Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 01-12-2021
Exécuté par Admin (administrateur) sur BOULAID (HP HP Laptop 15-da0xxx) (05-12-2021 13:38:09)
Exécuté depuis C:\Users\Admin\Downloads\Programs
Profils chargés: Admin & DefaultAppPool
Plate-forme: Microsoft Windows 11 Professionnel Version 21H2 22000.318 (X64) Langue: Russe (Russie) -> Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

() [Fichier non signé] C:\Users\Admin\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe
(@ByELDI -> @ByELDI) [Fichier non signé] C:\Program Files\KMSpico\Service_KMS.exe
(AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AOMEI\AOMEI Backupper\6.7.0\ABEventBackup.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Autodesk, Inc. -> Autodesk) [Fichier non signé] C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\11.0.0.4854\AdskLicensingService\AdskLicensingService.exe
(Autodesk, Inc. -> Autodesk, Inc.) [Fichier non signé] C:\Program Files (x86)\Common Files\Autodesk Shared\Network License Manager\adskflex.exe
(BitTorrent Inc -> BitTorrent Inc.) C:\Users\Admin\AppData\Roaming\uTorrent\helper\helper.exe
(BitTorrent Inc -> BitTorrent Inc.) C:\Users\Admin\AppData\Roaming\uTorrent\updates\3.5.5_46096\utorrentie.exe <2>
(BitTorrent Inc -> BitTorrent Inc.) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
(Conexant Systems LLC -> Conexant Systems LLC.) C:\Windows\System32\CxAudioSvc.exe
(Conexant Systems LLC -> Synaptics Incorporated.) C:\Windows\System32\SynAudSrv.exe
(Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Autodesk Shared\Network License Manager\lmgrd.exe <2>
(Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(Gemalto, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe
(Gemalto, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplmv.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <19>
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\IGCC.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_21306a77b30fd6e0\esif_uf.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ba273d0ffb93e225\RstMwService.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_7c484f80872e1cd8\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe <2>
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(Stardock Corporation -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\Groupy\GroupySrv.exe
(STARDOCK SYSTEMS, INC. -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\Groupy\GroupyHelp32.exe
(STARDOCK SYSTEMS, INC. -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\Groupy\GroupyHelp64.exe
(STARDOCK SYSTEMS, INC. -> Starock Software, Inc) C:\Program Files (x86)\Stardock\Groupy\GroupyCtrl.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(Tonec Inc. -> Tonec Inc.) [Fichier non signé] C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\MobileGo\MobileGoService.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.2.223\WsAppService.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe [1253232 2021-03-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [NCH Sync Service] => C:\Users\Admin\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe [904480 2021-11-21] () [Fichier non signé]
HKLM\...\Run: [pac] => C:\Program Files\Autodesk\Personal Accelerator for Revit\RevitAccelerator.exe [221992 2020-12-09] (Autodesk, Inc. -> Autodesk)
HKLM-x32\...\Run: [ABNotify] => C:\Program Files (x86)\AOMEI\AOMEI Backupper\6.7.0\ABEventBackup.exe [367664 2021-10-29] (AOMEI International Network Limited -> AOMEI International Network Limited)
HKLM\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\...\Policies\Explorer: [SettingsPageVisibility] hide:cortana;gaming-broadcasting;gaming-gamebar;gaming-gamedvr;gaming-gamemode;gaming-trueplay;gaming-xboxnetworking;windowsdefender
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [ContentDeliveryAllowed] => reg add HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v ContentDeliveryAllowed /t REG_DWORD /d 0 /f (Pas de fichier) <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [GlobalUserDisabled] => REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" /v "GlobalUserDisabled" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [HttpAcceptLanguageOptOut] => REG ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [] => REG ADD "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /v "" /t REG_SZ /f /d "" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-19\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-20\...\RunOnce: [ContentDeliveryAllowed] => reg add HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v ContentDeliveryAllowed /t REG_DWORD /d 0 /f (Pas de fichier) <==== ATTENTION
HKU\S-1-5-20\...\RunOnce: [GlobalUserDisabled] => REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" /v "GlobalUserDisabled" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-20\...\RunOnce: [HttpAcceptLanguageOptOut] => REG ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-20\...\RunOnce: [] => REG ADD "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /v "" /t REG_SZ /f /d "" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-20\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-654149614-3452267781-3464033471-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [5708200 2021-07-17] (Tonec Inc. -> Tonec Inc.) [Fichier non signé]
HKU\S-1-5-21-654149614-3452267781-3464033471-1001\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-21-654149614-3452267781-3464033471-1001\...\Policies\Explorer: []
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\...\RunOnce: [ContentDeliveryAllowed] => reg add HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v ContentDeliveryAllowed /t REG_DWORD /d 0 /f (Pas de fichier) <==== ATTENTION
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\...\RunOnce: [GlobalUserDisabled] => REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" /v "GlobalUserDisabled" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\...\RunOnce: [HttpAcceptLanguageOptOut] => REG ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\...\RunOnce: [] => REG ADD "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /v "" /t REG_SZ /f /d "" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\...\Policies\Explorer: [NoThumbnailCache] 1
HKU\S-1-5-18\...\RunOnce: [NTLDelay01] => cmd /C del /F "%localappdata%\Microsoft\Windows\WinX\Group3\01 - Windows Terminal.lnk" (Pas de fichier)
HKU\S-1-5-18\...\RunOnce: [NTLDelay02] => cmd /C del /F "%localappdata%\Microsoft\Windows\WinX\Group3\02 - Windows Terminal.lnk" (Pas de fichier)
HKU\S-1-5-18\...\RunOnce: [NTLDelay09] => cmd /C del /F "%localappdata%\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk" (Pas de fichier)
HKU\S-1-5-18\...\RunOnce: [HttpAcceptLanguageOptOut] => REG ADD "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-18\...\RunOnce: [GlobalUserDisabled] => REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" /v "GlobalUserDisabled" /t REG_DWORD /f /d 1 (Pas de fichier) <==== ATTENTION
HKU\S-1-5-18\...\RunOnce: [] => REG ADD "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /v "" /t REG_SZ /f /d "" (Pas de fichier) <==== ATTENTION
HKU\S-1-5-18\...\Policies\Explorer: [NoThumbnailCache] 1
HKLM\...\Windows x64\Print Processors\Canon G3010 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDEI.DLL [482816 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor G3010 series: C:\Windows\system32\CNMLMEI.DLL [1303040 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\96.0.4664.45\Installer\chrmstp.exe [2021-11-16] (Google LLC -> Google LLC)
Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nssyncer.lnk [2021-11-21]
ShortcutTarget: nssyncer.lnk -> C:\Users\Admin\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe () [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MobileGo Service.lnk [2021-11-25]
ShortcutTarget: MobileGo Service.lnk -> C:\Program Files (x86)\Wondershare\MobileGo\MobileGoService.exe (Wondershare Technology Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Téléchargement en arrière-plan de SOLIDWORKS.lnk [2021-11-27]
ShortcutTarget: Téléchargement en arrière-plan de SOLIDWORKS.lnk -> C:\Program Files (x86)\Common Files\Gestionnaire d'installation SOLIDWORKS\BackgroundDownloading\sldBgDwld.exe (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation)
BootExecute:
AlternateShell:
HKU\S-1-5-19\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
HKU\S-1-5-20\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
HKU\S-1-5-21-654149614-3452267781-3464033471-1001\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {00E08B83-77FE-4FEA-8443-878BB6405B4A} - \Microsoft\Windows\LanguageComponentsInstaller\Installation -> Pas de fichier <==== ATTENTION
Task: {038257EC-8B46-47AE-95A7-A72BE792B983} - \Microsoft\Windows\ApplicationData\DsSvcCleanup -> Pas de fichier <==== ATTENTION
Task: {1AA941D9-BB3B-4A82-94EC-CD76649EBEAB} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [745664 2016-01-11] (@ByELDI -> @ByELDI) [Fichier non signé]
Task: {2690F332-B849-4BEC-8C6A-EC72EC2A7125} - \Microsoft\Windows\Flighting\FeatureConfig\UsageDataFlushing -> Pas de fichier <==== ATTENTION
Task: {2D1BC790-57BA-4978-915D-BBF53CE5142D} - \Microsoft\Windows\Management\Provisioning\Logon -> Pas de fichier <==== ATTENTION
Task: {2DAF43B0-84C5-4EC6-BB68-AFA39B7DF7A5} - \Microsoft\Windows\LanguageComponentsInstaller\ReconcileLanguageResources -> Pas de fichier <==== ATTENTION
Task: {3A6A7DDB-CDE2-42F6-BF80-E4DFD511CAC9} - \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector -> Pas de fichier <==== ATTENTION
Task: {400A6A02-F9DD-4D1E-9B7D-3716EE90042A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-16] (Google LLC -> Google LLC)
Task: {4D0020E3-FAB4-4B3A-918C-2480CC374B93} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2021-04-01] (HP Inc. -> HP Inc.)
