Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version:18-11-2015
Exécuté par romai_000 (administrateur) sur ROMAIN (18-11-2015 13:24:35)
Exécuté depuis C:\Users\romai_000\Downloads
Profils chargés: romai_000 (Profils disponibles: romai_000 & croix_000 & Administrateur)
Platform: Windows 10 Home (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(CEGID) C:\Program Files (x86)\Cegid\Cegid Common\Cegid Database Maintenance\APP\CegidDatabaseMaintenance.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsCmdServer.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsEventHandler.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Spotify Ltd) C:\Users\romai_000\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242712 2015-09-23] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040296 2015-09-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
HKU\S-1-5-21-3351817133-2445292939-1435109273-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-3351817133-2445292939-1435109273-1001\...\Run: [Spotify Web Helper] => C:\Users\romai_000\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030648 2015-07-01] (Spotify Ltd)
HKU\S-1-5-21-3351817133-2445292939-1435109273-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-26] (Disc Soft Ltd)
HKU\S-1-5-21-3351817133-2445292939-1435109273-1001\...\RunOnce: [Uninstall C:\Users\romai_000\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\romai_000\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-3351817133-2445292939-1435109273-1001\...\RunOnce: [Uninstall C:\Users\romai_000\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\romai_000\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-3351817133-2445292939-1435109273-1001\...\RunOnce: [Uninstall C:\Users\romai_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\romai_000\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\romai_000\AppData\Local\MEGAsync\ShellExtX64.dll Pas de fichier
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\romai_000\AppData\Local\MEGAsync\ShellExtX64.dll Pas de fichier
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\romai_000\AppData\Local\MEGAsync\ShellExtX64.dll Pas de fichier
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\romai_000\AppData\Local\MEGAsync\ShellExtX32.dll Pas de fichier
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\romai_000\AppData\Local\MEGAsync\ShellExtX32.dll Pas de fichier
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\romai_000\AppData\Local\MEGAsync\ShellExtX32.dll Pas de fichier
Startup: C:\Users\romai_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2015-02-24]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{a4f37b94-cb93-43b6-ac28-5dacbb7ef22c}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{a4f37b94-cb93-43b6-ac28-5dacbb7ef22c}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-10-20] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-10-20] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-07] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13] (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-07] (Oracle Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13] (Microsoft Corporation.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-04-01] (Microsoft Corporation)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-3351817133-2445292939-1435109273-1001 -> hxxp://www.bing.fr/
Edge Session Restore: HKU\S-1-5-21-3351817133-2445292939-1435109273-1001 -> est activé.

FireFox:
========
FF ProfilePath: C:\Users\romai_000\AppData\Roaming\Mozilla\Firefox\Profiles\g5lxmhcq.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-23] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-23] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-09-29] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-09-29] (Microsoft Corporation)

==================== Services (Avec liste blanche) ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 CegidCptxIntegrationService; C:\Program Files (x86)\Cegid\Cegid Common\Cegid Database Maintenance\APP\CegidDatabaseMaintenance.exe [355208 2014-01-08] (CEGID)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-26] (Disc Soft Ltd)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [131288 2015-09-23] (ELAN Microelectronics Corp.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [328624 2015-08-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43130032 2015-03-29] (Microsoft Corporation)
R2 Settings Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\SettingsLauncher.exe [1594176 2015-06-24] (Samsung Electronics CO., LTD.)
S4 SQLAgent$SQLEXPRESS; c:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [381104 2015-03-29] (Microsoft Corporation)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3025248 2015-07-07] (Samsung Electronics CO., LTD.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [Fichier non signé]

===================== Pilotes (Avec liste blanche) ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2014-07-21] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\System32\drivers\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [237568 2015-07-10] (Microsoft Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-06-12] (Disc Soft Ltd)
R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [32328 2015-09-23] (ELAN Microelectronic Corp.)
