] - (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) -- C:\Windows\System32\SynTPEnhService.exe [375640] [PID.1660] [Unsigned] =>.Synaptics Incorporated
[MD5.69FFD89BAD05774AB966B2654279D8C2] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe [508000] [PID.1792] =>.Advanced Micro Devices, Inc.®
[MD5.12D958D4DF300318CF164ED0E2A58150] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atieclxx.exe [760928] [PID.2016] =>.Advanced Micro Devices, Inc.®
[MD5.452748ADF08F904E38E1245EDFE95EE0] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [269840] [PID.2380] =>.Realtek Semiconductor Corp.®
[MD5.C0BD8622CD882F929BCBDDA4BFDB6884] - (.TMRG, Inc. - Relevant-Knowledge.) -- C:\Program Files (x86)\RelevantKnowledge\rlservice.exe [170352] [PID.2944] {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge
[MD5.7B5EDAD629FC8BAB0D4D953AB0EAFE34] - (.Realtek Semiconductor Corp. - Realtek Bluetooth BTDevManager Service Appl.) -- C:\Windows\RtkBtManServ.exe [738712] [PID.2828] =>.Microsoft®
[MD5.B2D4848BED747A25D865CC6E301702D5] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Windows\System32\SynTPEnh.exe [4305240] [PID.4892] [Unsigned] =>.Synaptics Incorporated
[MD5.E1A8D284E2A032BBD5C7E3A5A03E998D] - (...) -- C:\Program Files (x86)\KLGratuit\kgserv.exe [1350144] [PID.5536] [Unsigned]
[MD5.0E53AFCD7DC7F2A47AD5213231A09EE2] - (.HP Inc. - HP Support Solutions Framework Service.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736] [PID.5976] =>.HP Inc.®
[MD5.5A623B2A97EF5EEEA8AEC8655AD8AF70] - (.TMRG, Inc. - Relevant-Knowledge.) -- C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe [5739888] [PID.5716] {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge
[MD5.9A0141FEAD8E57087BEFD679A8CB94B2] - (.TMRG, Inc. - Relevant-Knowledge.) -- C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe [161136] [PID.736] {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge
[MD5.3DFF2F71659EC1FE8C8CEE2125D06870] - (.TMRG, Inc. - Relevant-Knowledge.) -- C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe [190320] [PID.2500] {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.5620] =>.Mozilla Corporation®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.2436] =>.Mozilla Corporation®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.5436] =>.Mozilla Corporation®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.5724] =>.Mozilla Corporation®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.6544] =>.Mozilla Corporation®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.7040] =>.Mozilla Corporation®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.2536] =>.Mozilla Corporation®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.1344] =>.Mozilla Corporation®
[MD5.610D3A995E4C1DCF953F433218E00CCE] - (.HP Inc. - HP Support Assistant.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648] [PID.1856] =>.HP Inc.®
[MD5.7762EF5482A10E658CCB61B96AF31F40] - (.HP Inc. - HPSSFUpdater.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944] [PID.4820] =>.HP Inc.®
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.5372] =>.Mozilla Corporation®
[MD5.D90B5207389947DB73B322346712F0B1] - (.Nicolas Coolman - ZHPSuite.) -- C:\Users\admin\Downloads\ZHPSuite.exe [3440000] [PID.1560] [Unsigned] =>.Nicolas Coolman
[MD5.45B9BBD8AB829E66250A995A345BC0D9] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [636624] [PID.492] =>.Mozilla Corporation®

---\\ FIREFOX, Plugins,Démarrage,Recherche,Extensions (19) - 18s
M0 - MFSP: prefs.js [admin - na8tb9ey.default-release] user_pref( browser.startup.homepage_override.once , {\ message_id\ :\ WNP_MOMENTS_1\ ,\ url\ :\ http://www.mozilla.org/ =>.Mozilla Corporation
P2 - EXT FILE: (.SponsorBlock.) -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\extensions\sponsorBlocker@ajay.app.xpi [Unsigned]
P2 - EXT FILE: (.uBlock Origin.) -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\extensions\uBlock0@raymondhill.net.xpi [Unsigned] =>.uBlock Origin
P2 - EXT FILE: (.Legitimate.) -- C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [Unsigned]
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi [Unsigned] =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi [Unsigned] =>.Mozilla Corporation
P2 - EXT FILE: (.webcompat.com.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [Unsigned] =>.webcompat.com
P2 - EXT FILE: (.webcompat.com.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi [Unsigned] =>.webcompat.com
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\bookmarkbackups =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\crashes =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\datareporting =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\extensions =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\gmp-gmpopenh264 =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\gmp-widevinecdm =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\minidumps =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\saved-telemetry-pings =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\security_state =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\sessionstore-backups =>Mozilla Corporation
C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\storage =>Mozilla Corporation

---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (15) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.17763.1453 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation

---\\ INTERNET EXPLORER, Site de confiance et site sensible (1) - 0s
~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad)

---\\ INTERNET EXPLORER,Proxy Management (3) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ ÉTUDE DU FICHIER HOSTS (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (1) - 1s
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll =>.Microsoft®

---\\ RACCOURCIS GLOBAL STARTUP (31) - 22s
O4 - GS\Desktop [admin]: Assistant Mise à jour de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe =>.Microsoft®
O4 - GS\Desktop [admin]: ZHPSuite.lnk . (.Nicolas Coolman - ZHPSuite.) C:\Users\admin\AppData\Roaming\ZHP\ZHPSuite.exe =>.Nicolas Coolman
O4 - GS\sendTo [admin]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [admin]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [admin]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: HP Support Assistant.lnk . (.HP Inc. - HP Support Assistant.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /p 2 =>.HP Inc.®
O4 - GS\CommonDesktop [Public]: OpenOffice 4.1.7.lnk . (.Apache Software Foundation - OpenOffice 4.1.7.) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe [Unsigned] =>.Apache Software Foundation
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\internet explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\Windows\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Access.lnk . (.Microsoft Corporation - Microsoft Access.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Assistant Mise à jour de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Audio Control.lnk . (.Realtek Semiconductor - Audio Control.) C:\Program Files (x86)\Realtek\Audio\HDA\RtkNGUI64.exe /LAUNCH_BY_STARTMENU [Unsigned] =>.Realtek Semiconductor
O4 - GS\ProgramsCommon [Public]: Excel.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\Windows\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: OneNote.lnk . (.Microsoft Corporation - Microsoft OneNote.) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: PowerPoint.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Publisher.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Skype for Business.lnk . (.Microsoft Corporation - Skype for Business.) C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Word.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE =>.Microsoft®

---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (5) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = lan =>.Local Domain
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{511c89d8-26c3-4798-afbe-3be1c2d15662}: DhcpNameServer = 192.168.20.254 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{6601bfcd-c20b-4966-a4cd-f5d0bc93d134}: DhcpNameServer = 192.168.1.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{6601bfcd-c20b-4966-a4cd-f5d0bc93d134}: DhcpDomain = lan =>.Local Domain

---\\ PROTOCOLE ADDITIONNEL (23) - 17s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL =>.Microsoft®

---\\ REGISTRE AppInit_DLLs et Winlogon Notify (1) - 1s
O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation

---\\ CLÉ DE REGISTRE EXPLORER StartupApproved (2) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:RTHDVCPL =>.Realtek Semiconductor Corp.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o

---\\ COMPOSANTS ACTIVESETUP INSTALLÉS (ASIC) (5) - 7s
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft Corporation®

---\\ LOGICIELS INSTALLÉS (19) - 88s
O42 - Logiciel: Assistant Mise à jour de Windows 10 - (.Microsoft Corporation.) [HKLM][64Bits] -- {D5C69738-B486-402E-85AC-2456D98A64E4} =>.Microsoft®
O42 - Logiciel: HP Support Assistant - (.HP Inc..) [HKLM][64Bits] -- {54ECA61C-83AE-4EE3-A9F7-848155A33386} [Unsigned] =>.HP Inc.
O42 - Logiciel: HP Support Solutions Framework - (.HP Inc..) [HKLM][64Bits] -- {2A6B6DA3-0A09-43E0-BBF1-B0A6EDBEE779} [Unsigned] =>.HP Inc.
O42 - Logiciel: Microsoft Office Professionnel Plus 2019 - fr-fr - (.Microsoft Corporation.) [HKLM][64Bits] -- ProPlus2019Retail - fr-fr =>.Microsoft®
O42 - Logiciel: Microsoft Update Health Tools - (.Microsoft Corporation.) [HKLM][64Bits] -- {56968E15-E9B0-432D-BBE1-D303BD157C5A} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Mozilla Firefox 82.0 (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 82.0 (x64 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService [Unsigned] =>.Mozilla
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-0000-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component 64-bit Registration - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-00DD-0000-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Office 16 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008F-0000-1000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Office 16 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: OpenOffice 4.1.7 - (.Apache Software Foundation.) [HKLM][64Bits] -- {A9222889-1CDA-42BD-B11B-113E7C91C1C7} [Unsigned] =>.Apache Software Foundation
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.®
O42 - Logiciel: RelevantKnowledge - (.TMRG, Inc..) [HKLM][64Bits] -- {d08d9f98-1c78-4704-87e6-368b0023d831} {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge
O42 - Logiciel: StartIsBack++ - (.startisback.com.) [HKLM][64Bits] -- StartIsBack [Unsigned] =>.startisback.com
O42 - Logiciel: UltraUXThemePatcher - (.Manuel Hoefs (Zottel).) [HKLM][64Bits] -- UltraUXThemePatcher [Unsigned] =>.Manuel Hoefs (Zottel)
O42 - Logiciel: WinRAR 5.91 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®