Task: {8CA4753A-1356-467C-8DE9-3958E2B7746B} - \Microsoft\Windows\Flighting\FeatureConfig\UsageDataReporting -> Pas de fichier <==== ATTENTION
Task: {95B5E97E-7F29-4D16-8A76-04A666F1489E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-16] (Google LLC -> Google LLC)
Task: {B38FCC52-5CD0-4BE2-9E70-9A78B5662E0A} - \Microsoft\Windows\Shell\IndexerAutomaticMaintenance -> Pas de fichier <==== ATTENTION
Task: {BDBAB64A-B17B-4E55-B1D8-C597A0A535DD} - \Microsoft\Windows\Management\Provisioning\Cellular -> Pas de fichier <==== ATTENTION
Task: {C526A43E-83DD-411E-AE12-8899731EB8EA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22654872 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {CBFE1BDB-B92C-4849-B10A-61D761C0E27A} - \Microsoft\Windows\Diagnosis\Scheduled -> Pas de fichier <==== ATTENTION
Task: {DC99811A-2964-4C91-8856-E89A1FF8798E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8314824 2021-12-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {DCEF8957-95C6-4E70-821C-5B6F9692C674} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138600 2021-12-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {E00A76A6-1A00-49C4-A7B7-EA7B524F1F0B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {E71A5771-4629-45D0-8452-388F928C3C21} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138600 2021-12-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {E9B3AB08-830F-4BE3-A1B1-F5D6062FF985} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22654872 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {F160B865-EF84-4463-8C54-6689028291AD} - \Microsoft\Windows\Speech\SpeechModelDownloadTask -> Pas de fichier <==== ATTENTION
Task: {FBDDF612-0E91-43BA-B79D-5DFE370405CA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8314824 2021-12-01] (Microsoft Corporation -> Microsoft Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 41.214.140.4 41.214.140.5 8.8.8.8
Tcpip\..\Interfaces\{b59c1c8c-9145-488c-9ee3-4ef69f1f66aa}: [DhcpNameServer] 41.214.140.4 41.214.140.5 8.8.8.8
HKU\S-1-5-19\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-20\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-654149614-3452267781-3464033471-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default [2021-12-05]
Edge HomePage: Default -> hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
Edge Extension: (IDM Integration Module) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2021-12-04]
Edge HKU\S-1-5-21-654149614-3452267781-3464033471-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2021-07-17]

FireFox:
========
FF HKU\S-1-5-21-654149614-3452267781-3464033471-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Admin\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Admin\AppData\Roaming\IDM\idmmzcc5 [2021-11-26] [] [non signé]
FF HKU\S-1-5-21-654149614-3452267781-3464033471-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-30] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-12-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-12-01] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2021-12-05]
CHR DownloadDir: G:\telechargements
CHR Notifications: Default -> hxxps://drive.google.com; hxxps://www.4shared.com; hxxps://www.fshare.vn; hxxps://www.passfab.com
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxp://www.google.com/"
CHR Extension: (Google Traduction) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2021-11-22]
CHR Extension: (Slides) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-16]
CHR Extension: (Safe Torrent Scanner) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2021-11-24]
CHR Extension: (Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-16]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-16]
CHR Extension: (Turn Off the Lights) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2021-11-22]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-16]
CHR Extension: (Sticky Password gestionnaire de mots de passe) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnfdmghkeppfadphbnkjcicejfepnbfe [2021-11-22]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-11-24]
CHR Extension: (uBlock Origin) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-12-04]
CHR Extension: (Sheets) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-16]
CHR Extension: (Google Docs hors connexion) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-12-01]
CHR Extension: (Royal Passwords) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcdciaadmcjmabbgkfboeocgiicphkpf [2021-11-22]
CHR Extension: (Google Play) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2021-11-22]
CHR Extension: (internet-start.net) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\llcdellnofncikmhimjdbkdjgpmcjbik [2021-11-22]
CHR Extension: (IDM Integration Module) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2021-11-26]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-16]
CHR Extension: (start.xyz - Video Backgrounds) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\oodpgglcmckddcmghkdfdfoepibmgigp [2021-11-22]
CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-16]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-07-17]
CHR HKU\S-1-5-21-654149614-3452267781-3464033471-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-07-17]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2021-07-17]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [18673448 2021-03-29] (Autodesk, Inc. -> Autodesk) [Fichier non signé]
R2 AdskNLM; C:\Program Files (x86)\Common Files\Autodesk Shared\Network License Manager\lmgrd.exe [1201488 2021-02-24] (Flexera Software LLC -> Flexera)
U2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\6.7.0\ABService.exe [1080368 2021-10-29] (AOMEI International Network Limited -> AOMEI International Network Limited)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12034464 2021-11-04] (Microsoft Corporation -> Microsoft Corporation)
S3 EPLAN Client Service; C:\Program Files\EPLAN\Common\EClientService.exe [7715336 2021-11-29] (EPLAN Software & Service GmbH & Co. KG -> EPLAN Software & Service GmbH & Co. KG)
R2 Groupy; C:\Program Files (x86)\Stardock\Groupy\GroupySrv.exe [229776 2021-08-27] (Stardock Corporation -> Stardock Software, Inc)
R2 hasplms; C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe [7619592 2019-12-25] (Gemalto, Inc. -> SafeNet, Inc.)
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [755704 2021-09-23] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [754184 2021-09-23] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [751104 2021-09-23] (HP Inc. -> HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [403576 2021-04-01] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [754688 2021-09-23] (HP Inc. -> HP Inc.)
S2 MSSQL$TEW_SQLEXPRESS; C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\sqlservr.exe [372512 2018-09-07] (Microsoft Corporation -> Microsoft Corporation)
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [745664 2016-01-11] (@ByELDI -> @ByELDI) [Fichier non signé]
S4 SQLAgent$TEW_SQLEXPRESS; C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613152 2018-09-07] (Microsoft Corporation -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\Windows\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.2.223\WsAppService.exe [473312 2017-03-20] (Wondershare Technology Co.,Ltd -> Wondershare)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\MobileGo\DriverInstall.exe [101152 2017-06-01] (Wondershare Technology Co.,Ltd -> Wondershare)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 aksdf; C:\Windows\system32\drivers\aksdf.sys [389560 2019-12-25] (Gemalto, Inc. -> SafeNet, Inc.)
R2 aksfridge; C:\Windows\system32\drivers\aksfridge.sys [510800 2019-12-25] (Gemalto, Inc. -> SafeNet, Inc.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-21] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [32176 2021-11-26] (AOMEI International Network Limited -> )
S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [1970104 2019-12-25] (Gemalto, Inc. -> SafeNet, Inc.)