S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [41080 2015-11-13] ()
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-09-19] ()
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

========================== MD5 Pilotes =======================

C:\Windows\System32\drivers\1394ohci.sys 22CE801AD25C51E2553F41A076BB0CB2
C:\Windows\System32\drivers\3ware.sys 2C49A2441EBB24C6ACFB524C1459115F
C:\Windows\System32\drivers\ACPI.sys B87D3D07FE6F15328C6860D542F0E2BD
C:\Windows\System32\Drivers\acpiex.sys 1E3C4EDBB7F3F668B7205E351010BB79
C:\Windows\System32\drivers\acpipagr.sys 13B1C26AEDCB40082CDD97506F968129
C:\Windows\System32\drivers\acpipmi.sys B3D64FF927D611721DA73A61BF3A18B3
C:\Windows\System32\drivers\acpitime.sys 19F793B2203D94AC1F8AEDB08B494E2E
C:\Windows\System32\drivers\ADP80XX.SYS 2A24E10C1A1DE0E0035E353EED494A1C
C:\Windows\system32\drivers\afd.sys A3D96563BF46FC8A0E5756B796127D14
C:\Windows\System32\drivers\agp440.sys EF09D07626820F7F89519514C17FE768
C:\Windows\System32\DRIVERS\ahcache.sys 8A289EF0721F95267BF2404BABEE146D
C:\Windows\System32\drivers\amdk8.sys 6763084E8322A4876D1613854640F914
C:\Windows\system32\DRIVERS\atikmdag.sys E3EFE592BC324E614BF591607CBC50F5
C:\Windows\system32\DRIVERS\atikmpag.sys 8653B22467365AC4853566B2E20C36DE
C:\Windows\System32\drivers\amdkmpfd.sys 8A375CB3B6D1A56A2AEEE72A5F1D0926
C:\Windows\System32\drivers\amdppm.sys DE29D8AB57AD67D4940CAB4A48B3E230
C:\Windows\System32\drivers\amdsata.sys 4C1F9BBAF5CCD76D4642F3B92B97B454
C:\Windows\System32\drivers\amdsbs.sys F8195C1A15955180DD663E7FF4C2F6DD
C:\Windows\System32\drivers\amdxata.sys DD2F5BBCFAC4D8E48DB1A95A7EEBFF08
C:\Windows\system32\drivers\appid.sys 46AAF119090573A80D603745582229ED
C:\Windows\System32\drivers\arcsas.sys 0756EECAC010BE449D07502DF27E7701
C:\Windows\System32\drivers\asyncmac.sys A5792F971EFE86B7F56EE7299ED1082B
C:\Windows\System32\drivers\atapi.sys 8921DF6060DB5C7700AA48CB12E9EA08
C:\Windows\System32\drivers\athwbx.sys 37B33DDE5490A2DF56DFB46580356E3F
C:\Windows\System32\drivers\bxvbda.sys 00D64E82900E4EC9062805ED87C2D75A
C:\Windows\System32\drivers\BasicDisplay.sys 5164A66EC1565711A7B4CF2F143B4979
C:\Windows\System32\drivers\BasicRender.sys F4C58BBF2972BD84C73F6A14CA35AC4E
C:\Windows\System32\drivers\bcmfn2.sys 25349D0B334E528667980948ED107D89
C:\Windows\System32\Drivers\Beep.sys 1E8A9267F8886803AAE02982FC1B5BC4
C:\Windows\System32\DRIVERS\bowser.sys C9FD65687EF89715999C582D3E568812
C:\Windows\System32\drivers\btath_bus.sys AF7DEA6A0E93AF8517A310D189B656BE
C:\Windows\system32\DRIVERS\btfilter.sys 239A81CC18170F3369D389DA65E74342
C:\Windows\System32\drivers\BthAvrcpTg.sys F8DD3B0EAC1EF1D087AE47E5819540AC
C:\Windows\System32\drivers\BthEnum.sys 74C9D52F3F594529465E18B2BFF80487
C:\Windows\System32\drivers\bthhfenum.sys 647E2A425AD43637EAA01096A58B7089
C:\Windows\System32\drivers\BthHFHid.sys B95040CAD3434D9EE003065363A0FAFF
C:\Windows\system32\DRIVERS\BthLEEnum.sys 986F756D10B5A2B3971A03BD6308B94F
C:\Windows\System32\drivers\bthmodem.sys 29AEE352AED4FCD2191436D263D75347
C:\Windows\System32\drivers\bthpan.sys 38C97371F058E889F730BF35530732F4
C:\Windows\System32\Drivers\BTHport.sys FCC211B0F46D831506D0D76539203899
C:\Windows\System32\Drivers\BTHUSB.sys 5866AE46EEF644E6DE5C95942AE419D7
C:\Windows\System32\drivers\buttonconverter.sys 854AF190F55E6D70EC65A85798F896E2