---\\ CLÉ DE REGISTRE SOFTWARE HKCU & HKLM (81) - 88s
HKLM\SOFTWARE\AMD =>.AMD
HKLM\SOFTWARE\Avast Software =>.AVAST Software
HKLM\SOFTWARE\DefaultUserEnvironment =>.Microsoft Corporation
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Nuance =>.Nuance
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OEM =>.OEM
HKLM\SOFTWARE\Partner =>.Google Inc.
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\SonicFocus =>.Sonic Focus
HKLM\SOFTWARE\SoundResearch =>.Sound Research
HKLM\SOFTWARE\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\Synaptics =>.Synaptics
HKLM\SOFTWARE\WinRAR =>.WinRAR
HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\Avast Software =>.AVAST Software
HKLM\SOFTWARE\WOW6432Node\BraveSoftware =>.Brave Software Inc.
HKLM\SOFTWARE\WOW6432Node\Google =>.Google
HKLM\SOFTWARE\WOW6432Node\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\WOW6432Node\HP =>.HP
HKLM\SOFTWARE\WOW6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\WOW6432Node\Insyde =>.Insyde
HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel
HKLM\SOFTWARE\WOW6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\WOW6432Node\OpenOffice =>.SourceForge
HKLM\SOFTWARE\WOW6432Node\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\WOW6432Node\UltraUXThemePatcher
HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\BraveSoftware =>.Brave Software Inc.
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKCU\SOFTWARE\HP =>.HP
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\OpenOffice =>.SourceForge
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\StartIsBack =>.StartIsBack.com
HKCU\SOFTWARE\Synaptics =>.Synaptics
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKU\.DEFAULT\SOFTWARE\ATI =>.ATI
HKU\.DEFAULT\SOFTWARE\StartIsBack =>.StartIsBack.com
HKU\.DEFAULT\SOFTWARE\WinRAR =>.WinRAR
HKU\.DEFAULT\SOFTWARE\WinRAR SFX =>.RarLab
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\AVAST Software =>.AVAST Software
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\BraveSoftware =>.Brave Software Inc.
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Chromium =>.Chromium
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Google =>.Google
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\HP =>.HP
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\IM Providers =>.IM Providers
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Mozilla =>.Mozilla
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Netscape =>.Netscape
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\OpenOffice =>.SourceForge
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\StartIsBack =>.StartIsBack.com
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Synaptics =>.Synaptics
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\WinRAR =>.WinRAR
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\WinRAR SFX =>.RarLab
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKU\S-1-5-21-100840001-1542088837-3273673715-1001\SOFTWARE\ZHP =>.Nicolas Coolman

---\\ PACKAGES (1) - 0s
C:\Program Files (x86)\WindowsApps\SynapticsIncorporated.SynHPConsumerDApp_19005.35054.0.0_x64__807d65c4rvak2 - (.Hewlett-Packard.) [][Synaptics TouchPad] =>Hewlett-Packard

---\\ CONTENU DES DOSSIERS PROGRAMMES (136) - 44s
O43 - CFD: 25/10/2020 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files\internet explorer =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files\Microsoft Office 15 =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files\Microsoft Update Health Tools =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla
O43 - CFD: 17/05/2019 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 17/05/2019 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [] D -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] RD -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files\windows nt =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 25/10/2020 - [] D -- C:\Program Files (x86)\BraveSoftware =>.Brave Software Inc.
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files (x86)\Google =>.Google
O43 - CFD: 26/10/2020 - [] D -- C:\Program Files (x86)\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 26/10/2020 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard
O43 - CFD: 26/10/2020 - [0] D -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 26/10/2020 - [] D -- C:\Program Files (x86)\KLGratuit [Unsigned]
O43 - CFD: 25/10/2020 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 17/05/2019 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [] D -- C:\Program Files (x86)\OpenOffice 4 =>.OpenOffice.org
O43 - CFD: 17/05/2019 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 28/10/2020 - [] D -- C:\Program Files (x86)\RelevantKnowledge {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files (x86)\StartIsBack =>.StartCom
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files (x86)\UltraUXThemePatcher [Unsigned]
O43 - CFD: 24/10/2020 - [0] HD -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] D -- C:\Program Files (x86)\windows nt =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 17/05/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 17/05/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 26/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support =>.Hewlett-Packard
O43 - CFD: 26/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Keylogger Gratuit
O43 - CFD: 15/09/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.7 =>.SourceForge
O43 - CFD: 28/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge =>PUP.Optional.RelevantKnowledge
O43 - CFD: 15/09/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 17/05/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 24/10/2020 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [] D -- C:\ProgramData\Avast Software =>.AVAST Software
O43 - CFD: 24/10/2020 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 26/10/2020 - [] D -- C:\ProgramData\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 24/10/2020 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\ProgramData\Packages =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\ProgramData\Realtek =>.Realtek
O43 - CFD: 28/10/2020 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\ProgramData\SoundResearch =>.Sound Research
O43 - CFD: 24/10/2020 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer
O43 - CFD: 25/10/2020 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 17/05/2019 - [0] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 27/05/2019 - [] D -- C:\Program Files (x86)\Common Files\system =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\Easeware =>.Easeware
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\hpqLog =>.Hewlett-Packard
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\KLGratuit
O43 - CFD: 26/10/2020 - [] SD -- C:\Users\admin\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 25/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\OpenOffice =>.SourceForge
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\Synaptics =>.Synaptics
O43 - CFD: 28/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\AMD =>.AMD
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\admin\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\BraveSoftware =>.Brave Software Inc.
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\CEF =>.CEF
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 28/10/2020 - [] D -- C:\Users\admin\AppData\Local\D3DSCache =>.Legitimate
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\Google =>.Google
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Local\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\admin\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Local\HP =>.Hewlett-Packard
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 25/10/2020 - [] D -- C:\Users\admin\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [0] D -- C:\Users\admin\AppData\Local\PeerDistRepub =>.Microsoft Corporation
O43 - CFD: 25/10/2020 - [0] D -- C:\Users\admin\AppData\Local\PlaceholderTileLogoFolder =>.Microsoft Corporation
O43 - CFD: 26/10/2020 - [] D -- C:\Users\admin\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Local\StartIsBack =>.StartCom
O43 - CFD: 28/10/2020 - [] D -- C:\Users\admin\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\admin\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] D -- C:\Users\admin\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 28/10/2020 - [] D -- C:\Users\admin\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 26/10/2020 - [0] D -- C:\Users\admin\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\LocalLow\AMD =>.AMD
O43 - CFD: 24/10/2020 - [] SD -- C:\Users\admin\AppData\LocalLow\Microsoft =>.Microsoft Corporation
O43 - CFD: 28/10/2020 - [] D -- C:\Users\admin\AppData\LocalLow\Mozilla =>.Mozilla Corporation
O43 - CFD: 25/10/2020 - [] D -- C:\Users\admin\Desktop\OpenOffice 4.1.7 (fr) Installation Files =>.SourceForge
O43 - CFD: 15/09/2018 - [] RD -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] RD -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] RD -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 15/09/2018 - [] D -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] RD -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] RD -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] RD -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 15/09/2018 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 24/10/2020 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 27/10/2020 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\PeerDistRepub =>.Microsoft Corporation
O43 - CFD: 26/10/2020 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\hpqLog =>.Hewlett-Packard
O43 - CFD: 24/10/2020 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (2) - 1s
O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll [Unsigned] =>.Microsoft Corporation

---\\ RACCOURCIS DES MENUS CONTEXTUELS (SCMH) (26) - 6s
O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH2: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH2: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH4: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Windows®
O108 - CMH6: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Programme de résolution d’applications.) -- C:\Windows\System32\appresolver.dll =>.Microsoft Windows®
O108 - CMH6: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (.Alexander Roshal - WinRAR shell extension.) -- C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH®
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.) [Unsigned]
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation

---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (10) - 5s
O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MitigationAuditOptions\\17660905521152] =>.Microsoft Windows Publisher®