S4 RsFx0321; C:\Windows\System32\DRIVERS\RsFx0321.sys [258720 2018-07-25] (Microsoft Corporation -> Microsoft Corporation)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_d2a498d51a4f7bec\rtcx21x64.sys [409000 2021-06-01] (Realtek Semiconductor Corp. -> Realtek)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\Windows\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> )
R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [36760 2021-09-13] (HP Inc. -> HP)
U4 WinDefend; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-12-05 13:37 - 2021-12-05 13:38 - 000000000 ____D C:\FRST
2021-12-05 13:34 - 2021-12-05 13:37 - 000001621 _____ C:\Users\Admin\Desktop\FRST64.lnk
2021-12-05 13:11 - 2021-12-04 18:26 - 000095744 _____ C:\Windows\womtrust.dll.BAK
2021-12-05 13:11 - 2021-12-04 18:26 - 000081408 _____ C:\Windows\wontrust.dll.BAK
2021-12-05 13:08 - 2021-12-05 13:08 - 000000000 ____D C:\Users\Public\Documents\Stardock
2021-12-05 12:59 - 2021-12-05 13:23 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\uTorrent
2021-12-05 12:46 - 2021-12-05 12:49 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2021-12-05 11:01 - 2021-12-05 11:01 - 000000000 ___HD C:\$WinREAgent
2021-12-05 00:20 - 2021-12-05 00:20 - 000089428 _____ C:\Users\Admin\Desktop\DxDiag.txt
2021-12-04 23:50 - 2021-12-04 23:50 - 000002659 _____ C:\Users\Public\Desktop\SEE Electrical Building Freeware.lnk
2021-12-04 23:50 - 2021-12-04 23:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEE Electrical Building Freeware
2021-12-04 22:21 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5015.ini
2021-12-04 22:21 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5012.ini
2021-12-04 22:21 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5011.ini
2021-12-04 22:21 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5010.ini
2021-12-04 22:21 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5009.ini
2021-12-04 22:21 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_1500.ini
2021-12-04 22:21 - 2021-12-04 22:21 - 000000016 _____ C:\ProgramData\mntemp
2021-12-04 22:19 - 2021-12-04 22:19 - 000002229 _____ C:\Users\Public\Desktop\SEE Electrical V8R2.lnk
2021-12-04 22:19 - 2021-12-04 22:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEE Electrical V8R2
2021-12-04 22:19 - 2019-12-25 12:03 - 000510800 _____ (SafeNet, Inc.) C:\Windows\system32\Drivers\aksfridge.sys
2021-12-04 22:19 - 2019-12-25 12:03 - 000389560 _____ (SafeNet, Inc.) C:\Windows\system32\Drivers\aksdf.sys
2021-12-04 22:18 - 2021-12-04 23:50 - 000000000 ____D C:\Program Files (x86)\IGE+XAO
2021-12-04 22:18 - 2021-12-04 22:18 - 000000000 ____D C:\Users\Public\Documents\IGE+XAO
2021-12-04 22:18 - 2021-12-04 22:18 - 000000000 ____D C:\ProgramData\IGE+XAO
2021-12-04 22:18 - 2021-12-04 22:18 - 000000000 ____D C:\ProgramData\Downloaded Installations
2021-12-04 20:54 - 2021-12-04 22:16 - 000000000 ____D C:\Users\Admin\Downloads\Compressed
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5006.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5005.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5004.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5002.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_5001.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_1100.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_1010.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_1001.ini
2021-12-04 20:33 - 2021-12-05 01:04 - 000001764 _____ C:\ProgramData\SEE_1000.ini
2021-12-04 20:33 - 2021-12-04 22:21 - 000030848 _____ C:\ProgramData\CAEManager.lcs
2021-12-04 20:33 - 2021-12-04 20:33 - 000001764 _____ C:\ProgramData\SEE_5008.ini
2021-12-04 20:31 - 2019-12-25 12:03 - 001970104 _____ (SafeNet, Inc.) C:\Windows\system32\Drivers\hardlock.sys
2021-12-04 20:31 - 2019-12-25 12:03 - 000206800 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\SysWOW64\hlvdd.dll
2021-12-04 18:26 - 2021-12-05 13:11 - 000095744 _____ C:\Windows\womtrust.dll
2021-12-04 18:26 - 2021-12-05 13:11 - 000081408 _____ C:\Windows\wontrust.dll
2021-12-04 18:23 - 2021-12-05 13:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
2021-12-04 18:23 - 2021-12-05 13:22 - 000000000 ____D C:\Program Files (x86)\Stardock
2021-12-04 18:23 - 2021-12-05 13:08 - 000000000 ____D C:\Users\Admin\AppData\Local\Stardock
2021-12-04 18:23 - 2021-12-05 13:08 - 000000000 ____D C:\ProgramData\Stardock
2021-12-04 18:23 - 2021-12-04 18:23 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Stardock
2021-12-03 20:14 - 2021-12-03 20:14 - 000004792 _____ C:\Users\Admin\Desktop\CARTOUCHE PRINCIPALE.zw3
2021-12-03 20:13 - 2021-12-03 20:13 - 000282445 _____ C:\Users\Admin\Desktop\MODEL DE BASE VALABLE.zx2
2021-12-03 20:00 - 2021-12-03 20:00 - 017103727 _____ C:\Users\Admin\Desktop\cartouche de base.zx1
2021-12-03 19:24 - 2021-10-23 22:12 - 000652809 _____ C:\Users\Admin\Desktop\TET LOGO2.jpeg
2021-12-01 23:21 - 2021-12-01 23:21 - 000000007 _____ C:\Windows\win.ini
2021-12-01 23:21 - 2021-12-01 23:21 - 000000000 ____D C:\Users\Admin\AppData\Roaming\stipes
2021-12-01 22:30 - 2021-12-01 22:30 - 000000000 ___HD C:\ProgramData\CanonBJ
2021-12-01 22:30 - 2017-08-30 10:21 - 000089600 _____ C:\Windows\system32\CNC183BD.TBL
2021-12-01 22:30 - 2017-08-22 05:00 - 001303040 _____ (CANON INC.) C:\Windows\system32\CNMLMEI.DLL
2021-12-01 22:30 - 2017-05-19 10:11 - 000379392 _____ (CANON INC.) C:\Windows\system32\CNC_EIL.dll
2021-12-01 22:30 - 2017-04-11 15:23 - 000559616 _____ (CANON INC.) C:\Windows\system32\CNC_EIC.dll
2021-12-01 22:30 - 2017-04-11 15:23 - 000273408 _____ (CANON INC.) C:\Windows\system32\CNC_EII.dll
2021-12-01 22:30 - 2008-08-25 18:02 - 000017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll
2021-12-01 20:52 - 2021-12-04 18:30 - 000000207 _____ C:\Users\Admin\Desktop\TRAVAILLEURS NON SALARIE.txt
2021-11-29 18:21 - 2021-11-29 18:21 - 000000000 ____D C:\Users\Admin\AppData\Roaming\EPLAN
2021-11-29 18:11 - 2021-11-29 18:13 - 000000000 ____D C:\Program Files\EPLAN
2021-11-29 18:11 - 2021-11-29 18:12 - 000000000 ____D C:\ProgramData\EPLAN
2021-11-29 18:11 - 2021-11-29 18:11 - 000002178 _____ C:\Users\Public\Desktop\EPLAN Electric P8 2.9 SP1 (x64).lnk
2021-11-29 18:11 - 2021-11-29 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPLAN
2021-11-29 18:11 - 2021-11-29 18:11 - 000000000 ____D C:\Program Files (x86)\EPLAN
2021-11-29 18:07 - 2021-11-29 18:20 - 000000000 ____D C:\Users\Public\EPLAN
2021-11-28 22:53 - 2021-11-28 22:53 - 000004608 _____ C:\Windows\SECOH-QAD.exe
2021-11-28 22:53 - 2021-11-28 22:53 - 000003584 _____ C:\Windows\SECOH-QAD.dll
2021-11-28 22:49 - 2021-11-30 10:56 - 000003362 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-654149614-3452267781-3464033471-1001
2021-11-28 22:49 - 2021-11-30 10:56 - 000002401 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-11-28 22:49 - 2021-11-30 10:56 - 000000000 ___RD C:\Users\Admin\OneDrive
2021-11-28 22:48 - 2021-12-01 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2021-11-28 22:48 - 2021-11-28 22:48 - 000002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Entreprise.lnk
2021-11-28 22:48 - 2021-11-28 22:48 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-11-28 22:48 - 2021-11-28 22:48 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2021-11-28 22:48 - 2021-11-28 22:48 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-11-28 22:48 - 2021-11-28 22:48 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-11-28 22:48 - 2021-11-28 22:48 - 000002433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-11-28 22:48 - 2021-11-28 22:48 - 000002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2021-11-28 22:48 - 2021-11-28 22:48 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-11-28 22:47 - 2021-11-28 22:47 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2021-11-28 22:46 - 2021-12-01 20:37 - 000000000 ____D C:\Program Files\Microsoft Office