C:\Windows\System32\drivers\capimg.sys A10A1E05A943B10ECE5D57D131B7404D
C:\Windows\System32\DRIVERS\cdfs.sys F2829DC6D292DCAC5029893BB2E9FEE3
C:\Windows\System32\drivers\cdrom.sys CA160E02F35A61C6F5C681FB4669C519
C:\Windows\System32\drivers\circlass.sys 60D7D304DF75DFF6A46CF633F583B592
C:\Windows\System32\drivers\CLFS.sys FF9D4BCE19E5D36CB3A845A3286DA6C3
C:\Windows\System32\drivers\CmBatt.sys 8EBA63416EC166EBA6EF6D34A505D8C8
C:\Windows\System32\Drivers\cng.sys 3B64DA873CEA5BEC42570BFF1054A014
C:\Windows\System32\DRIVERS\cnghwassist.sys 5EEA0856000F81B3D709BC81B3AA1EF2
C:\Windows\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys 74CD3BF688E2B408227FE012A2F2D8ED
C:\Windows\System32\drivers\condrv.sys D38774D1D383A2CDB9A4F64B7206913B
C:\Windows\System32\drivers\dam.sys F038EAF73AAB72A4A89185A5A7B9FD75
C:\Windows\System32\Drivers\dfsc.sys 25435407D97419627F4B10653433BF2B
C:\Windows\system32\DRIVERS\ssudbus.sys 73BDD44A6088916964945886F9025409
C:\Windows\System32\drivers\disk.sys FDCD449AE9E75D7690593D16ADAF4DB4
C:\Windows\System32\drivers\dmvsc.sys F10A8F6D036CEDD14A5471782C52F041
C:\Windows\system32\drivers\drmkaud.sys 45771610FF181434073B5A0A00F20F8D
C:\Windows\System32\drivers\dtlitescsibus.sys 080598EFE474B7A28D7260C3AC389E36
C:\Windows\System32\drivers\dxgkrnl.sys 89C9C3745F270EF93988DA57BC6AA62B
C:\Windows\System32\drivers\evbda.sys 3070013B01EDA42C7EB67D731340C396
C:\Windows\System32\drivers\EhStorClass.sys 59EE187E333EE9914DD9BEA5F4E0D85D
C:\Windows\System32\drivers\EhStorTcgDrv.sys 9297F1CC486F24BDFD2874156AC5430F
C:\Windows\System32\drivers\errdev.sys F7FCCA6300485EF60CEA6D991D6C8C78
C:\Windows\system32\DRIVERS\ETD.sys 77DB2D3FF0D8FDFC46CCCC0999AF35B0
C:\Windows\system32\DRIVERS\ETDSMBus.sys 845DD60FFDA32CB7D29F9E3E8C742017
C:\Windows\System32\Drivers\exfat.sys DCCDC3F35F0618692117DF90800A4284
C:\Windows\System32\Drivers\fastfat.sys 5A1C6AFFF6946C5C21A27AE05084C0D1
C:\Windows\System32\drivers\fcvsc.sys 4E4B7D935DBF522B2F23D3573596181D
C:\Windows\System32\drivers\fdc.sys 583EB1C7690E361213BBD0472155128B
C:\Windows\System32\drivers\filecrypt.sys CDFD81CACE0E11596A3BB61EC4CF6467
C:\Windows\System32\drivers\fileinfo.sys 3F02FEDAE894CBF4BAADDF8C8E1D53A8
C:\Windows\System32\drivers\filetrace.sys 2824933386E30DE5BA089DF539CE19A3
C:\Windows\System32\drivers\flpydisk.sys 6A598249640F8BEDD79EC73917E1664F
C:\Windows\System32\drivers\fltmgr.sys 44B6A6832134DF651E887E941478CA35
C:\Windows\System32\drivers\FsDepends.sys 3F3B9E8CECD5604BC7746EF3A852EB67
C:\Windows\System32\Drivers\Fs_Rec.sys A60583221C7BB7CEC35C63285A297BE1
C:\Windows\System32\DRIVERS\fvevol.sys 58013A50225174EEF1410E37795D7908
C:\Windows\System32\drivers\gagp30kx.sys 0DAAE3EFCE00133AB3E383A36C47CDAF
C:\Windows\System32\drivers\vmgencounter.sys F59155B95D01C08F9ED774B626B504A1
C:\Windows\System32\drivers\genericusbfn.sys AE24452F55C6F1784CBD7489D0CDDB02
C:\Windows\System32\Drivers\msgpioclx.sys 96F0D3A583A91B634EE2AC2507356EDC
C:\Windows\System32\drivers\gpuenergydrv.sys BA2455D93BD57989A04FE4094AA6F941
C:\Windows\System32\drivers\HDAudBus.sys C277A49F8A8295840DEBC9240B75A282
C:\Windows\System32\drivers\HidBatt.sys D5A57EF4822A0388352FFF9F5CD53495
C:\Windows\System32\drivers\hidbth.sys 39575B53EB80C77FF2A3F1449D00B7F5
C:\Windows\System32\drivers\hidi2c.sys 35C3B602664116E737FF729F9A7156AD