---\\ LISTE DES PILOTES DU SYSTÈME (421) - 197s
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\Windows\System32\drivers\1394ohci.sys [245248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [107520] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\Windows\System32\drivers\acpi.sys [790840] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - ACPI Devices Driver.) -- C:\Windows\System32\drivers\AcpiDev.sys [19968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\Windows\System32\drivers\acpiex.sys [132096] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\Windows\System32\drivers\acpipagr.sys [12800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\Windows\System32\drivers\acpipmi.sys [16384] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\Windows\System32\drivers\acpitime.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [1135616] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:52 A . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\afd.sys [655160] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:55 A . (.Microsoft Corporation - AF_UNIX socket provider.) -- C:\Windows\System32\drivers\afunix.sys [40960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - Gestionnaire d'appels RAS Agile Vpn Minipor.) -- C:\Windows\System32\drivers\agilevpn.sys [113664] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\Windows\System32\drivers\ahcache.sys [288256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/10/24 14:33:19 A . (.Advanced Micro Devices, INC. - AMD AS4 Driver.) -- C:\Windows\System32\drivers\AmdAS4.sys [35848] =>.Advanced Micro Devices Inc.®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\amdk8.sys [202768] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\amdppm.sys [201016] =>.Microsoft Windows®
O58 - SDL:2020/10/24 14:30:25 A . (.Advanced Micro Devices, Inc. - amdpsp sys.) -- C:\Windows\System32\drivers\amdpsp.sys [135184] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2018/09/15 08:28:17 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [83456] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259384] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27136] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:42 A . (.Microsoft Corporation - AppID Driver.) -- C:\Windows\System32\drivers\appid.sys [201528] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:42 A . (.Microsoft Corporation - Applocker Filter.) -- C:\Windows\System32\drivers\applockerfltr.sys [18432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 17:46:11 A . (.Microsoft Corporation - Microsoft Application Virtualization Stream.) -- C:\Windows\System32\drivers\AppVStrm.sys [137016] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:06 A . (.Microsoft Corporation - Microsoft Application Virtualization VE Man.) -- C:\Windows\System32\drivers\AppvVemgr.sys [174392] =>.Microsoft Windows®
O58 - SDL:2018/09/15 17:46:11 A . (.Microsoft Corporation - Microsoft Application Virtualization VFS Fi.) -- C:\Windows\System32\drivers\AppvVfs.sys [153400] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [131896] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\Windows\System32\drivers\asyncmac.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [30208] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\Windows\System32\drivers\ataport.sys [203264] =>.Microsoft Windows®
O58 - SDL:2020/10/24 14:30:17 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdWT6.sys [107936] =>.Microsoft®
O58 - SDL:2018/09/15 08:28:29 A . (.Microsoft Corporation - BAM Kernel Driver.) -- C:\Windows\System32\drivers\bam.sys [63288] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Battery Class Driver.) -- C:\Windows\System32\drivers\battc.sys [40760] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (. - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [9728] [Unsigned] =>.Broadcom Corporation
O58 - SDL:2018/09/15 08:28:44 A . (.Microsoft Corporation - BEEP Driver.) -- C:\Windows\System32\drivers\beep.sys [10240] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:54 A . (.Microsoft Corporation - Windows Bind Filter Driver.) -- C:\Windows\System32\drivers\bindflt.sys [104248] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:25 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\Windows\System32\drivers\bowser.sys [116224] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:31:25 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\Windows\System32\drivers\bridge.sys [126464] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\Windows\System32\drivers\BtaMPM.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:41 A . (.Microsoft Corporation - Extension de bus Bluetooth.) -- C:\Windows\System32\drivers\bthenum.sys [111104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:41 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\Windows\System32\drivers\bthhfenum.sys [120320] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Bluetooth Transport Extensibility Miniport.) -- C:\Windows\System32\drivers\BthMini.SYS [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\Windows\System32\drivers\bthmodem.sys [72192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Bluetooth Personal Area Networking.) -- C:\Windows\System32\drivers\bthpan.sys [133120] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:32 A . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\Windows\System32\drivers\bthport.sys [1229312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Pilote de Miniport Bluetooth.) -- C:\Windows\System32\drivers\BTHUSB.SYS [92672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - VHD BTT Filter Driver.) -- C:\Windows\System32\drivers\bttflt.sys [42504] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Button Converter Driver.) -- C:\Windows\System32\drivers\buttonconverter.sys [40960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [533816] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Charge Arbiration Driver.) -- C:\Windows\System32\drivers\CAD.sys [63288] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - CapImg HID Driver.) -- C:\Windows\System32\drivers\capimg.sys [125952] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:31:23 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\cdfs.sys [100352] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\cdrom.sys [165888] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:29 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) -- C:\Windows\System32\drivers\CEA.sys [82432] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\Windows\System32\drivers\cht4dx64.sys [142864] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\Windows\System32\drivers\cht4sx64.sys [319488] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Chelsio Communications - VF library for Chelsio ® T5/T6 Chipset.) -- C:\Windows\System32\drivers\cht4vfx.sys [29696] [Unsigned] =>.Chelsio Communications
O58 - SDL:2018/09/15 08:28:18 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\Windows\System32\drivers\cht4vx64.sys [1866768] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\Windows\System32\drivers\circlass.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:42 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\Windows\System32\drivers\Classpnp.sys [430904] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:02 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\Windows\System32\drivers\clfs.sys [404792] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:52 A . (.Microsoft Corporation - CLIP Service.) -- C:\Windows\System32\drivers\ClipSp.sys [1053192] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\Windows\System32\drivers\CmBatt.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - Noyau Gestionnaire de configuration Configu.) -- C:\Windows\System32\drivers\cmimcext.sys [28984] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\Windows\System32\drivers\cng.sys [730384] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) -- C:\Windows\System32\drivers\cnghwassist.sys [40248] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:36 A . (.Microsoft Corporation - Console Driver.) -- C:\Windows\System32\drivers\condrv.sys [60928] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\Windows\System32\drivers\crashdmp.sys [93496] =>.Microsoft Windows®
O58 - SDL:2018/09/15 17:46:08 A . (.Microsoft Corporation - Windows Client Side Caching Driver.) -- C:\Windows\System32\drivers\csc.sys [579072] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:17 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\Windows\System32\drivers\dam.sys [97808] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) -- C:\Windows\System32\drivers\devauthe.sys [46592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\dfsc.sys [151040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - PnP Disk Driver.) -- C:\Windows\System32\drivers\disk.sys [97592] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:51 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\Windows\System32\drivers\Diskdump.sys [38200] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:51 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\Windows\System32\drivers\Dmpusbstor.sys [15360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Mémoire dynamique.) -- C:\Windows\System32\drivers\dmvsc.sys [57144] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\drivers\drmk.sys [98304] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:16 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\drivers\drmkaud.sys [16328] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:43 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\Windows\System32\drivers\Dumpata.sys [36352] =>.Microsoft Windows®
O58 - SDL:2018/09/15 17:46:18 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\Windows\System32\drivers\dumpfve.sys [92592] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\Windows\System32\drivers\dumpsd.sys [193032] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:36 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) -- C:\Windows\System32\drivers\dumpsdport.sys [32256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:50 A . (.Microsoft Corporation - Storport Dump Driver.) -- C:\Windows\System32\drivers\Dumpstorport.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:25 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\drivers\dxgkrnl.sys [3363856] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:25 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\drivers\dxgmms1.sys [439296] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:25 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\drivers\dxgmms2.sys [863752] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:16 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\Windows\System32\drivers\EhStorClass.sys [90936] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\Windows\System32\drivers\EhStorTcgDrv.sys [119608] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Error Device Driver.) -- C:\Windows\System32\drivers\errdev.sys [14336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3419152] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:00 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\Windows\System32\drivers\exfat.sys [402944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:00 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\Windows\System32\drivers\fastfat.sys [419128] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\Windows\System32\drivers\fdc.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) -- C:\Windows\System32\drivers\filecrypt.sys [60416] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:49 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\Windows\System32\drivers\fileinfo.sys [94224] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:43 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\Windows\System32\drivers\filetrace.sys [40448] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Floppy Driver.) -- C:\Windows\System32\drivers\flpydisk.sys [28160] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) -- C:\Windows\System32\drivers\fltMgr.sys [436736] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\Windows\System32\drivers\fsdepends.sys [67384] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\Windows\System32\drivers\fs_rec.sys [35328] =>.Microsoft Windows®
O58 - SDL:2018/09/15 17:46:18 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\Windows\System32\drivers\fvevol.sys [798520] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:54 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [474928] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Generic USB Function Class Driver.) -- C:\Windows\System32\drivers\genericusbfn.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) -- C:\Windows\System32\drivers\gpuenergydrv.sys [8704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\hdaudbus.sys [104960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\HdAudio.sys [398336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Hid Battery Driver.) -- C:\Windows\System32\drivers\hidbatt.sys [39736] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\Windows\System32\drivers\hidbth.sys [118272] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Bibliothèque Hid Class.) -- C:\Windows\System32\drivers\hidclass.sys [209920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\Windows\System32\drivers\hidi2c.sys [52224] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) -- C:\Windows\System32\drivers\hidinterrupt.sys [51512] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\Windows\System32\drivers\hidir.sys [48640] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:41 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\Windows\System32\drivers\hidparse.sys [46080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - SPI HID Miniport Driver.) -- C:\Windows\System32\drivers\hidspi.sys [60928] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\Windows\System32\drivers\hidusb.sys [43520] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/10/24 14:33:23 A . (.Hewlett-Packard Company - Keyboard Filter Driver.) -- C:\Windows\System32\drivers\HpqKbFiltr64.sys [37112] =>.Hewlett-Packard Company®
O58 - SDL:2018/09/15 08:28:17 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64312] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:07 A . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\Windows\System32\drivers\http.sys [1259320] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Hyper-V Crashdump.) -- C:\Windows\System32\drivers\hvcrash.sys [33280] =>.Microsoft Windows®
O58 - SDL:2019/05/27 09:32:32 A . (.Microsoft Corporation - Hypervisor Boot Driver.) -- C:\Windows\System32\drivers\hvservice.sys [80400] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:24 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) -- C:\Windows\System32\drivers\hvsocket.sys [144696] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:45 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\Windows\System32\drivers\hwpolicy.sys [29696] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\Windows\System32\drivers\hyperkbd.sys [25400] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\Windows\System32\drivers\HyperVideo.sys [32256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [110592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iagpio.sys [36352] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\Windows\System32\drivers\iai2c.sys [91136] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_GPIO2.sys [79360] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [93184] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [112128] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [171520] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [175104] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_I2C_CNL.sys [180736] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_I2C_GLK.sys [177664] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2018/09/15 08:28:15 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [113152] [Unsigned] =>.Intel Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\Windows\System32\drivers\iaStorAVC.sys [885048] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [411960] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\Windows\System32\drivers\ibbus.sys [566800] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) -- C:\Windows\System32\drivers\IndirectKmd.sys [45568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\Windows\System32\drivers\intelide.sys [19456] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\Windows\System32\drivers\intelpep.sys [254952] =>.Microsoft®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\intelppm.sys [223544] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:43 A . (.Microsoft Corporation - Filtre de contrôle de taux d’E/S.) -- C:\Windows\System32\drivers\iorate.sys [55608] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\Windows\System32\drivers\ipfltdrv.sys [90112] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\Windows\System32\drivers\IPMIDrv.sys [95744] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\ipnat.sys [224768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - IPT Driver.) -- C:\Windows\System32\drivers\ipt.sys [42496] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:24 A . (.Microsoft Corporation - IRDA Protocol Driver.) -- C:\Windows\System32\drivers\irda.sys [124928] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:24 A . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\Windows\System32\drivers\irenum.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\Windows\System32\drivers\isapnp.sys [23352] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\Windows\System32\drivers\ItSas35i.sys [148480] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\Windows\System32\drivers\kbdclass.sys [67896] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:41 A . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\Windows\System32\drivers\kbdhid.sys [44544] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\Windows\System32\drivers\kdnic.sys [24064] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:25 A . (.Microsoft Corporation - Network Power Dependency Broker.) -- C:\Windows\System32\drivers\KNetPwrDepBroker.sys [30720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:53 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\Windows\System32\drivers\ks.sys [448000] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\drivers\ksecdd.sys [147968] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:01 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\drivers\ksecpkg.sys [177976] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\Windows\System32\drivers\ksthunk.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\Windows\System32\drivers\lltdio.sys [71680] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109056] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2i.sys [124416] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3i.sys [128512] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82944] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:33 A . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) -- C:\Windows\System32\drivers\luafv.sys [138752] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) -- C:\Windows\System32\drivers\mausbhost.sys [515384] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - MA-USB IP Driver.) -- C:\Windows\System32\drivers\mausbip.sys [58680] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:31:38 A . (.Microsoft Corporation - Windows Mobile Broadband Class Extension.) -- C:\Windows\System32\drivers\MbbCx.sys [290816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:44 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\Windows\System32\drivers\mcd.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [59904] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\MegaSas2i.sys [75264] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas35i.sys [79872] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575800] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de transport Microsoft Bluetooth Avr.) -- C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [53760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:32 A . (.Microsoft Corporation - Legacy Bluetooth LE Bus Enumerator.) -- C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [90624] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Mellanox - MLX4 Bus Driver.) -- C:\Windows\System32\drivers\mlx4_bus.sys [1150496] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:52 A . (.Microsoft Corporation - MMCSS Driver.) -- C:\Windows\System32\drivers\mmcss.sys [51712] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:22 A . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\Windows\System32\drivers\modem.sys [46080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:16 A . (.Microsoft Corporation - Monitor Driver.) -- C:\Windows\System32\drivers\monitor.sys [61952] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\Windows\System32\drivers\mouclass.sys [61240] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\Windows\System32\drivers\mouhid.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:45 A . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\Windows\System32\drivers\mountmgr.sys [112440] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:28 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\Windows\System32\drivers\mpsdrv.sys [79360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:25 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\drivers\mrxdav.sys [157696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:54 A . (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\mrxsmb.sys [535048] =>.Microsoft Windows®
O58 - SDL:2019/05/27 09:32:42 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\Windows\System32\drivers\mrxsmb20.sys [262160] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:33 A . (.Microsoft Corporation - Mailslot driver.) -- C:\Windows\System32\drivers\msfs.sys [33792] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:27 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\Windows\System32\drivers\msgpioclx.sys [175096] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - GPIO Button Driver.) -- C:\Windows\System32\drivers\msgpiowin32.sys [51000] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\Windows\System32\drivers\mshidkmdf.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - Pilote direct pour interface HID-UMDF.) -- C:\Windows\System32\drivers\mshidumdf.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) -- C:\Windows\System32\drivers\mshwnclx.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - ISA Driver.) -- C:\Windows\System32\drivers\msisadrv.sys [18744] =>.Microsoft Windows®
O58 - SDL:2019/05/27 09:32:31 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\Windows\System32\drivers\msiscsi.sys [292664] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:53 A . (.Microsoft Corporation - MS KS Server.) -- C:\Windows\System32\drivers\mskssrv.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - Pilote de protocole LLDP (Link Layer Discov.) -- C:\Windows\System32\drivers\mslldp.sys [81920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\Windows\System32\drivers\mspclock.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\Windows\System32\drivers\mspqm.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:52 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\Windows\System32\drivers\msrpc.sys [383288] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\Windows\System32\drivers\mssmbios.sys [45880] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\Windows\System32\drivers\mstee.sys [12800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\Windows\System32\drivers\MTConfig.sys [16384] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Pilote de fournisseur UNC multiples.) -- C:\Windows\System32\drivers\mup.sys [130360] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63800] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\Windows\System32\drivers\ndfltr.sys [153616] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:53 A . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\Windows\System32\drivers\ndis.sys [1360184] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:23 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\Windows\System32\drivers\ndiscap.sys [55808] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\Windows\System32\drivers\NdisImPlatform.sys [134656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\Windows\System32\drivers\ndistapi.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:45 A . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\Windows\System32\drivers\ndisuio.sys [69632] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - Énumérateur de cartes réseau virtuelles Mic.) -- C:\Windows\System32\drivers\NdisVirtualBus.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\Windows\System32\drivers\ndiswan.sys [206848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\Windows\System32\drivers\ndproxy.sys [70144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:13 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\Windows\System32\drivers\Ndu.sys [132096] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) -- C:\Windows\System32\drivers\NetAdapterCx.sys [184320] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\Windows\System32\drivers\netbios.sys [64528] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:37 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netbt.sys [301568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:53 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\Windows\System32\drivers\netio.sys [588304] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:39 A . (.Microsoft Corporation - Miniport NDIS virtuel.) -- C:\Windows\System32\drivers\netvsc.sys [234808] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:33 A . (.Microsoft Corporation - NPFS Driver.) -- C:\Windows\System32\drivers\npfs.sys [78336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Named pipe service triggers.) -- C:\Windows\System32\drivers\npsvctrig.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:45 A . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\drivers\nsiproxy.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:42 A . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2627600] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - NTOS extension host driver.) -- C:\Windows\System32\drivers\ntosext.sys [20480] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - NULL Driver.) -- C:\Windows\System32\drivers\null.sys [7168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Pilote de périphérique NVDIMM.) -- C:\Windows\System32\drivers\nvdimm.sys [148480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150528] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166400] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:11 A . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\Windows\System32\drivers\nwifi.sys [551936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:36 A . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\Windows\System32\drivers\pacer.sys [159744] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\parport.sys [106496] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:53 A . (.Microsoft Corporation - Partition driver.) -- C:\Windows\System32\drivers\partmgr.sys [176440] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\Windows\System32\drivers\pci.sys [421392] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\pciide.sys [16696] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\Windows\System32\drivers\pciidex.sys [56320] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\Windows\System32\drivers\pcmcia.sys [126264] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\Windows\System32\drivers\pcw.sys [57856] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:10 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\Windows\System32\drivers\pdc.sys [157496] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:24 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\Windows\System32\drivers\PEAuth.sys [816640] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\percsas2i.sys [58880] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\percsas3i.sys [68608] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:24 A . (.Microsoft Corporation - Pilote du moniteur de paquets.) -- C:\Windows\System32\drivers\PktMon.sys [85504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Pilote de mémoire persistante.) -- C:\Windows\System32\drivers\pmem.sys [117248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - Pilote mémoire Plug and Play.) -- C:\Windows\System32\drivers\pnpmem.sys [17408] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\Windows\System32\drivers\portcls.sys [381440] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\processr.sys [198456] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:36 A . (.Microsoft Corporation - Process Launch Monitor driver.) -- C:\Windows\System32\drivers\ProcLaunchMon.sys [36440] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) -- C:\Windows\System32\drivers\qwavedrv.sys [53248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - RAM Disk Driver.) -- C:\Windows\System32\drivers\ramdisk.sys [41784] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\Windows\System32\drivers\rasacd.sys [19968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\rasl2tp.sys [111616] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\Windows\System32\drivers\raspppoe.sys [87552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\Windows\System32\drivers\raspptp.sys [103424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\Windows\System32\drivers\rassstp.sys [84992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:54 A . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) -- C:\Windows\System32\drivers\rdbss.sys [454160] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\Windows\System32\drivers\rdpbus.sys [28160] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:31:36 A . (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [167424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:21 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\drivers\rdpvideominiport.sys [31760] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:25 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\Windows\System32\drivers\rdyboost.sys [295440] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:46 A . (.Microsoft Corporation - Pilote du système de fichiers ReFS NT.) -- C:\Windows\System32\drivers\refs.sys [1969464] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:46 A . (.Microsoft Corporation - Pilote du système de fichiers ReFS NT.) -- C:\Windows\System32\drivers\refsv1.sys [981816] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\Windows\System32\drivers\rfcomm.sys [202240] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Transport d’ordinateur virtuel Microsoft Re.) -- C:\Windows\System32\drivers\RfxVmt.sys [43520] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) -- C:\Windows\System32\drivers\rhproxy.sys [108032] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:20 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\Windows\System32\drivers\rmcast.sys [158720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\Windows\System32\drivers\RNDISMP.sys [37376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:22 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\Windows\System32\drivers\rootmdm.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\Windows\System32\drivers\rspndr.sys [89088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/10/24 14:40:32 A . (.Realtek - Realtek 8125/8136/8168/8169 NDIS 6.40 64-bi.) -- C:\Windows\System32\drivers\rt640x64.sys [1146456] =>.Realtek Semiconductor Corp.®
O58 - SDL:2018/09/15 08:28:22 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\Windows\System32\drivers\rteth.sys [59392] [Unsigned] =>.Realtek
O58 - SDL:2019/11/30 17:57:46 A . (.Realtek Semiconductor Corporation - Realtek Bluetooth Filter Driver.) -- C:\Windows\System32\drivers\RtkBtfilter.sys [787232] =>.WDKTestCert VSAuto,131800073559665678®
O58 - SDL:2020/04/23 23:59:54 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [7328856] =>.Realtek Semiconductor Corp.®
O58 - SDL:2020/10/24 14:45:33 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 89269 39686.) -- C:\Windows\System32\drivers\rtwlane.sys [11828312] =>.Realtek Semiconductor Corp.®
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\Windows\System32\drivers\sbp2port.sys [118584] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:59 A . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce.) -- C:\Windows\System32\drivers\scfilter.sys [44032] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Pilote de bus de mémoire de classe stockage.) -- C:\Windows\System32\drivers\scmbus.sys [135168] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:44 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\Windows\System32\drivers\scsiport.sys [186168] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Pilote du bus numérique sécurisé (SD).) -- C:\Windows\System32\drivers\sdbus.sys [298296] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - SDF Reflector.) -- C:\Windows\System32\drivers\SDFRd.sys [33080] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - SD Host Controller Port Driver.) -- C:\Windows\System32\drivers\sdport.sys [104248] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de classe de stockage SD.) -- C:\Windows\System32\drivers\sdstor.sys [102712] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\Windows\System32\drivers\SerCx.sys [76088] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\Windows\System32\drivers\SerCx2.sys [156472] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\Windows\System32\drivers\serenum.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\Windows\System32\drivers\serial.sys [89600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\drivers\sermouse.sys [29184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\Windows\System32\drivers\sfloppy.sys [18944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:13 A . (.Microsoft Corporation - System Guard Runtime Monitor Agent Driver.) -- C:\Windows\System32\drivers\SgrmAgent.sys [87552] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [45056] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81920] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:45 A . (.Microsoft Corporation - Sleep Study Helper.) -- C:\Windows\System32\drivers\SleepStudyHelper.sys [37176] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsemi Corportation - Storport Miniport Driver for SmartRAID/Smar.) -- C:\Windows\System32\drivers\SmartSAMD.sys [219960] =>.Microsoft Windows®