2021-11-28 22:46 - 2021-11-28 22:46 - 000000000 ____D C:\Program Files\Microsoft Office 15
2021-11-27 23:35 - 2021-11-27 23:35 - 000000000 ____D C:\Program Files (x86)\Dry-Frost
2021-11-27 23:26 - 2021-11-27 23:26 - 000000000 ____D C:\Users\Admin\AppData\Roaming\bagobo
2021-11-27 19:44 - 2021-11-27 19:44 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2021-11-27 19:44 - 2021-11-27 19:44 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Babylon
2021-11-27 19:44 - 2021-11-27 19:44 - 000000000 ____D C:\Users\Admin\AppData\Local\Babylon
2021-11-27 19:44 - 2021-11-27 19:44 - 000000000 ____D C:\ProgramData\Babylon
2021-11-27 18:39 - 2021-12-04 22:19 - 000000000 ____D C:\ProgramData\SafeNet Sentinel
2021-11-27 17:47 - 2021-11-27 17:47 - 000000000 ____D C:\Program Files (x86)\7-Zip
2021-11-27 15:58 - 2016-10-02 16:35 - 000067584 _____ (Chingachguk & Denger2k (Elite & SP edition)) C:\Windows\system32\MultiKey.sys
2021-11-27 15:58 - 2016-10-02 16:35 - 000009619 _____ C:\Windows\system32\multikey.cat
2021-11-27 06:21 - 2021-11-27 06:21 - 000000000 ____D C:\Users\Admin\Desktop\divers
2021-11-27 06:12 - 2021-12-05 12:48 - 000000000 ____D C:\Program Files\Unlocker
2021-11-27 06:12 - 2021-11-27 19:22 - 000001914 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unlocker.lnk
2021-11-27 05:51 - 2021-11-28 22:46 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-11-27 05:45 - 2021-11-27 05:45 - 000000000 ____D C:\Windows\system32\RsFx
2021-11-27 05:45 - 2021-11-27 05:45 - 000000000 ____D C:\Program Files\Microsoft Visual Studio 10.0
2021-11-27 05:44 - 2021-11-27 05:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2014
2021-11-27 05:44 - 2021-11-27 05:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
2021-11-27 05:43 - 2021-11-27 05:44 - 000000000 ____D C:\Windows\SysWOW64\1033
2021-11-27 05:43 - 2021-11-27 05:44 - 000000000 ____D C:\Windows\system32\1033
2021-11-27 05:43 - 2021-11-27 05:43 - 000000000 ____D C:\ProgramData\Apple
2021-11-27 05:43 - 2021-11-27 05:43 - 000000000 ____D C:\Program Files\Bonjour
2021-11-27 05:43 - 2021-11-27 05:43 - 000000000 ____D C:\Program Files (x86)\Bonjour
2021-11-27 05:42 - 2021-11-27 05:45 - 000000000 ____D C:\ProgramData\SOLIDWORKS Electrical
2021-11-27 05:40 - 2021-11-27 05:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gestionnaire d'installation SOLIDWORKS
2021-11-26 22:53 - 2021-11-27 16:37 - 000001078 _____ C:\Users\Admin\Desktop\Internet Download Manager.lnk
2021-11-26 22:53 - 2021-11-26 22:53 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2021-11-26 22:53 - 2021-11-26 22:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2021-11-26 21:50 - 2021-12-02 18:30 - 000001126 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2021-11-26 21:50 - 2021-12-02 18:30 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-11-26 21:50 - 2021-12-02 18:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-11-26 21:43 - 2021-11-26 21:43 - 000000000 ____D C:\Program Files\7-Zip
2021-11-26 21:30 - 2021-11-26 21:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2021-11-26 20:17 - 2021-11-29 16:51 - 000000000 ____D C:\Users\DefaultAppPool
2021-11-26 20:17 - 2021-11-26 20:17 - 000000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Voisinage réseau
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Voisinage d'impression
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Modèles
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Mes documents
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Menu Démarrer
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Mes vidéos
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Mes images
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\Documents\Ma musique
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-11-26 20:17 - 2021-11-26 20:17 - 000000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Historique
2021-11-26 20:17 - 2021-06-05 13:04 - 000001281 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2021-11-26 20:17 - 2021-06-05 13:04 - 000000407 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2021-11-26 07:52 - 2021-11-26 07:52 - 000000958 _____ C:\Users\Public\Desktop\AOMEI Backupper.lnk
2021-11-26 07:52 - 2021-11-26 07:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2021-11-26 07:51 - 2021-11-26 07:52 - 000032176 _____ C:\Windows\system32\amwrtdrv.sys
2021-11-26 07:51 - 2021-11-26 07:51 - 000000000 ____D C:\Program Files (x86)\AOMEI
2021-11-26 07:51 - 2019-05-14 11:28 - 000051120 _____ C:\Windows\system32\ambakdrv.sys
2021-11-26 07:51 - 2016-12-21 22:52 - 000171952 _____ C:\Windows\system32\ammntdrv.sys
2021-11-26 07:26 - 2021-11-26 07:26 - 003059982 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2021-11-26 07:25 - 2021-11-26 07:25 - 000000000 ____D C:\Windows\SysWOW64\BestPractices
2021-11-26 07:25 - 2021-11-26 07:25 - 000000000 ____D C:\Windows\system32\BestPractices
2021-11-26 07:25 - 2021-11-26 07:25 - 000000000 ____D C:\inetpub
2021-11-25 22:56 - 2021-11-25 23:16 - 000000208 _____ C:\Windows\SysWOW64\AbBakConfig.dat
2021-11-25 22:56 - 2021-11-25 22:56 - 000000000 ____D C:\ProgramData\Aomei
2021-11-25 22:49 - 2021-11-29 16:02 - 000000999 _____ C:\Windows\system32\Drivers\etc\hosts.bak
2021-11-25 22:41 - 2021-11-29 17:50 - 000001515 _____ C:\Users\Admin\Desktop\notepad++.lnk
2021-11-25 22:34 - 2021-11-25 22:45 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Notepad++
2021-11-25 22:34 - 2021-11-25 22:40 - 000000000 ____D C:\Program Files (x86)\Notepad++
2021-11-25 22:34 - 2021-11-25 22:34 - 000001100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2021-11-25 22:32 - 2021-11-25 23:19 - 000000000 ____D C:\ProgramData\AomeiBR
2021-11-25 22:32 - 2017-02-28 14:20 - 000038320 _____ C:\Windows\SysWOW64\ampa.sys
2021-11-25 22:31 - 2021-11-27 05:57 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant
2021-11-25 22:31 - 2021-11-25 22:31 - 000001205 _____ C:\Users\Public\Desktop\AOMEI Partition Assistant 9.1.lnk
2021-11-25 22:31 - 2021-11-25 22:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant
2021-11-25 22:31 - 2020-12-22 14:58 - 002201168 _____ C:\Windows\ampa.exe
2021-11-25 22:31 - 2020-12-22 14:58 - 001305680 _____ C:\Windows\ddmmain.exe
2021-11-25 22:31 - 2017-02-28 14:20 - 000038320 _____ C:\Windows\system32\ampa.sys
2021-11-25 22:31 - 2016-12-27 18:45 - 000035760 _____ C:\Windows\system32\ddmdrv.sys
2021-11-25 19:58 - 2021-11-27 05:43 - 000000000 ____D C:\Windows\SolidWorks
2021-11-25 19:58 - 2021-11-25 19:58 - 000000000 ____D C:\Users\Admin\AppData\Roaming\SOLIDWORKS
2021-11-25 14:29 - 2021-12-05 13:22 - 000000000 ____D C:\Users\Admin\AppData\Roaming\DMCache
2021-11-25 14:29 - 2021-11-27 18:15 - 000000000 ____D C:\Users\Admin\AppData\Roaming\IDM
2021-11-25 14:29 - 2021-11-26 22:58 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2021-11-25 14:29 - 2021-11-25 14:29 - 000000000 ____D C:\ProgramData\IDM
2021-11-25 14:26 - 2021-11-25 14:26 - 000000000 ____D C:\Users\Admin\Documents\LogoDesignStudio Pro
2021-11-25 14:25 - 2021-11-25 14:25 - 000001287 _____ C:\Users\Public\Desktop\Logo Design Studio Pro Platinum.lnk
2021-11-25 14:25 - 2021-11-25 14:25 - 000000000 ____D C:\ProgramData\Caphyon
2021-11-25 14:24 - 2021-11-25 14:24 - 000000000 ____D C:\ProgramData\Summitsoft
2021-11-25 14:24 - 2021-11-25 14:24 - 000000000 ____D C:\Program Files (x86)\Summitsoft
2021-11-25 14:21 - 2021-11-25 14:23 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Summitsoft
2021-11-25 14:12 - 2021-11-29 16:07 - 000000000 ____D C:\Users\Admin\Documents\Wondershare
2021-11-25 14:12 - 2021-11-25 14:12 - 000000000 ____D C:\Windows\system32\Samsung