C:\Windows\System32\drivers\hidinterrupt.sys C4ABE526BBF2A18E8AF70177FBAD9C6E
C:\Windows\System32\drivers\hidir.sys 348416C7D7EB05BC3099FE2F2B27985C
C:\Windows\System32\drivers\hidusb.sys 01F732724AF6EFE69886DA95A4E51820
C:\WINDOWS\system32\drivers\hitmanpro37.sys 1FCE586EC40BAD1DC10D57A6270A4DD6
C:\Windows\System32\drivers\HpSAMD.sys 3844CE7DD23530CAD59D8CABA57CCB05
C:\Windows\System32\drivers\HTTP.sys CA6EADBB8731CA27BDA4037BF290AC14
C:\Windows\System32\drivers\hwpolicy.sys 8841D927EB1F7FFC8B1805BC0CF190ED
C:\Windows\System32\drivers\hyperkbd.sys 53436C3835E80F4421652A67F44D6313
C:\Windows\system32\DRIVERS\HyperVideo.sys B2DC6C2F313EBB967B556B4E73A75451
C:\Windows\System32\drivers\i8042prt.sys D4CDEE4A62BDFFF6E8558A9552148EA7
C:\Windows\System32\drivers\iaLPSSi_GPIO.sys 16A10CCEDCF5AC4CAAE43DC9FC40392F
C:\Windows\System32\drivers\iaLPSSi_I2C.sys F1DF87463AC308047B089E9F0456B4C8
C:\Windows\System32\drivers\iaStorA.sys 57CD95DEB3529181BCC931DD2DFB2341
C:\Windows\System32\drivers\iaStorAV.sys 9FDD4763A115D04F565C38183DE4646F
C:\Windows\System32\drivers\iaStorV.sys 4E69EE8F8E5DA036535D433C544AF9E2
C:\Windows\System32\drivers\ibbus.sys 15C59DF20F74A0C2C764B991FED7F4A5
C:\Windows\system32\DRIVERS\igdkmd64.sys F341FA39F1CEE05524759084FCC4E54F
C:\Windows\system32\drivers\intelaud.sys 7BFAE7031DFCD04017680D23ADBCA2F0
C:\Windows\system32\drivers\RTKVHD64.sys 8DEDB08D32562867A3E83F0184F39ED4
C:\Windows\system32\DRIVERS\IntcDAud.sys B375D8686E1BD2B79C0F00E3868A8C3B
C:\Windows\System32\drivers\intelide.sys 498759139F71142888CF7EFA1ABE18C8
C:\Windows\System32\drivers\intelpep.sys DC270DDCDDC2EF65D484A65CC5166222
C:\Windows\System32\drivers\intelppm.sys B4D9C777762B1F7356958B9C0AA93BEB
C:\Windows\System32\drivers\ioqos.sys 22BD83268B80A8C89AAC0BDF46E4EB5D
C:\Windows\System32\DRIVERS\ipfltdrv.sys A49E47A6E1429123F46A7CA9C05AEFC1
C:\Windows\System32\drivers\IPMIDrv.sys E0C276985AF968CE295B8E09C121321F
C:\Windows\System32\drivers\ipnat.sys 5D3744E6FDEC1A6FB3FA9B1DD4AF0694
C:\Windows\System32\drivers\irenum.sys B18202D72C0EF4B53CEC6F59E3E1B955
C:\Windows\System32\drivers\isapnp.sys CD04CBCCCB4C0E4BB06B98E0F45C888A
C:\Windows\System32\drivers\msiscsi.sys 5D90E942C94B20E0F321015C0ABF3EEA
C:\Windows\System32\drivers\iwdbus.sys F9E3612053E0947166037CB8EFEF7FB8
C:\Windows\System32\drivers\kbdclass.sys 4192DFE6CA143C0AD8AF42C51A82BECA
C:\Windows\System32\drivers\kbdhid.sys B63C0DB341DCB46CF7AA259333A737DD
C:\Windows\System32\drivers\kdnic.sys 53C79A7FABDAAFD11EAB31963FB2CED7
C:\Windows\System32\Drivers\ksecdd.sys 1E99B26BDB9B9C9BC775ED4543558560
C:\Windows\System32\Drivers\ksecpkg.sys 6198A79011C67497B324798B3D4272CE
C:\Windows\system32\drivers\ksthunk.sys 503597D9B72DBD9998F722F12A51ACFC
C:\Windows\System32\drivers\lltdio.sys DB789F57CE94C827FBFF709CA5ABD29E
C:\Windows\System32\drivers\lsi_sas.sys 3BB39166E446D456C277C17DFEA3DAC6
C:\Windows\System32\drivers\lsi_sas2i.sys 25CF625E46307A5D6674C8DFA1A289AA
C:\Windows\System32\drivers\lsi_sas3i.sys 722C52B12EA4C198D56994934C9DDAB6
C:\Windows\System32\drivers\lsi_sss.sys 3371FF1D5D745C3306C6A2C4E99C25A9
C:\Windows\system32\drivers\luafv.sys C692B9C0352315417CF49FFA664957A3
C:\Windows\System32\drivers\megasas.sys B2ED9A7A5587A128A0EFD0DBE7662E95
C:\Windows\System32\drivers\megasr.sys 083F71488E6780A67290273180256EA5
C:\Windows\system32\DRIVERS\TeeDriverx64.sys E0EF6C1399A9B1AAA0B28590411BED04