O58 - SDL:2018/09/15 17:46:16 A . (.Microsoft Corporation - Pilote réseau SMB Direct.) -- C:\Windows\System32\drivers\smbdirect.sys [171520] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/25 00:47:44 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [48688] =>.Synaptics Incorporated®
O58 - SDL:2018/09/15 08:28:58 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\Windows\System32\drivers\smclib.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:31 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) -- C:\Windows\System32\drivers\spacedump.sys [196920] =>.Microsoft Windows®
O58 - SDL:2019/05/27 09:32:31 A . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\Windows\System32\drivers\spaceport.sys [651064] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:36 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\Windows\System32\drivers\SpbCx.sys [82744] =>.Microsoft Windows®
O58 - SDL:2019/05/27 09:32:42 A . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\Windows\System32\drivers\srv2.sys [769536] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:54 A . (.Microsoft Corporation - Server Network driver.) -- C:\Windows\System32\drivers\srvnet.sys [293376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31032] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\Windows\System32\drivers\storahci.sys [164344] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\Windows\System32\drivers\stornvme.sys [131384] =>.Microsoft Windows®
O58 - SDL:2019/05/27 09:32:33 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\Windows\System32\drivers\storport.sys [615440] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:47 A . (.Microsoft Corporation - Filtre de qualité de service de stockage.) -- C:\Windows\System32\drivers\storqosflt.sys [95544] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) -- C:\Windows\System32\drivers\storufs.sys [51512] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\Windows\System32\drivers\storvsc.sys [41784] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:44 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\Windows\System32\drivers\stream.sys [81920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - VSC vidéo Synth3D RemoteFX Microsoft.) -- C:\Windows\System32\drivers\Synth3dVsc.sys [66560] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/10/24 14:33:56 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\Windows\System32\drivers\SynTP.sys [760664] =>.Synaptics Incorporated®
O58 - SDL:2018/09/15 08:28:44 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\Windows\System32\drivers\tape.sys [32768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:25 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\Windows\System32\drivers\tbs.sys [28472] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:53 A . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\drivers\tcpip.sys [2925880] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:55 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\Windows\System32\drivers\tcpipreg.sys [54272] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\Windows\System32\drivers\tdi.sys [39224] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:13 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [132408] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\Windows\System32\drivers\terminpt.sys [38944] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:02 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\Windows\System32\drivers\tm.sys [140808] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de périphérique TPM.) -- C:\Windows\System32\drivers\tpm.sys [248120] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\Windows\System32\drivers\TsUsbFlt.sys [64512] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\Windows\System32\drivers\TsUsbGD.sys [35840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 17:46:10 A . (.Microsoft Corporation - Concentrateur USB du Bureau à distance.) -- C:\Windows\System32\drivers\tsusbhub.sys [131072] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:56 A . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\Windows\System32\drivers\tunnel.sys [124416] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\Windows\System32\drivers\uaspstor.sys [84792] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) -- C:\Windows\System32\drivers\UcmCx.sys [146944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) -- C:\Windows\System32\drivers\UcmTcpciCx.sys [162304] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - USB Connector Manager UCSI Client.) -- C:\Windows\System32\drivers\UcmUcsi.sys [61440] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - UCM-UCSI ACPI Client Driver.) -- C:\Windows\System32\drivers\UcmUcsiAcpiClient.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - UCM-UCSI KMDF Class Extension.) -- C:\Windows\System32\drivers\UcmUcsiCx.sys [99840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - USB Controller Extension.) -- C:\Windows\System32\drivers\Ucx01000.sys [236344] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:22 A . (.Microsoft Corporation - "udecx.DRIVER".) -- C:\Windows\System32\drivers\Udecx.sys [48128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:31:36 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\Windows\System32\drivers\udfs.sys [340480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - UEFI Driver for NT.) -- C:\Windows\System32\drivers\uefi.sys [30008] =>.Microsoft Windows®
O58 - SDL:2018/09/15 17:46:14 A . (.Microsoft Corporation - Microsoft User Experience Virtualization Ag.) -- C:\Windows\System32\drivers\UevAgentDriver.sys [41272] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - USB Function Driver Class Extension.) -- C:\Windows\System32\drivers\ufx01000.sys [292152] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - UFX Chipidea Client Driver.) -- C:\Windows\System32\drivers\UfxChipidea.sys [99640] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) -- C:\Windows\System32\drivers\ufxsynopsys.sys [147256] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - User-Mode Bus Enumerator.) -- C:\Windows\System32\drivers\umbus.sys [56832] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Generic pass-through driver.) -- C:\Windows\System32\drivers\umpass.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - USB Role-Switch Driver for Chipidea Core.) -- C:\Windows\System32\drivers\urschipidea.sys [28472] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) -- C:\Windows\System32\drivers\urscx01000.sys [68920] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - USB Role-Switch Driver for Synopsys Core.) -- C:\Windows\System32\drivers\urssynopsys.sys [27448] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:57 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\Windows\System32\drivers\usb8023.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:29 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\System32\drivers\USBCAMD2.sys [39936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\Windows\System32\drivers\usbccgp.sys [179000] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\Windows\System32\drivers\usbcir.sys [106496] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\Windows\System32\drivers\usbd.sys [33592] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\Windows\System32\drivers\usbehci.sys [99128] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de concentrateur USB par défaut.) -- C:\Windows\System32\drivers\usbhub.sys [535352] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de concentrateur USB3.) -- C:\Windows\System32\drivers\USBHUB3.SYS [586552] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\Windows\System32\drivers\usbohci.sys [30720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:38 A . (...) -- C:\Windows\System32\drivers\UsbPmApi.sys [48640] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\Windows\System32\drivers\usbport.sys [475960] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:16 A . (.Microsoft Corporation - USB Printer driver.) -- C:\Windows\System32\drivers\usbprint.sys [29184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - USB Serial Driver.) -- C:\Windows\System32\drivers\usbser.sys [73216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de classe de stockage de masse USB.) -- C:\Windows\System32\drivers\USBSTOR.SYS [138552] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\Windows\System32\drivers\usbuhci.sys [35840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - USB Video Class Driver.) -- C:\Windows\System32\drivers\usbvideo.sys [300344] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote XHCI USB.) -- C:\Windows\System32\drivers\USBXHCI.SYS [467768] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\Windows\System32\drivers\vdrvroot.sys [55608] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Extension du vérificateur de pilotes.) -- C:\Windows\System32\drivers\VerifierExt.sys [237056] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\Windows\System32\drivers\vhdmp.sys [752136] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Virtual HID Framework (VHF) Driver.) -- C:\Windows\System32\drivers\vhf.sys [37376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:40 A . (.Microsoft Corporation - Microsoft Hyper-V Virtualization Infrastruc.) -- C:\Windows\System32\drivers\Vid.sys [519992] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Video Port Driver.) -- C:\Windows\System32\drivers\videoprt.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:24 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\Windows\System32\drivers\vmbkmcl.sys [91960] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote enfant de bus VMBus sous Microsoft H.) -- C:\Windows\System32\drivers\vmbus.sys [127288] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\Windows\System32\drivers\VMBusHID.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\Windows\System32\drivers\vmgencounter.sys [21816] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) -- C:\Windows\System32\drivers\vmgid.sys [18232] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\Windows\System32\drivers\vms3cap.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Pilote de filtre de stockage virtuel.) -- C:\Windows\System32\drivers\vmstorfl.sys [51512] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:39 A . (.Microsoft Corporation - Pilote du gestionnaire de volumes.) -- C:\Windows\System32\drivers\volmgr.sys [90112] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:16 A . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) -- C:\Windows\System32\drivers\volmgrx.sys [389944] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:45 A . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [427832] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Volume driver.) -- C:\Windows\System32\drivers\volume.sys [16696] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:39 A . (.Microsoft Corporation - Virtual PCI Bus.) -- C:\Windows\System32\drivers\vpci.sys [80400] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [166712] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305464] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:24 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) -- C:\Windows\System32\drivers\vwifibus.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:24 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\Windows\System32\drivers\vwififlt.sys [78336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:24 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\Windows\System32\drivers\vwifimp.sys [47616] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:17 A . (.Microsoft Corporation - Pilote de tablette Wacom à stylet série.) -- C:\Windows\System32\drivers\wacompen.sys [30720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:30:39 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\Windows\System32\drivers\wanarp.sys [92160] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:32 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\Windows\System32\drivers\watchdog.sys [63488] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:54 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) -- C:\Windows\System32\drivers\wcifs.sys [169784] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:29:54 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) -- C:\Windows\System32\drivers\wcnfs.sys [87552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\Windows\System32\drivers\Wdf01000.sys [843496] =>.Microsoft®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\Windows\System32\drivers\WdfLdr.sys [67304] =>.Microsoft®
O58 - SDL:2019/05/17 14:30:11 A . (.Microsoft Corporation - WDI Driver Framework Driver.) -- C:\Windows\System32\drivers\WdiWiFi.sys [807424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:39 A . (.Microsoft Corporation - WDM Companion Filter.) -- C:\Windows\System32\drivers\WdmCompanionFilter.sys [22016] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:46 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\Windows\System32\drivers\werkernel.sys [49976] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:27 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\Windows\System32\drivers\wfplwfs.sys [179728] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:42 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\Windows\System32\drivers\wimmount.sys [36664] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:31 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) -- C:\Windows\System32\drivers\WindowsTrustedRT.sys [74424] =>.Microsoft®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) -- C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys [17896] =>.Microsoft®
O58 - SDL:2018/09/15 08:29:24 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\Windows\System32\drivers\winhv.sys [32568] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:29:13 A . (.Microsoft Corporation - Windows Hypervisor Root Interface Driver.) -- C:\Windows\System32\drivers\winhvr.sys [86328] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:18 A . (.Mellanox - Kernel WinMad.) -- C:\Windows\System32\drivers\winmad.sys [37688] =>.Microsoft Windows®
O58 - SDL:2019/05/27 09:32:32 A . (.Microsoft Corporation - Pilote NAT Windows.) -- C:\Windows\System32\drivers\winnat.sys [240128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/17 14:29:54 A . (.Microsoft Corporation - Windows QUIC Driver.) -- C:\Windows\System32\drivers\winquic.sys [156984] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:19 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\Windows\System32\drivers\winusb.sys [95744] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:18 A . (.Mellanox - Kernel WinVerbs.) -- C:\Windows\System32\drivers\winverbs.sys [77856] =>.Microsoft Windows®
O58 - SDL:2020/06/08 07:59:28 A . (.HP - HP Wireless Button Driver.) -- C:\Windows\System32\drivers\WirelessButtonDriver64.sys [35392] =>.HP Inc.®
O58 - SDL:2018/09/15 08:28:18 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\Windows\System32\drivers\wmiacpi.sys [19456] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:45 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\Windows\System32\drivers\wmilib.sys [20480] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:42 A . (.Microsoft Corporation - Filtre de superposition Windows.) -- C:\Windows\System32\drivers\wof.sys [224056] =>.Microsoft Windows®
O58 - SDL:2018/09/15 17:46:15 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\Windows\System32\drivers\WpdUpFltr.sys [30008] =>.Microsoft Windows®
O58 - SDL:2019/05/17 14:30:33 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\Windows\System32\drivers\WppRecorder.sys [39736] =>.Microsoft Windows®
O58 - SDL:2018/09/15 08:28:26 A . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\Windows\System32\drivers\ws2ifsl.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\Windows\System32\drivers\WUDFPf.sys [134656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:52 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\Windows\System32\drivers\WUDFRd.sys [282112] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - Game Input Protocol Driver.) -- C:\Windows\System32\drivers\xboxgip.sys [317440] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:15 A . (.Microsoft Corporation - XINPUT filter driver for HID.) -- C:\Windows\System32\drivers\xinputhid.sys [48128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:39 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\Windows\System32\win32k.sys [543744] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:37 A . (.Microsoft Corporation - Pilote du noyau Base Win32k.) -- C:\Windows\System32\win32kbase.sys [2421760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:40 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\Windows\System32\win32kfull.sys [3637248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:28:38 A . (.Microsoft Corporation - Win32k non session driver.) -- C:\Windows\System32\win32kns.sys [17920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2018/09/15 08:29:05 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\Windows\SysWOW64\win32k.sys [320000] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/05/27 09:32:32 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\Windows\SysWOW64\win32kfull.sys [2707968] [Unsigned] =>.Microsoft Corporation