2021-11-25 14:12 - 2021-11-25 14:12 - 000000000 ____D C:\ProgramData\Samsung
2021-11-25 14:12 - 2020-11-11 03:54 - 000167280 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudmdm.sys
2021-11-25 14:12 - 2020-11-11 03:54 - 000043376 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ss_conn_usb_driver2.sys
2021-11-25 14:09 - 2021-11-25 14:12 - 000000000 ____D C:\Users\Admin\.android
2021-11-25 14:09 - 2021-11-25 14:09 - 000001232 _____ C:\Users\Public\Desktop\Wondershare MobileGo.lnk
2021-11-25 14:09 - 2021-11-25 14:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2021-11-25 14:07 - 2021-11-29 15:35 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Wondershare
2021-11-25 14:07 - 2021-11-25 14:09 - 000000000 ____D C:\Program Files (x86)\Wondershare
2021-11-25 14:07 - 2021-11-25 14:07 - 000000000 ____D C:\Users\Admin\AppData\Roaming\HMYGSetting
2021-11-25 14:07 - 2021-11-25 14:07 - 000000000 ____D C:\ProgramData\wondershare
2021-11-25 14:07 - 2015-02-27 10:35 - 000000232 _____ C:\Windows\SysWOW64\dllhost.exe.config
2021-11-25 13:22 - 2021-11-25 13:23 - 000000000 ____D C:\Users\Admin\AppData\Local\ElevatedDiagnostics
2021-11-24 19:33 - 2021-11-24 19:33 - 000000000 ____D C:\Users\Admin\AppData\Local\Autodesk,_Inc
2021-11-24 17:24 - 2021-11-24 20:03 - 000002058 _____ C:\Users\Admin\Desktop\Caneco IMP 2019 -- ACAD OEM 2017.lnk
2021-11-24 17:15 - 2021-11-24 17:15 - 000002235 _____ C:\Users\Public\Desktop\OfficeElec 2019.lnk
2021-11-24 17:11 - 2021-11-24 17:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Implantation OEM FRA 2017
2021-11-24 17:09 - 2021-11-24 17:09 - 000002132 _____ C:\Users\Public\Desktop\Caneco EP 2019.lnk
2021-11-24 17:09 - 2021-11-24 17:09 - 000000000 ____D C:\Users\Admin\Documents\Caneco EP
2021-11-24 17:08 - 2021-11-24 17:08 - 000000000 ____D C:\Users\Admin\Documents\ALPI
2021-11-24 17:07 - 2021-11-24 17:07 - 000002145 _____ C:\Users\Public\Desktop\Caneco Implantation Config - 2019.lnk
2021-11-24 17:06 - 2021-11-24 17:06 - 000002055 _____ C:\Users\Public\Desktop\Caneco BIM 2019- R2020-FR.lnk
2021-11-24 17:03 - 2021-11-24 17:19 - 000000000 ____D C:\Program Files\Common Files\Alpi Shared
2021-11-24 17:03 - 2021-11-24 17:11 - 000000000 ____D C:\Program Files\ALPI
2021-11-24 17:01 - 2021-12-01 23:18 - 000000000 ____D C:\Users\Admin\Documents\Caneco BT
2021-11-24 17:00 - 2021-11-24 17:14 - 000000000 ____D C:\Program Files (x86)\ALPI
2021-11-24 17:00 - 2021-11-24 17:00 - 000002305 _____ C:\Users\Public\Desktop\Caneco-BT 2019.lnk
2021-11-24 12:14 - 2021-11-24 12:14 - 000000000 ____D C:\ProgramData\FNP
2021-11-24 11:30 - 2021-11-24 11:30 - 000002048 _____ C:\Users\Public\Desktop\Revit 2022.lnk
2021-11-24 09:35 - 2021-10-08 11:00 - 000160376 _____ (Samsung Electronics Co., Ltd.) C:\Windows\system32\Drivers\ssudbus2.sys
2021-11-24 09:29 - 2021-11-24 09:29 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-11-24 08:52 - 2021-11-24 08:52 - 000000896 _____ C:\Users\Admin\Desktop\µTorrent.lnk
2021-11-24 08:52 - 2021-11-24 08:52 - 000000876 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2021-11-24 08:51 - 2021-12-05 13:39 - 000000000 ____D C:\Users\Admin\AppData\Roaming\uTorrent
2021-11-24 01:34 - 2021-11-24 01:34 - 000000000 ____D C:\Users\Boulaid
2021-11-24 01:33 - 2021-12-05 13:23 - 000000000 ____D C:\Users\Admin\AppData\Local\BitTorrentHelper
2021-11-24 01:26 - 2021-11-24 01:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Утилиты
2021-11-24 01:26 - 2021-11-24 01:26 - 000000000 ____D C:\Program Files (x86)\uTorrent
2021-11-23 23:04 - 2021-11-24 16:47 - 000000000 ____D C:\Windows\system32\appmgmt
2021-11-23 22:15 - 2021-11-23 22:15 - 000103140 __RSH C:\rbayw.exe
2021-11-23 22:14 - 2021-11-24 21:17 - 000000000 ____D C:\ProgramData\RevitInterProcess
2021-11-23 22:14 - 2021-11-24 17:45 - 000081920 _____ C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2021-11-23 22:14 - 2021-11-23 22:14 - 000000000 ____D C:\Users\Admin\Documents\AEC Generative Design
2021-11-23 22:05 - 2021-11-23 22:05 - 000000000 ____D C:\ProgramData\FLEXnet
2021-11-23 21:57 - 2021-11-24 11:30 - 000000000 ____D C:\Program Files\NREL
2021-11-23 21:56 - 2021-11-23 21:56 - 000000000 ____D C:\ProgramData\Dynamo
2021-11-23 21:43 - 2021-11-27 05:44 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2021-11-23 21:43 - 2021-11-27 05:44 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2021-11-23 14:50 - 2021-11-23 14:50 - 000002271 _____ C:\Users\Public\Desktop\AutoCAD Electrical 2022 - Français (French).lnk
2021-11-23 14:50 - 2021-11-23 14:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD Electrical 2022 - Français (French)
2021-11-23 14:39 - 2021-11-23 14:39 - 000000000 ____D C:\Users\Admin\AppData\Local\IsolatedStorage
2021-11-23 14:37 - 2021-11-23 14:37 - 000000000 ____D C:\Users\Admin\Documents\Acade 2022
2021-11-23 14:37 - 2021-11-23 14:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD Electrical 2022 - English
2021-11-23 14:37 - 2021-11-23 14:37 - 000000000 ____D C:\Program Files (x86)\Autodesk
2021-11-23 14:33 - 2021-11-24 11:38 - 000000000 ____D C:\Users\Public\Documents\Autodesk
2021-11-23 14:33 - 2021-11-23 14:33 - 000000000 ____D C:\Users\Admin\Documents\Inventor Server for AutoCAD
2021-11-23 14:23 - 2021-11-23 14:23 - 000002182 _____ C:\Users\Public\Desktop\AutoCAD LT 2022 - Français (French).lnk
2021-11-23 14:23 - 2021-11-23 14:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD LT 2022 - Français (French)
2021-11-23 14:14 - 2021-11-24 12:32 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-11-23 14:14 - 2021-11-23 14:14 - 000000000 ____D C:\Users\Admin\AppData\Local\CEF
2021-11-23 14:13 - 2021-11-23 14:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD LT 2022 - English
2021-11-23 14:10 - 2021-11-24 11:38 - 000000000 ____D C:\Program Files\Autodesk
2021-11-23 14:10 - 2021-11-23 14:10 - 000000000 ____D C:\Program Files\dotnet
2021-11-23 14:06 - 2021-11-24 11:39 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Autodesk Installer
2021-11-23 14:04 - 2021-11-24 19:39 - 000000000 ____D C:\Users\Admin\AppData\Local\Autodesk
2021-11-23 14:04 - 2021-11-23 14:04 - 000000000 ____D C:\Autodesk
2021-11-23 14:00 - 2021-11-23 14:00 - 000000000 ____D C:\Users\Admin\AppData\Roaming\WinRAR
2021-11-23 13:56 - 2021-11-23 13:56 - 000000000 ____D C:\Users\Admin\AppData\Roaming\EurekaLog
2021-11-23 00:12 - 2021-11-23 00:12 - 000000000 ____D C:\Users\Admin\Documents\CanecoEP
2021-11-23 00:09 - 2021-11-23 00:09 - 003174400 _____ C:\Users\Admin\Documents\Document1.mdb
2021-11-22 23:09 - 2021-11-24 17:11 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared
2021-11-22 23:08 - 2021-11-24 21:17 - 000000000 ____D C:\ProgramData\Autodesk
2021-11-22 23:08 - 2021-11-24 12:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2021-11-22 23:08 - 2021-11-23 22:03 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Autodesk
2021-11-22 23:01 - 2021-11-24 17:11 - 000000000 ____D C:\Users\Public\Documents\ALPI
2021-11-22 22:55 - 2021-11-24 17:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\ALPI
2021-11-22 22:41 - 2021-11-22 23:56 - 000000000 ____D C:\Users\Admin\AppData\Local\ALPI
2021-11-22 22:41 - 2021-11-22 22:41 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Neos Eureka S.r.l
2021-11-22 22:33 - 2021-11-24 15:17 - 000000000 ____D C:\Windows\Downloaded Installations
2021-11-22 22:27 - 2021-11-22 22:27 - 000000000 ____D C:\Users\Admin\AppData\Local\PeerDistRepub
2021-11-22 22:16 - 2021-11-22 22:16 - 000000000 ____D C:\Windows\system32\Tasks\Intel
2021-11-22 22:15 - 2021-11-27 05:43 - 000000000 ____D C:\ProgramData\Package Cache
2021-11-22 22:11 - 2021-11-24 15:22 - 000000000 ____D C:\Users\Admin\AppData\Local\Downloaded Installations
2021-11-22 22:09 - 2021-11-24 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALPI
2021-11-22 22:09 - 2021-11-24 17:11 - 000000000 ____D C:\ProgramData\ALPI
2021-11-22 22:05 - 2021-12-02 18:30 - 000000000 ____D C:\Program Files (x86)\WinRAR
2021-11-22 21:38 - 2021-11-22 21:38 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2021-11-22 20:54 - 2021-11-22 20:54 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2021-11-22 18:46 - 2021-11-22 18:46 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-11-22 18:38 - 2021-11-23 21:48 - 000000000 ____D C:\Program Files\HWiNFO64
2021-11-22 18:38 - 2021-11-22 18:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64
2021-11-21 15:25 - 2021-11-21 15:25 - 000003476 _____ C:\Windows\system32\Tasks\AutoPico Daily Restart
2021-11-21 15:25 - 2021-11-21 15:25 - 000000000 ____D C:\Users\Admin\AppData\Roaming\NCH Software
2021-11-21 15:25 - 2021-11-21 15:25 - 000000000 ____D C:\Users\Admin\AppData\Roaming\histon
2021-11-21 15:25 - 2021-11-21 15:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2021-11-21 15:25 - 2021-11-21 15:25 - 000000000 ____D C:\Program Files\KMSpico
2021-11-21 15:25 - 2021-11-21 15:25 - 000000000 ____D C:\Program Files (x86)\folder1
2021-11-21 15:25 - 2010-12-06 03:16 - 000090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2021-11-16 01:52 - 2021-11-22 22:49 - 000000000 ____D C:\ProgramData\Intel
2021-11-16 01:52 - 2021-11-16 01:52 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Synaptics
2021-11-16 01:40 - 2021-11-16 01:40 - 000000000 ____D C:\Program Files (x86)\Realtek
2021-11-16 01:40 - 2020-06-11 10:28 - 011751008 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtwlane.sys
2021-11-16 01:40 - 2020-06-11 10:17 - 000233450 _____ C:\Windows\system32\Drivers\rtldata.txt
2021-11-16 01:37 - 2021-11-16 01:44 - 000000000 ____D C:\ProgramData\Realtek
2021-11-16 01:37 - 2021-11-16 01:37 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-11-16 01:37 - 2020-09-09 23:05 - 006134872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2021-11-16 01:37 - 2020-09-09 22:53 - 041975010 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2021-11-16 01:37 - 2020-05-11 21:17 - 000004664 _____ C:\Windows\system32\Drivers\CxSfPt.103C84A6_Rev0002.dat
2021-11-16 01:37 - 2020-05-11 21:17 - 000004244 _____ C:\Windows\system32\cxapo.prop
2021-11-16 01:36 - 2021-12-05 13:29 - 001019322 _____ C:\Windows\system32\perfh00C.dat
2021-11-16 01:36 - 2021-12-05 13:29 - 000241996 _____ C:\Windows\system32\perfc00C.dat
2021-11-16 01:36 - 2021-11-16 01:52 - 000000000 ____D C:\Windows\system32\Tasks\Hewlett-Packard
2021-11-16 01:36 - 2021-11-16 01:36 - 000000000 ____D C:\Users\Admin\AppData\Local\HP
2021-11-16 01:36 - 2021-11-16 01:36 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2021-11-16 01:36 - 2021-11-16 01:32 - 000351124 _____ C:\Windows\system32\perfi00C.dat
2021-11-16 01:36 - 2021-11-16 01:32 - 000040694 _____ C:\Windows\system32\perfd00C.dat
2021-11-16 01:36 - 2020-03-16 23:57 - 004313864 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPEnh.exe
2021-11-16 01:36 - 2020-03-16 23:57 - 000769288 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys
2021-11-16 01:36 - 2020-03-16 23:56 - 019840776 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPRes.dll
2021-11-16 01:36 - 2020-03-16 23:56 - 000822024 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2021-11-16 01:36 - 2020-03-16 23:56 - 000384264 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPEnhService.exe
2021-11-16 01:36 - 2020-03-16 23:56 - 000275720 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2021-11-16 01:36 - 2020-03-16 23:56 - 000049416 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2021-11-16 01:34 - 2021-11-16 01:34 - 000000000 ____D C:\Program Files (x86)\HP
2021-11-16 01:33 - 2021-11-16 01:40 - 000000000 ____D C:\ProgramData\HP
2021-11-16 01:33 - 2021-11-16 01:33 - 000000000 ____D C:\system.sav
2021-11-16 01:33 - 2021-11-16 01:33 - 000000000 ____D C:\Program Files\HP
2021-11-16 01:32 - 2021-12-05 13:04 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2021-11-16 01:32 - 2021-11-16 01:32 - 000000000 ____D C:\Windows\SysWOW64\fr
2021-11-16 01:32 - 2021-11-16 01:32 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2021-11-16 01:32 - 2021-11-16 01:32 - 000000000 ____D C:\Windows\system32\MigWiz
2021-11-16 01:32 - 2021-11-16 01:32 - 000000000 ____D C:\Windows\system32\fr
2021-11-16 01:32 - 2021-11-16 01:32 - 000000000 ____D C:\Users\Admin\AppData\Local\Publishers
2021-11-16 01:32 - 2021-11-16 01:32 - 000000000 ____D C:\Program Files\Windows Defender
2021-11-16 01:31 - 2021-12-05 13:23 - 000000000 __SHD C:\Users\Admin\IntelGraphicsProfiles
2021-11-16 01:31 - 2021-12-05 13:23 - 000000000 ____D C:\Intel
2021-11-16 01:31 - 2021-11-23 15:55 - 000000000 ____D C:\Users\Admin\AppData\Local\Intel
2021-11-16 01:31 - 2021-11-16 01:31 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Intel
2021-11-16 01:31 - 2021-11-16 01:31 - 000000000 _____ C:\Windows\system32\GfxValDisplayLog.bin
2021-11-16 01:30 - 2021-11-16 01:38 - 000000000 ____D C:\Users\Admin\AppData\Local\Google
2021-11-16 01:30 - 2021-11-16 01:30 - 000002315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-11-16 01:30 - 2021-11-16 01:30 - 000002274 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-11-16 01:30 - 2021-11-16 01:30 - 000000000 ____D C:\Program Files\Google
2021-11-16 01:29 - 2021-12-05 13:34 - 000000000 ____D C:\Program Files (x86)\Google
2021-11-16 01:29 - 2021-11-16 01:29 - 000003490 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-11-16 01:29 - 2021-11-16 01:29 - 000003366 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-11-16 01:28 - 2021-11-21 15:27 - 000000000 ____D C:\Users\Admin\AppData\Local\PlaceholderTileLogoFolder
2021-11-16 01:28 - 2021-11-16 01:28 - 000002362 _____ C:\Users\Admin\Desktop\Microsoft Edge.lnk
2021-11-16 01:28 - 2020-09-11 09:36 - 000305992 _____ C:\Windows\system32\libmfxhw64.dll
2021-11-16 01:28 - 2020-09-11 09:36 - 000254520 _____ C:\Windows\SysWOW64\libmfxhw32.dll
2021-11-16 01:28 - 2020-09-11 09:36 - 000171472 _____ (Intel Corporation) C:\Windows\system32\intel_gfx_api-x64.dll
2021-11-16 01:28 - 2020-09-11 09:36 - 000146752 _____ (Intel Corporation) C:\Windows\SysWOW64\intel_gfx_api-x86.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 026676016 _____ (Intel Corporation) C:\Windows\system32\mfxplugin64_hw.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 013519664 _____ (Intel Corporation) C:\Windows\SysWOW64\mfxplugin32_hw.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 001790192 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2021-11-16 01:28 - 2020-09-11 09:35 - 001790192 _____ C:\Windows\system32\vulkaninfo.exe
2021-11-16 01:28 - 2020-09-11 09:35 - 001386224 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-11-16 01:28 - 2020-09-11 09:35 - 001386224 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2021-11-16 01:28 - 2020-09-11 09:35 - 001096800 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 001096800 _____ C:\Windows\system32\vulkan-1.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 000949856 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 000949856 _____ C:\Windows\SysWOW64\vulkan-1.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 000462640 _____ C:\Windows\system32\ze_loader.dll
2021-11-16 01:28 - 2020-09-11 09:35 - 000148784 _____ C:\Windows\system32\ze_validation_layer.dll
2021-11-15 22:22 - 2021-12-05 00:14 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2021-11-15 22:22 - 2021-12-04 20:52 - 000000000 ____D C:\Users\Admin
2021-11-15 22:22 - 2021-11-25 23:14 - 000000000 ____D C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform
2021-11-15 22:22 - 2021-11-22 22:17 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2021-11-15 22:22 - 2021-11-22 22:17 - 000000000 ____D C:\ProgramData\Packages