C:\Windows\System32\drivers\mlx4_bus.sys 5907A10D46747A2B6DBFD6A198254DC2
C:\Windows\system32\drivers\mmcss.sys 91ED6F0EDF4158D63C52194F17D4F42E
C:\Windows\System32\drivers\modem.sys 2C4CC9F6ADBED5A6D131FDB97A78FF68
C:\Windows\System32\drivers\monitor.sys D8DB13529C8AD6FBAF8E2F382024374F
C:\Windows\System32\drivers\mouclass.sys 2DAAF1EE1C30F2FCF59851A64ADA0422
C:\Windows\System32\drivers\mouhid.sys D30FE074503283829ED194BCAE6239C3
C:\Windows\System32\drivers\mountmgr.sys D5EC9413527B286CFEEB0294C53ABB95
C:\Windows\System32\drivers\mpsdrv.sys 989A1BBD9C49B107B4A47D06E6827A69
C:\Windows\system32\drivers\mrxdav.sys C1E74DD1D84861D8F12FF8BC0BA11975
C:\Windows\System32\DRIVERS\mrxsmb.sys 1DF2C5FD2710A13B07E663A12F0E0EEA
C:\Windows\System32\DRIVERS\mrxsmb10.sys 185932B1149BD707F8A13174CDAB365B
C:\Windows\System32\DRIVERS\mrxsmb20.sys 99E24D4DBACBC569833B9A67710D65E7
C:\Windows\System32\drivers\bridge.sys 6F8BE4FB6262012E61BBADB5444628DC
C:\Windows\System32\Drivers\Msfs.sys 7C55F1751CAC199680D4489D1EE46544
C:\Windows\System32\drivers\msgpiowin32.sys 988588C16A53C2581488C15FF18934BF
C:\Windows\System32\drivers\mshidkmdf.sys 09622DBC24D0178F15DB8461BB6970DF
C:\Windows\System32\drivers\mshidumdf.sys 34BB07495C0159BE4189841E16F3BC2F
C:\Windows\System32\drivers\msisadrv.sys 7BF3F0DA362C053918F5F2EC43CE39E2
C:\Windows\system32\drivers\MSKSSRV.sys B2D0FD21FE67D6434769CC6F7A7883CA
C:\Windows\System32\drivers\mslldp.sys FB3801F176376286A3F8F20FFB8CDC53
C:\Windows\system32\drivers\MSPCLOCK.sys 8CBDF0E7A6CD824352F37A682A33DF7E
C:\Windows\system32\drivers\MSPQM.sys 33E5B6261D69ACD4948A5C64B9D8F29F
C:\Windows\System32\Drivers\MsRPC.sys 557DF8C0DBBBF518AC395C6EB1B179AE
C:\Windows\System32\drivers\mssmbios.sys 0A29AFA668F5DD50482A98ECE70C77A7
C:\Windows\system32\drivers\MSTEE.sys 30CE30877FD5BFADE74FA27D7829BF89
C:\Windows\System32\drivers\MTConfig.sys 13D88C0B8A2FA001CD72D454955A6974
C:\Windows\System32\Drivers\mup.sys 00C7F0F06A0A48B9CDB6B3AC3BE288F0
C:\Windows\System32\drivers\mvumis.sys 8E237527CA260C71D39ED4081BDF3419
C:\Windows\System32\DRIVERS\nwifi.sys 48D0587A8302FD3302CFE6F59F7345B0
C:\Windows\System32\drivers\ndfltr.sys CF8296427834CF8BBB3EE1444C17362D
C:\Windows\System32\drivers\ndis.sys 616F40B897DA651221F86A1741E9609B
C:\Windows\System32\drivers\ndiscap.sys A0719D1EBA971DFC5DF5F7CC010385F8
C:\Windows\System32\drivers\NdisImPlatform.sys 0C557932CCCC65AEB37326DD36504527
C:\Windows\System32\DRIVERS\ndistapi.sys 56F9345D1945826135FBAB7589592B1F
C:\Windows\System32\drivers\ndisuio.sys AADFC340939D99E5D756E713E1D452EB
C:\Windows\System32\drivers\NdisVirtualBus.sys 312DFD787D99D3BF1427B0388BC04F71
C:\Windows\System32\drivers\ndiswan.sys 2103F43E0A1ECFB14B7E1B889F5F24D7
C:\Windows\System32\DRIVERS\ndiswan.sys 2103F43E0A1ECFB14B7E1B889F5F24D7
C:\Windows\System32\DRIVERS\NDProxy.sys 6E98F16983C4AE8703FF9F90AB4B31DD
C:\Windows\System32\drivers\Ndu.sys F1B7CC77F412C8D45B2DDCF76EDA4F9D
C:\Windows\System32\drivers\netbios.sys 824FDC990A3F79069BE468A132EB6888
C:\Windows\System32\DRIVERS\netbt.sys F0D791348AD254360CC3C3E501CCB745
C:\Windows\System32\drivers\netvsc.sys 46E862DA2CF8F351375EF537276B69B5
C:\Windows\System32\Drivers\Npfs.sys 41557BE174E9EC6AC703A8A4ADBC6650
C:\Windows\System32\drivers\npsvctrig.sys AC3F70FCFBCE97AA2F12BA43EE13B86E