---\\ DERNIERS FICHIERS MODIFIÉS OU CRÉÉS (Utilisateur) (3) - 21s
O61 - LFC: 2020/10/24 14:33:12 A . (..) -- C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\u4wugqu4.hd0\b360064\amdkmdag.sys [10915562] [Unsigned]
O61 - LFC: 2020/10/25 13:49:39 A . (..) -- C:\Users\admin\Downloads\Apache_OpenOffice_4.1.7_Win_x86_install_fr.exe [132856894] [Unsigned]
O61 - LFC: 2020/10/26 23:50:45 A . (..) -- C:\Users\admin\Downloads\k-gratuit.exe [1269760] [Unsigned]

---\\ ASSOCIATION Shell Spawning (10) - 3s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value

---\\ MENU DE DÉMARRAGE INTERNET (8) - 4s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\Windows\System32\ie4ushowIE.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\Windows\System32\ie4ushowIE.exe =>.Microsoft Corporation

---\\ RECHERCHE D'INFECTION SUR NAVIGATEURS (2) - 32s
O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ ÉNUMÈRE LES SERVICES DÉMARRÉS PAR Svchost (49) - 33s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [192512] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [192512] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [279040] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1280000] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [1058304] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [833024] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [31232] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [151552] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [110080] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [872448] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [228352] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [469504] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [478208] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [122368] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [270336] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [1671680] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Fournit une prise en charge de l'infrastruc.) -- C:\Windows\System32\LanguageOverlayServer.dll [312320] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [223744] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1265152] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [949248] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - DLL du Service de gestion de Windows.) -- C:\Windows\System32\Windows.Management.Service.dll [370176] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Broker à jetons.) -- C:\Windows\System32\TokenBroker.dll [1462272] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Moniteur infrarouge.) -- C:\Windows\System32\irmon.dll [24576] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [104448] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [927232] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [500736] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [73728] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [629760] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [310784] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2999808] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1388032] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [616448] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [58368] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\Windows\System32\flightsettings.dll [889344] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\Windows\System32\WpnService.dll [255488] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [2185728] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1228800] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\Windows\System32\usocore.dll [887808] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [332800] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\Windows\System32\NaturalAuth.dll [833024] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [67584] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [240128] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [169984] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [176640] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [72704] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [1049600] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1255936] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [198656] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [454144] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES EXCEPTIONS PAREFEU WINDOWS (4) - 4s
O87 - FAEL: "{A6EFBB3E-6B02-4147-AF5C-48B8D1962064}" [In-None-P6-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O87 - FAEL: "{615F08AD-AE26-4B75-9FC4-6BECA32D7B3E}" [In-None-P17-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O87 - FAEL: "{985B6E45-7068-41EA-83B3-947FE573593E}" [In-None-P6-TRUE] .(.TMRG, Inc. - Relevant-Knowledge.) -- C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge
O87 - FAEL: "{0EC37F85-AC39-46CF-9D6F-93673BF3AFD1}" [In-None-P17-TRUE] .(.TMRG, Inc. - Relevant-Knowledge.) -- C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe {36EC9BFE7DCD0284DB79D2D85BE694CF}. =>PUP.Optional.RelevantKnowledge

---\\ CODES PRODUITS LOGICIELS (10) - 1s
O90 - PUC: "00006109C80000000000000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Extensibility Component.) =>.Microsoft Corporation
O90 - PUC: "00006109C800C0400000000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Localization Component.) =>.Microsoft Corporation
O90 - PUC: "00006109DD0000000100000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Extensibility Component 64-bit Registration.) =>.Microsoft Corporation
O90 - PUC: "00006109F80000000100000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Licensing Component.) =>.Microsoft Corporation
O90 - PUC: "3AD6B6A290A00E34BB1F0B6ADEEB7E97" [HKLM] . (.HP Support Solutions Framework.) -- C:\Windows\Installer\{2A6B6DA3-0A09-43E0-BBF1-B0A6EDBEE779}\icon.ico =>.Hewlett-Packard
O90 - PUC: "51E869650B9ED234BB1E3D30DB51C7A5" [HKLM] . (.Microsoft Update Health Tools.) =>.Microsoft Corporation
O90 - PUC: "67D6ECF5CD5FBA732B8B22BAC8DE1B4D" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161.) =>.bl.org
O90 - PUC: "6E815EB96CCE9A53884E7857C57002F0" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161.) =>.bl.org
O90 - PUC: "9882229AADC1DB241BB111E3C7191C7C" [HKLM] . (.OpenOffice 4.1.7.) -- C:\Windows\Installer\{A9222889-1CDA-42BD-B11B-113E7C91C1C7}\soffice.ico =>.Open Source
O90 - PUC: "C16ACE45EA383EE49A7F4818553A3368" [HKLM] . (.HP Support Assistant.) -- C:\Windows\Installer\{54ECA61C-83AE-4EE3-A9F7-848155A33386}\ARPPRODUCTICON.exe =>.Hewlett-Packard

---\\ PACKAGES WINDOWS INSTALLER (3) - 2s
[MD5.52E471C6CA24D7253D867E4AA1EEF31F] [WIS][2019/09/04 02:09:54] (.OpenOffice - OpenOffice 4.1.7.) -- C:\Windows\Installer\19d321.msi [2469888] =>.OpenOffice
[MD5.929864E5BA2BC7E3F666E44D5134FCB5] [WIS][2020/10/26 22:50:00] (.HP Inc. - HP Support Solutions Framework.) -- C:\Windows\Installer\b26ed.msi [10629120] =>.HP Inc.
[MD5.A967CA3AE2B2E0C20340A8BE8E5EDCD8] [WIS][2020/10/26 22:51:12] (.HP Inc. - HP Support Assistant.) -- C:\Windows\Installer\b26f0.msi [24603136] =>.HP Inc.