2021-11-15 22:22 - 2021-11-15 22:22 - 000000020 ___SH C:\Users\Admin\ntuser.ini
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 _SHDL C:\Users\Admin\Шаблоны
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 _SHDL C:\Users\Admin\Мои документы
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 _SHDL C:\Users\Admin\главное меню
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 _SHDL C:\Users\Admin\Documents\Моя музыка
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 _SHDL C:\Users\Admin\Documents\мои рисунки
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 _SHDL C:\Users\Admin\Documents\Мои видеозаписи
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 _SHDL C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Программы
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-11-15 22:22 - 2021-11-15 22:22 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Adobe
2021-11-15 22:22 - 2021-06-05 13:04 - 000001281 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
2021-11-15 22:22 - 2021-06-05 13:04 - 000000407 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
2021-11-15 22:19 - 2021-12-05 13:29 - 003594404 _____ C:\Windows\system32\PerfStringBackup.INI
2021-11-15 22:17 - 2021-11-15 22:17 - 000000000 ____D C:\Windows\CSC
2021-11-15 22:15 - 2021-11-25 12:26 - 000003170 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateBrowserReplacementTask
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Все пользователи
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Public\Documents\Моя музыка
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Public\Documents\мои рисунки
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Public\Documents\Мои видеозаписи
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Default\Шаблоны
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Default\Мои документы
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Default\главное меню
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Default\Documents\Моя музыка
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Default\Documents\мои рисунки
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Default\Documents\Мои видеозаписи
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Программы
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\ProgramData\Шаблоны
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\ProgramData\Рабочий стол
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\ProgramData\Документы
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\ProgramData\главное меню
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Программы
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 _SHDL C:\Documents and Settings
2021-11-15 22:14 - 2021-11-15 22:14 - 000000000 ____D C:\Windows\system32\MSDtc
2021-11-15 22:13 - 2021-12-05 13:23 - 000012288 ___SH C:\DumpStack.log.tmp
2021-11-15 22:13 - 2021-12-05 13:23 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-11-15 22:13 - 2021-12-05 00:23 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-11-15 22:13 - 2021-12-04 15:26 - 000002323 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-11-15 22:13 - 2021-11-28 22:53 - 000611688 _____ C:\Windows\system32\FNTCACHE.DAT
2021-11-15 22:13 - 2021-11-22 18:24 - 000000000 ____D C:\Windows\Panther
2021-11-15 22:13 - 2021-11-21 15:21 - 000003612 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-11-15 22:13 - 2021-11-21 15:21 - 000003488 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-11-15 22:13 - 2021-11-15 22:13 - 000000000 ____D C:\Windows\ServiceProfiles
2021-11-10 16:36 - 2011-01-12 20:36 - 001054208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71u.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71deu.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ita.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71fra.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71esp.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71enu.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71kor.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71jpn.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71cht.dll
2021-11-10 16:36 - 2011-01-12 20:25 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71chs.dll
2021-11-10 16:36 - 2011-01-12 20:19 - 001060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2021-11-10 16:36 - 2011-01-12 19:53 - 000090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl71.dll
2021-11-10 16:36 - 2007-02-02 05:13 - 000503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2021-11-10 16:36 - 2007-02-02 02:11 - 000344064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2021-11-10 16:36 - 2007-01-31 05:04 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2021-11-10 16:36 - 2006-08-26 07:28 - 001017344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70u.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ita.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70fra.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70esp.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70deu.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70enu.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70kor.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70jpn.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70cht.dll
2021-11-10 16:36 - 2006-08-26 07:15 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70chs.dll
2021-11-10 16:36 - 2006-08-26 07:07 - 001024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll
2021-11-10 16:36 - 2006-08-26 06:17 - 000086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl70.dll
2021-11-10 16:36 - 2005-01-21 02:25 - 000054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvci70.dll
2021-11-10 16:36 - 2002-01-05 12:40 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll
2021-11-10 16:36 - 2001-08-23 07:00 - 001355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvbvm50.dll
2021-11-10 16:36 - 1996-01-12 10:00 - 000722192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb40032.dll
2021-11-10 16:36 - 1993-07-24 02:31 - 000210944 _____ C:\Windows\SysWOW64\msvcrt10.dll
2021-11-10 14:42 - 2021-11-16 01:32 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2021-11-10 14:42 - 2021-11-10 14:42 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-11-10 14:42 - 2021-11-10 14:42 - 000000000 ____D C:\Program Files\MSBuild
2021-11-10 14:42 - 2021-11-10 14:42 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-11-10 14:42 - 2021-11-10 14:42 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-11-10 14:24 - 2021-11-10 14:24 - 000267264 _____ C:\Windows\SysWOW64\Windows.Internal.UI.Dialogs.dll
2021-11-10 14:24 - 2021-11-10 14:24 - 000253952 _____ (Microsoft Corporation) C:\Windows\system32\ssText3d.scr
2021-11-10 14:24 - 2021-11-10 14:24 - 000014756 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-11-10 14:24 - 2021-11-10 14:24 - 000009522 _____ C:\Windows\system32\ResPriUHMImageList
2021-11-10 14:24 - 2021-11-10 14:24 - 000009522 _____ C:\Windows\system32\ResPriImageList
2021-11-10 14:24 - 2021-11-10 14:24 - 000009522 _____ C:\Windows\system32\ResPriHMImageList
2021-11-10 14:24 - 2021-11-10 14:24 - 000009402 _____ C:\Windows\system32\ResPriHMImageListLowCost
2021-11-10 14:24 - 2021-11-10 14:24 - 000008964 _____ C:\Windows\system32\ResPriLMImageList
2021-11-10 14:24 - 2021-11-10 14:24 - 000008870 _____ C:\Windows\system32\ResPriImageListLowCost