C:\Windows\System32\drivers\nsiproxy.sys 66A98C407085B8920DF1E6D722F1ADB8
C:\Windows\System32\Drivers\NTFS.sys 466EC5659C02ED53DBD47DC1BC2B8086
C:\Windows\System32\Drivers\Null.sys 383E546EF4982262A0EF6CC2B6E9D525
C:\Windows\System32\drivers\nvraid.sys 466F875F1D4C6ABB46AF28007009237C
C:\Windows\System32\drivers\nvstor.sys 76F19EAE7A52CBAF7B8EC428BE6E0DA0
C:\Windows\System32\drivers\nv_agp.sys 0D0CB77D74B38E0EC62341C19E469D8D
C:\Windows\System32\drivers\parport.sys 38F1AE32339731F6E5A7281AE8042545
C:\Windows\System32\drivers\partmgr.sys 707889D2F95AAE8C9DD254D8767AD908
C:\Windows\System32\drivers\pci.sys 2834089EA4E550FF3B96E61FB4AA34ED
C:\Windows\System32\drivers\pciide.sys 3D587E4295B11B8480F7ACB09A89D718
C:\Windows\System32\drivers\pcmcia.sys B8F07002B5F1DA23CFF979C2806B09F3
C:\Windows\System32\drivers\pcw.sys FF588077D0C6AC2EA3FCBF1903CE08D0
C:\Windows\System32\drivers\pdc.sys 70469C8AC4AD367295E70CFDD81B754C
C:\Windows\System32\drivers\peauth.sys 688F47C342E1BBC87A48AB71D316233E
C:\Windows\System32\drivers\percsas2i.sys 189265498945593D5256CFF7FEBB9665
C:\Windows\System32\drivers\percsas3i.sys 9B86965114F6831A5130EFE6657B17D9
C:\Windows\System32\drivers\raspptp.sys 1433EB7908E5E1E20FFD50E4126C3484
C:\Windows\System32\drivers\processr.sys 22DE54C3974E4FD98F61D095C22C59B7
C:\Windows\System32\drivers\pacer.sys EDD52C352CBAAAD13FD7BD5DCEA309B3
C:\Windows\system32\drivers\qwavedrv.sys 51590F442C6E5D43244BA30DDB0CE79D
C:\Windows\System32\drivers\RadioHIDMini.sys 194ED3C117525613E701FF257882303E
C:\Windows\System32\DRIVERS\rasacd.sys E951E70019865B06126AF850BCCA2026
C:\Windows\System32\drivers\AgileVpn.sys 0BF8607133AE264BC3C41A5BAA5FFB7B
C:\Windows\System32\drivers\rasl2tp.sys CA60F6C03611AF1710BC903ED9F566FB
C:\Windows\System32\drivers\raspppoe.sys E5FA41160F5A3D78D8F7765E5C5F6BB0
C:\Windows\System32\drivers\rassstp.sys DF0834AE921E633E05D1FDC55C318957
C:\Windows\System32\DRIVERS\rdbss.sys FC9B7AC6E2B837EF7CD6C64F7068D41D
C:\Windows\System32\drivers\rdpbus.sys FB7375657F8A5932C35EAA45E9B4B416
C:\Windows\System32\drivers\rdpdr.sys A32AED8C644734B283A7C9D08D76064D
C:\Windows\System32\drivers\rdpvideominiport.sys 37CC7E41243EFBB4FBC0510E5CA32A02
C:\Windows\System32\drivers\rdyboost.sys DAF957B25A35757E9D814611FAE8FE3B
C:\Windows\System32\Drivers\ReFSv1.sys 2C72E029C153D25325CA182A669E4ADE
C:\Windows\System32\drivers\rfcomm.sys 67E83C0C9A2B5ACEE9EF690E6B7E9189
C:\Windows\System32\drivers\rspndr.sys DC66C1D262D64E30A30B68E9F21AC74B
C:\Windows\System32\drivers\rt640x64.sys 179E6BCF8D16AD39C137CB4FCFE015C5
C:\Windows\System32\drivers\vms3cap.sys 88F7703F2A4677C828124AE2110D3EBC
C:\Windows\System32\drivers\sbp2port.sys B467E932FE4E16E201DC7E56870CB559
C:\Windows\System32\DRIVERS\scfilter.sys 31DDA0716EC265CA57DAF9D2295FD76F
C:\Windows\System32\drivers\sdbus.sys 004C66464D8FE76D5DA78BE6777D61AF
C:\Windows\System32\drivers\sdstor.sys F4BF50A7D16A97A887BFA0F193693C42
C:\Windows\System32\drivers\SerCx.sys 9DB0BBE3ABE1F49651AE51EC5BCABE58
C:\Windows\System32\drivers\SerCx2.sys C4AF79C37334D995D95C22C14FDBF7FD
C:\Windows\System32\drivers\serenum.sys FC541A272F47BE03E67A9FCB87FA8C3E
C:\Windows\System32\drivers\serial.sys 2A5F5F95FCA123DCBF53B5F603B64789
C:\Windows\System32\drivers\sermouse.sys C8738887228B7BFA3B1A906816A8BB12
C:\Windows\System32\drivers\sfloppy.sys 67832B68752CDF7FDE56949E4A2E70BF