---\\ FEATURE CONTROL. (207) - 3s
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:msoasb.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:devenv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:mspub.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:powerpnt.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:onenote.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:msaccess.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:powerpnt.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:mspub.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:powerpnt.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:onenote.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:msoasb.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:msaccess.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:LICLUA.EXE =>.Legitimate

---\\ OBSERVATEURS des évènements (83) - 115s

Application.Warning: Microsoft-Windows-Perflib (24)
~Numéro: 2729
~Date: 10/28/2020 07:29:14 PM
~ID: 1008
~Description: La procédure d'ouverture pour le service « %1 » dans la DLL « %2 » a échoué avec le code d'erreur %3. Les données de performances pour ce service ne sont pas disponibles.
~Suggestion: Rechercher le concerné et décocher «Compteurs de performances activés».

Application.Error: PerfNet (4)
~Numéro: 2723
~ID: 2004
~Description:
~Suggestion: Aucune

Application.Error: Software Protection Platform Service (105)
~Numéro: 2715
~Date: 10/28/2020 07:26:04 PM
~ID: 8198
~Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant : hr=0xC004F074 Arguments de la ligne de commande : RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de

Application.Error: MsiInstaller (1)
~Numéro: 1259
~Date: 10/24/2020 05:48:17 PM
~ID: 10005
~Description: Produit : Windows Defender -- Vous n'avez pas besoin d'installer ce logiciel car Windows Defender est inclus avec Windows Vista. Vous pouvez accéder à Windows Defender à partir de la section Sécurité du Panneau de Configuration Windows.

Application.Error: SideBySide (34)
~Numéro: 1104
~Date: 10/24/2020 03:57:08 PM
~ID: 35
~Description: La création du contexte d’activation a échoué pour « %11 ». Erreur dans le fichier de manifeste ou de stratégie « %12 » à la ligne %13. L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé. La référence est
~Suggestion: Ces erreurs peuvent généralement être ignorées

Application.Warning: Microsoft-Windows-User Profiles Service (3)
~Numéro: 520
~Date: 10/24/2020 01:35:44 PM
~ID: 1534
~Description: Échec de la notification du profil de l’événement %1 pour le composant %2. Le code d’erreur est %3.
~Suggestion: https://www.ghacks.net/2018/12/29/windows-10-user-profile-service-event-id-1534-warnings/

System.Warning: Microsoft-Windows-Kernel-Processor-Power (11)
~Numéro: 2575
~Date: 10/28/2020 07:50:40 PM
~ID: 37
~Description: La vitesse du processeur logique Hyper-V %2 est limitée par le microprogramme du système. Le processeur a connu cet état de performances réduites pendant %3 secondes depuis le dernier rapport.

System.Error: DCOM (98)
~Numéro: 2573
~Date: 10/28/2020 07:34:31 PM
~ID: 10016
~Description: propres à l’applicationLocalActivation{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}{15C20B67-12E7-4BB6-92BB-7AFF07997402}DESKTOP-OEDBSQJadminS-1-5-21-100840001-1542088837-3273673715-1001LocalHost (avec LRPC)Non disponibleNon disponible
~Suggestion: Vérifier les autorisations pour l'accès DCOM

System.Error: Service Control Manager (24)
~Numéro: 2554
~Date: 10/28/2020 07:24:50 PM
~ID: 7000
~Description: Le service %1 n’a pas pu démarrer en raison de l’erreur : %%2

System.Error: EventLog (4)
~Numéro: 2531
~Date: 10/28/2020 07:24:49 PM
~ID: 6008
~Description: L’arrêt système précédant à %1 le %2 n’était pas prévu.

System.Warning: Microsoft-Windows-WLAN-AutoConfig (22)
~Numéro: 2373
~Date: 10/26/2020 11:22:03 PM
~ID: 10002
~Description: Le module d’extensibilité WLAN s’est arrêté. Chemin d’accès du module : C:\Windows\system32\Rtlihvs.dll
~Suggestion: 1)Désactivez/Réactiver la connexion réseau sans fil. ou 2) Redémarrer le service WLAN AutoConfig

System.Warning: Microsoft-Windows-DNS-Client (34)
~Numéro: 2231
~Date: 10/26/2020 10:41:37 PM
~ID: 1014
~Description: La résolution du nom %1 a expiré lorsqu’aucun des serveurs DNS configurés n’a répondu.
~Suggestion: https://social.technet.microsoft.com/wiki/contents/articles/3336.event-id-1014-microsoft-windows-dns-client.aspx

System.Error: Microsoft-Windows-WindowsUpdateClient (7)
~Numéro: 783
~Date: 10/24/2020 03:22:15 PM
~ID: 20
~Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur %1 : %2.
~Suggestion: http://kb.eventtracker.com/evtpass/evtpages/EventId_20_Microsoft-Windows-WindowsUpdateClient_63351.asp

System.Warning: BTHUSB (5)
~Numéro: 316
~Date: 10/24/2020 01:48:53 PM
~ID: 34
~Description: La carte locale ne prend pas en charge un état de contrôleur Low Energy important pour la prise en charge du mode périphérique. Le masque d’état pris en charge requis au minimum est %2, a reçu %3. La fonctionnalité du rôle périphérique Low Energy n

System.Warning: Microsoft-Windows-Time-Service (2)
~Numéro: 133
~Date: 10/24/2020 01:29:55 PM
~ID: 134
~Description: NtpClient n'a pas pu définir d'homologue manuel utilisable comme source de temps en raison d'une erreur de résolution DNS sur "%3". NtpClient réessaiera dans %2 minutes, puis doublera l'intervalle d'attente pour les tentatives suivantes. L'erreur éta
~Suggestion: Resynchroniser le client avec l'homologue de source de temps

---\\ SCAN ADDITIONNEL (20) - 31s
C:\Program Files (x86)\RelevantKnowledge\rlservice.exe =>PUP.Optional.RelevantKnowledge
C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe =>PUP.Optional.RelevantKnowledge
C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe =>PUP.Optional.RelevantKnowledge
C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe =>PUP.Optional.RelevantKnowledge
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} =>PUP.Optional.RelevantKnowledge
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} =>PUP.Optional.RelevantKnowledge
C:\Program Files (x86)\RelevantKnowledge =>PUP.Optional.RelevantKnowledge
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge =>PUP.Optional.RelevantKnowledge
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{985B6E45-7068-41EA-83B3-947FE573593E} =>PUP.Optional.RelevantKnowledge
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{0EC37F85-AC39-46CF-9D6F-93673BF3AFD1} =>PUP.Optional.RelevantKnowledge
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Logiciels\DriverEasy\App\DriverEasy\DriverEasy.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Logiciels\DriverEasy\App\DriverEasy\DriverEasy.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\StartIsBack\StartIsBackCfg.exe.FriendlyAppName =>.Unsigned
[HKU\S-1-5-21-100840001-1542088837-3273673715-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Logiciels\DriverEasy\App\DriverEasy\DriverEasy.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-100840001-1542088837-3273673715-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:E:\Logiciels\DriverEasy\App\DriverEasy\DriverEasy.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-100840001-1542088837-3273673715-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\StartIsBack\StartIsBackCfg.exe.FriendlyAppName =>.Unsigned

---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS (5) - 0s
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/10/27/adware-relevantknowledge/ =>PUP.Optional.RelevantKnowledge
https://nicolascoolman.eu/forum/Topic/warning-eventlogapp-evenement-dapplication/ =>Warning.EventLogApp
https://nicolascoolman.eu/forum/Topic/warning-eventlogsys-evenement-systeme/ =>Warning.EventLogSys
https://nicolascoolman.eu/forum/Topic/orphan-muicache-logiciel-potentiellement-superflu-lps/ =>.SUP.Orphan.MUICache