2021-11-10 14:24 - 2021-11-10 14:24 - 000006656 _____ C:\Windows\SysWOW64\nrtapi.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000617648 _____ C:\Windows\SysWOW64\TextShaping.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000425984 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000360448 _____ C:\Windows\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000335872 _____ C:\Windows\system32\Windows.Internal.UI.Dialogs.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000221184 _____ C:\Windows\SysWOW64\Microsoft.Internal.FrameworkUdk.System.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000121344 _____ C:\Windows\SysWOW64\TpmTool.exe
2021-11-10 14:23 - 2021-11-10 14:23 - 000099560 _____ C:\Windows\system32\wow64con.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000041594 _____ C:\Windows\SysWOW64\ctac.json
2021-11-10 14:23 - 2021-11-10 14:23 - 000036864 _____ C:\Windows\system32\umpodev.dll
2021-11-10 14:23 - 2021-11-10 14:23 - 000003366 _____ C:\Windows\SysWOW64\AppxProvisioning.xml
2021-11-10 14:23 - 2021-11-10 14:23 - 000003366 _____ C:\Windows\system32\AppxProvisioning.xml
2021-11-10 14:22 - 2021-11-10 14:22 - 000614400 _____ C:\Windows\system32\TextInputMethodFormatter.dll
2021-11-10 14:22 - 2021-11-10 14:22 - 000286720 _____ C:\Windows\system32\AggregatorHost.exe
2021-11-10 14:22 - 2021-11-10 14:22 - 000180224 _____ C:\Windows\system32\CloudExperienceHostRedirection.dll
2021-11-10 14:22 - 2021-11-10 14:22 - 000077824 _____ C:\Windows\system32\runexehelper.exe
2021-11-10 14:22 - 2021-11-10 14:22 - 000024576 _____ C:\Windows\system32\nrtapi.dll
2021-11-10 14:21 - 2021-11-10 14:21 - 000727576 _____ C:\Windows\system32\TextShaping.dll
2021-11-10 14:21 - 2021-11-10 14:21 - 000311296 _____ C:\Windows\system32\Microsoft.Internal.FrameworkUdk.System.dll
2021-11-10 14:21 - 2021-11-10 14:21 - 000258048 _____ C:\Windows\system32\CoreMas.dll
2021-11-10 14:21 - 2021-11-10 14:21 - 000215552 _____ C:\Windows\system32\CloudIdWxhExtension.dll
2021-11-10 14:21 - 2021-11-10 14:21 - 000208896 _____ C:\Windows\system32\IHDS.dll
2021-11-10 14:21 - 2021-11-10 14:21 - 000172032 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe
2021-11-10 14:21 - 2021-11-10 14:21 - 000167936 _____ C:\Windows\system32\TpmTool.exe
2021-11-10 14:21 - 2021-11-10 14:21 - 000041594 _____ C:\Windows\system32\ctac.json
2021-11-10 14:13 - 2021-12-05 13:22 - 164364288 _____ C:\Windows\system32\config\SOFTWARE

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-12-05 13:29 - 2021-06-05 18:45 - 000973100 _____ C:\Windows\system32\perfh019.dat
2021-12-05 13:29 - 2021-06-05 18:45 - 000239992 _____ C:\Windows\system32\perfc019.dat
2021-12-05 13:29 - 2021-06-05 13:09 - 000000000 ____D C:\Windows\INF
2021-12-05 13:25 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SystemTemp
2021-12-05 13:25 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-05 13:23 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\ServiceState
2021-12-05 12:59 - 2021-06-05 13:01 - 000131072 _____ C:\Windows\system32\config\BBI
2021-12-05 11:02 - 2021-06-05 13:01 - 000000000 ____D C:\Windows\CbsTemp
2021-12-05 10:51 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-05 10:51 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\AppReadiness
2021-12-04 22:19 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\setup
2021-12-01 20:37 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-11-26 07:25 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\inetsrv
2021-11-26 07:25 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\inetsrv
2021-11-24 17:11 - 2021-06-05 13:10 - 000000000 ___SD C:\Windows\Downloaded Program Files
2021-11-22 20:54 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\LiveKernelReports
2021-11-16 01:38 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\Drivers\DriverData
2021-11-16 01:32 - 2021-06-05 18:53 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-11-16 01:32 - 2021-06-05 18:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\SysWOW64\winrm
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\SysWOW64\WCN
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\SysWOW64\slmgr
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\system32\winrm
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\system32\WCN
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\system32\slmgr
2021-11-16 01:32 - 2021-06-05 18:45 - 000000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ___SD C:\Windows\SysWOW64\F12
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ___SD C:\Windows\system32\F12
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ___SD C:\Windows\system32\dsc
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\oobe
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\MUI
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\Dism
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\Com
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SystemResources
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SystemApps
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\Sysprep
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\oobe
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\MUI
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\Dism
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\Com
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\IME
2021-11-16 01:32 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Common Files\System
2021-11-16 01:32 - 2021-06-05 13:01 - 000000000 ____D C:\Windows\servicing
2021-11-16 01:31 - 2021-06-05 13:10 - 000000000 ___RD C:\Windows\PrintDialog
2021-11-16 01:29 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\OCR
2021-11-15 22:25 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\USOPrivate
2021-11-15 22:17 - 2021-06-05 18:52 - 000000000 ____D C:\Windows\system32\FxsTmp
2021-11-15 22:17 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\spool
2021-11-15 22:14 - 2021-06-05 13:10 - 000000000 ____D C:\Program Files\Windows NT
2021-11-15 22:13 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\appcompat
2021-11-15 22:13 - 2021-06-05 13:08 - 000028672 _____ C:\Windows\system32\config\BCD-Template
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\vi-VN
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\id-ID
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\gl-ES
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\eu-ES
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\ca-ES
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\vi-VN
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\lv-LV
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\lt-LT
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\id-ID
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\gl-ES
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\eu-ES
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\et-EE
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\es-MX
2021-11-11 16:43 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\ca-ES
2021-11-11 16:26 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\Web
2021-11-10 23:35 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\ShellExperiences
2021-11-10 14:33 - 2021-06-05 18:53 - 000000000 ___SD C:\Windows\system32\AppV
2021-11-10 14:33 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2021-11-10 14:33 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\WinMetadata
2021-11-10 14:33 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\ShellExperiences
2021-11-10 14:33 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\ShellComponents
2021-11-10 14:33 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\Provisioning
2021-11-10 14:33 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\DiagTrack
2021-11-10 14:32 - 2021-06-05 18:53 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2021-11-10 14:32 - 2021-06-05 18:53 - 000021047 _____ C:\Windows\system32\OEMDefaultAssociations.xml

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================