C:\Windows\System32\drivers\SiSRaid2.sys ED058030296CF9B79C8D48BF43724323
C:\Windows\System32\drivers\sisraid4.sys 633D3D1581E9DCCD5A2D8F039104C9A5
C:\Windows\System32\drivers\spaceport.sys 187B4AD4446C59F8FCC4A10F473EE3D1
C:\Windows\System32\drivers\SpbCx.sys 2799FCA215919FDC9A87C5FCAB530828
C:\Windows\System32\DRIVERS\srv.sys AA1F23501511EFE9CF9771F6B20E8D45
C:\Windows\System32\DRIVERS\srv2.sys F5B169EDF9D5E3C7200D89D30E065D13
C:\Windows\System32\DRIVERS\srvnet.sys 2E142E027F0AA698BA4DCE49CBDB43CD
C:\Windows\system32\DRIVERS\ssudmdm.sys 5252D7BC56E5E0ED715AEA8FE173A455
C:\Windows\System32\drivers\stexstor.sys DDE064A4298FD1FBF804D3ED691E7EDB
C:\Windows\System32\drivers\storahci.sys 32C95F44108C3E7DB58F773346E3C9D0
C:\Windows\System32\drivers\vmstorfl.sys 8883C8CE4942A99B84E1CC6EFA19738E
C:\Windows\System32\drivers\stornvme.sys AE7B7E1E95BFB9340B1956C98CA52C81
C:\Windows\System32\drivers\storqosflt.sys 63513EF3121689B3A59BD217618A2E42
C:\Windows\System32\drivers\storufs.sys 000F5CFCEF0F06DC8FD1D2F568E48AE4
C:\Windows\System32\drivers\storvsc.sys 7415087F9006D6818F85F3CBD79B1A50
C:\Windows\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys 802278EE4ACCE9EA1F1481DF20EB1667
C:\Windows\System32\drivers\Synth3dVsc.sys 12D0CB1DCAE6725B6CA54CC2038C4C8C
C:\Windows\System32\drivers\tcpip.sys 7EBD20284AC9BF9F0A020B86769BB074
C:\Windows\System32\drivers\tcpip.sys 7EBD20284AC9BF9F0A020B86769BB074
C:\Windows\System32\drivers\tcpipreg.sys D378A1AF58AFA84BB6AC753F2C1BE9F4
C:\Windows\system32\DRIVERS\tdx.sys D42AC03ACF9CA67693D1D9BB4D2A0BC8
C:\Windows\System32\drivers\terminpt.sys CCDBD2817C10A4F631280CBB3AE44FFB
C:\Windows\system32\drivers\tpm.sys F4AEDABC8F3A9D632F8206D0C7F8CA09
C:\Windows\System32\drivers\TrueSight.sys FD44FA80DA03EA144153A76DEBBB61B4
C:\Windows\System32\drivers\TsUsbFlt.sys 676C801CAA61AADD0C918CC536A74B78
C:\Windows\System32\drivers\TsUsbGD.sys 2BB6CC0DD1CEE86330743B56FA9FE91F
C:\Windows\System32\drivers\tunnel.sys 14B46248612DF1B1A695040FFFBCFAFC
C:\Windows\System32\drivers\uagp35.sys D0BE5EA1652D55029C9A898FB8ACFCE0
C:\Windows\System32\drivers\uaspstor.sys 13C15E4B238895FE4731DB1D612EEB5F
C:\Windows\System32\Drivers\UcmCx.sys BEBB8B55C5F99B69EEE39A9D7BADB21E
C:\Windows\System32\drivers\UcmUcsi.sys DE3EDAF609D00EA2E54986E6459796A6
C:\Windows\System32\drivers\ucx01000.sys FB1C1D8B96A482F3581338D6752E1D6C
C:\Windows\System32\drivers\udecx.sys 4E1543ACE2F6E2846713E5123D9D4159
C:\Windows\System32\DRIVERS\udfs.sys CDCA9CC1D8293E75218D8FF85F2337A4
C:\Windows\System32\drivers\UEFI.sys BC683E19307C533C7161DB7A58051347
C:\Windows\System32\drivers\ufx01000.sys D14B42C26DE402F316D49667D15446F0
C:\Windows\System32\drivers\UfxChipidea.sys 192470BE4321791FBB25F379D0141D6F
C:\Windows\System32\drivers\ufxsynopsys.sys F7BD838E84E6B286DBCE068EFB8C0800
C:\Windows\System32\drivers\uliagpkx.sys A25842AC180F0E8B02380ECB8ADA1AF5
C:\Windows\System32\drivers\umbus.sys 21088F43172525C7E02D335A3327F46C
C:\Windows\System32\drivers\umpass.sys 294A291B5D48FE8F38DD94B7272442C5
C:\Windows\System32\drivers\urschipidea.sys A7A52EDDC3FAF183D6AC4774690ADF13
C:\Windows\System32\drivers\urscx01000.sys 2EEA0897DD9E30E958B508D557F0B5E4
C:\Windows\System32\drivers\urssynopsys.sys DC54D775A3A61E4CDE871B4E38A1459A
C:\Windows\System32\drivers\usbccgp.sys 18B63A0980F4AA1E6D7879B253980E37