---\\ NUMEROS DE SÉRIE
[01738D40BC79777D20399E29BBC914E0] [07/06/2018] (.HP Inc..) - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe =>.HP Inc.
[045D9B6716C516EF45A1216DFD9F3060] [23/04/2020] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp.
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2tycvv3x.04g\syncom.dll =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2tycvv3x.04g\synrmihiduwp.sys =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2tycvv3x.04g\syntpapi.dll =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2tycvv3x.04g\syntpenhservice.exe =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2tycvv3x.04g\syntpres.dll =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2tycvv3x.04g\syntpuwp.sys =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2tycvv3x.04g\synuwpenh.exe =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Windows\System32\drivers\SynTP.sys =>.Synaptics Incorporated
[04DC4A9C3993F2DA716D7302FF1DB0BE] [24/10/2020] (.Synaptics Incorporated.) - C:\Windows\System32\SynTPEnhService.exe =>.Synaptics Incorporated
[04DF4D56733AE38D598EA004DD2D9C51] [23/04/2020] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [23/04/2020] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [23/04/2020] (.Realtek Semiconductor Corp..) - C:\Windows\System32\drivers\RTKVHD64.sys =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [24/10/2020] (.Realtek Semiconductor Corp..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\beklc1ym.22h\rt640x64.sys =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [24/10/2020] (.Realtek Semiconductor Corp..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\garuwbxh.sbn\rtwlane.sys =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [24/10/2020] (.Realtek Semiconductor Corp..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\rbakzcds.uuj\rtkbtfilter.sys =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [24/10/2020] (.Realtek Semiconductor Corp..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\rbakzcds.uuj\rtkbtmanserv.exe =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [24/10/2020] (.Realtek Semiconductor Corp..) - C:\Windows\System32\drivers\rt640x64.sys =>.Realtek Semiconductor Corp.
[04DF4D56733AE38D598EA004DD2D9C51] [24/10/2020] (.Realtek Semiconductor Corp..) - C:\Windows\System32\drivers\rtwlane.sys =>.Realtek Semiconductor Corp.
[04F942C68E5028A4346758EC406E21E1] [08/06/2020] (.HP Inc..) - C:\Windows\System32\drivers\WirelessButtonDriver64.sys =>.HP Inc.
[05488AD7E4BABA7F93E3323C0573BF3C] [24/10/2020] (.Brave Software, Inc..) - C:\Users\admin\Downloads\BraveBrowserSetup-CLU884.exe =>.Brave Software, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [18/09/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atieclxx.exe =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [18/09/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [18/09/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmdag.sys =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [18/09/2019] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atikmpag.sys =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\0hmkuxl3.f5p\amdpsp.sys =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\0hmkuxl3.f5p\amdtee_api32.dll =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\0hmkuxl3.f5p\amdtee_api64.dll =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\0hmkuxl3.f5p\t-base_client_api32.dll =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\0hmkuxl3.f5p\t-base_client_api64.dll =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\0hmkuxl3.f5p\tbaseregistry32.dll =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\0hmkuxl3.f5p\tbaseregistry64.dll =>.Advanced Micro Devices, Inc.
[07EC0CF3D333673B2602D410FE0C4D21] [24/10/2020] (.Advanced Micro Devices, Inc..) - C:\Windows\System32\drivers\amdpsp.sys =>.Advanced Micro Devices, Inc.
[0BDDF4F265BA98E991DF246947CF3303] [20/08/2020] (.HP Inc..) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe =>.HP Inc.
[0BDDF4F265BA98E991DF246947CF3303] [20/08/2020] (.HP Inc..) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe =>.HP Inc.
[0BDDF4F265BA98E991DF246947CF3303] [20/08/2020] (.HP Inc..) - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe =>.HP Inc.
[0BDDF4F265BA98E991DF246947CF3303] [26/10/2020] (.HP Inc..) - C:\Users\admin\Downloads\HPSupportSolutionsFramework-12.18.34.21.exe =>.HP Inc.
[0C15BE4A15BB0903C901B1D6C265302F] [24/10/2020] (.Google LLC.) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\gmp-widevinecdm\4.10.1582.2\widevinecdm.dll =>.Google LLC
[0C5396DCB2949C70FAC48AB08A07338E] [24/10/2020] (.Mozilla Corporation.) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\na8tb9ey.default-release\gmp-gmpopenh264\1.8.1.1\gmpopenh264.dll =>.Mozilla Corporation
[0C5C0E0CE7B1E885002D06E13639C4CE] [24/10/2020] (.Avast Software s.r.o..) - C:\Users\admin\Downloads\avast_free_antivirus_setup_online.exe =>.Avast Software s.r.o.
[0DDEB53F957337FBEAF98C4A615B149D] [14/10/2020] (.Mozilla Corporation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation
[0DDEB53F957337FBEAF98C4A615B149D] [14/10/2020] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation
[0DDEB53F957337FBEAF98C4A615B149D] [14/10/2020] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
[0DDEB53F957337FBEAF98C4A615B149D] [24/10/2020] (.Mozilla Corporation.) - C:\Users\admin\Downloads\Firefox Installer - Copie.exe =>.Mozilla Corporation
[0DDEB53F957337FBEAF98C4A615B149D] [24/10/2020] (.Mozilla Corporation.) - C:\Users\admin\Downloads\Firefox Installer.exe =>.Mozilla Corporation
[14132C0D4EB5B05136776AA70136F50B] [02/10/2020] (.FUJITSU LIMITED.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\bo1qmh05.xsf\fuj02e3.sys =>.Not verified
[14132C0D4EB5B05136776AA70136F50B] [02/10/2020] (.FUJITSU LIMITED.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\bo1qmh05.xsf\fuj02e3-utility.dll =>.Not verified
[14132C0D4EB5B05136776AA70136F50B] [03/10/2020] (.FUJITSU LIMITED.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\5cvcrjpg.ug1\fuj02e3.sys =>.Not verified
[14132C0D4EB5B05136776AA70136F50B] [03/10/2020] (.FUJITSU LIMITED.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\5cvcrjpg.ug1\fuj02e3-utility.dll =>.Not verified
[36EC9BFE7DCD0284DB79D2D85BE694CF] [10/04/2020] (.TMRG, Inc..) - C:\Program Files (x86)\RelevantKnowledge\rlservice.exe =>.Not verified
[36EC9BFE7DCD0284DB79D2D85BE694CF] [10/04/2020] (.TMRG, Inc..) - C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe =>.Not verified
[36EC9BFE7DCD0284DB79D2D85BE694CF] [10/04/2020] (.TMRG, Inc..) - C:\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe =>.Not verified
[36EC9BFE7DCD0284DB79D2D85BE694CF] [10/04/2020] (.TMRG, Inc..) - C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe =>.Not verified
[470F76D35837A1ADDCC5FFA3085A6FC2] [24/10/2020] (.Hewlett-Packard Company.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\xu1flhos.ttt\hpqkbfiltr64.sys =>.Hewlett-Packard Company
[470F76D35837A1ADDCC5FFA3085A6FC2] [24/10/2020] (.Hewlett-Packard Company.) - C:\Windows\System32\drivers\HpqKbFiltr64.sys =>.Hewlett-Packard Company
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\ace.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\comeventhandler.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\configurator.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\eventmanager.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\fwupdatelib_10.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\fwupdatelib_11.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\fwupdatelib_12.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\gmscommon.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\historyeventhandler.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\hostchangesnotificationservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\iprefreshservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\lms.exe =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\partialfwupdateservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\portforwardingservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\poweroperationsservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\sharedstaticipservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\statuseventhandler.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\timesyncservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\wifiprofilesyncservice.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\winlogeventhandler.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\wmieventhandler.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[560000082B1E36C56B00276A8A00000000082B] [15/10/2020] (.Intel(R) Embedded Subsystems and IP Blocks Group.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\b0euq1r3.hz5\wsmanclient.dll =>.Intel(R) Embedded Subsystems and IP Blocks Group
[5600000BF5F350B283A372355D000000000BF5] [15/10/2020] (.Intel(R) Wireless Connectivity Solutions.) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\lcolcyhw.or5\ibtusb.sys =>.Intel(R) Wireless Connectivity Solutions
[5CA430E4777412A8230BF839F782D4F7] [24/10/2020] (.Advanced Micro Devices Inc..) - C:\Users\admin\AppData\Roaming\Easeware\DriverEasy\drivers\2ibar4ho.tis\x64\amdas4.sys =>.Advanced Micro Devices Inc.
[5CA430E4777412A8230BF839F782D4F7] [24/10/2020] (.Advanced Micro Devices Inc..) - C:\Windows\System32\drivers\AmdAS4.sys =>.Advanced Micro Devices Inc.
[6E32622CCC5180193BCF00D0B86D134B] [25/03/2019] (.Synaptics Incorporated.) - C:\Windows\System32\drivers\Smb_driver_AMDASF.sys =>.Synaptics Incorporated
[71C3E6C67B8CE54FC3DC14A5EFA1FA04] [24/10/2020] (.Stanislav Zinukhov.) - C:\Users\admin\Downloads\StartIsBackPlusPlus_setup.exe =>.Not verified
[754020F5FC0992BA4DAD6BF986E5C1D7] [30/11/2019] (.WDKTestCert VSAuto,131800073559665678.) - C:\Windows\System32\drivers\RtkBtfilter.sys =>.WDKTestCert VSAuto,131800073559665678
[7625A59EA40A7E7B913F910723328E26] [25/06/2020] (.win.rar GmbH.) - C:\Program Files\WinRAR\Rar.exe =>.win.rar GmbH
[7625A59EA40A7E7B913F910723328E26] [25/06/2020] (.win.rar GmbH.) - C:\Program Files\WinRAR\RarExt.dll =>.win.rar GmbH
[7625A59EA40A7E7B913F910723328E26] [25/06/2020] (.win.rar GmbH.) - C:\Program Files\WinRAR\uninstall.exe =>.win.rar GmbH

~ Unselected Options:
~ End of the scan, 7098 items in 19mn16s (1626)(0)