C:\Windows\System32\drivers\usbcir.sys 1C60A1A3C8E1E819E16F12BAEB1C83F8
C:\Windows\System32\drivers\usbehci.sys 9A3E39F85DC6E3B9F792F1095ACFF788
C:\Windows\System32\drivers\usbhub.sys 0A368247A900656CC0678117DFC3A87C
C:\Windows\System32\drivers\UsbHub3.sys C08449092043601887A1743350888635
C:\Windows\System32\drivers\usbohci.sys 72EA850B59F40C25A4FEDDA5FE84EFEB
C:\Windows\System32\drivers\usbprint.sys 47B2B2DE152E25546944049CA1170BB1
C:\Windows\System32\drivers\usbser.sys 1F72E1A7E1858B7B3FF81522FCEBDE95
C:\Windows\System32\drivers\USBSTOR.SYS CD35467670DF1E6FBF36DA308F0C872B
C:\Windows\System32\drivers\usbuhci.sys DFA92EA105DD1073B43FB210EEB03DD4
C:\Windows\System32\Drivers\usbvideo.sys B1484D4BBC6B7B424F1CD1554B0AFB84
C:\Windows\System32\drivers\USBXHCI.SYS C67A03F54A1EA683F4880A481EE5FF6C
C:\Windows\System32\drivers\vdrvroot.sys 26223003DDFB347B5CF3EC0B56DB066B
C:\Windows\System32\drivers\VerifierExt.sys A417284BC6B5C2EEF63F2C5154473530
C:\Windows\System32\drivers\vhdmp.sys 4C39C05A72EB14C0567501C7E087E564
C:\Windows\System32\drivers\vhf.sys C42206A15078596FDE8E89BB629DE342
C:\Windows\System32\drivers\vmbus.sys 248D9F911A5C94CF8477125DD0C3A291
C:\Windows\System32\drivers\VMBusHID.sys 3E98DD4E0CBD6B4F9CBD0E9E0EDF541E
C:\Windows\System32\drivers\volmgr.sys 91F165C5D71D9DCB18D4661CF10D1084
C:\Windows\System32\drivers\volmgrx.sys 17042748AC05862A0283D32575220080
C:\Windows\System32\drivers\volsnap.sys 823A237D871CD652C6BFD47BECB6810A
C:\Windows\System32\drivers\vpci.sys 78727FA284C2095EED660D71CD3C9AEF
C:\Windows\System32\drivers\vsmraid.sys 2415961D561E02F5E46B7C1C687A6788
C:\Windows\System32\drivers\vstxraid.sys 6AE9A843AE979F2DCCA5A25C07C7A5F8
C:\Windows\System32\drivers\vwifibus.sys BD232C761C59FA8D8EF626CA630E2D2E
C:\Windows\System32\drivers\vwififlt.sys 3039687AB65CEE26CF478C1F42FFCD7D
C:\Windows\System32\drivers\vwifimp.sys 37C868DDE3103130B00AD1313DAB5ACB
C:\Windows\System32\drivers\wacompen.sys FC40A7527D39F06D032A6553D22E4BF6
C:\Windows\System32\DRIVERS\wanarp.sys E9E22E116F810DAC98C5EC207F24C916
C:\Windows\System32\DRIVERS\wanarp.sys E9E22E116F810DAC98C5EC207F24C916
C:\Windows\System32\drivers\WdBoot.sys C8BA574B3BA6AE88741AC86B1FE3C1DC
C:\Windows\System32\drivers\Wdf01000.sys 927AD29D7F91B9A0C5294932374DA15E
C:\Windows\System32\drivers\WdFilter.sys C5BB7C612B4C852836BEA39593BA5F46
C:\Windows\System32\DRIVERS\wdiwifi.sys 9B2039C5673EEBF1D4E34ABC0AFB88C7
C:\Windows\System32\Drivers\WdNisDrv.sys BD193A7BD34B2E829FAF56306FEE3B09
C:\Windows\System32\drivers\wfplwfs.sys DBF5255B759212E5217A2748567A0B5C
C:\Windows\System32\drivers\wimmount.sys 4375BCBA419D19695CF566082CEF27D3
C:\Windows\System32\drivers\WindowsTrustedRT.sys 037BC6DE5F58D4A74A5BB0C12DCECDCA
C:\Windows\System32\drivers\WindowsTrustedRTProxy.sys 70BCD70BD53F2FE660ED94B025A043EB
C:\Windows\System32\drivers\winmad.sys 7792AE5403BF8975B6460DFC3428D129
C:\Windows\System32\drivers\WinUSB.SYS 811F30EB6EE8318C4171CB95AE30B9BD
C:\Windows\System32\drivers\winverbs.sys DF00381AB8665D48DE3FF794BC6760AB
C:\Windows\System32\drivers\wmiacpi.sys 623ED8E10DFEEAB7AE2CD11A0451DB79
C:\Windows\System32\Drivers\Wof.sys 78CA1FF6FE37EEFAFF99DD1C956AF60A
C:\Windows\System32\DRIVERS\wpcfltr.sys 388F2A3C771B8BEE76FD1AAF9614D08E
C:\Windows\System32\drivers\WpdUpFltr.sys 37DCE976B3935380F2F6E39ABB6BF40D
C:\Windows\system32\drivers\ws2ifsl.sys 3CD22DD5A790CF7C24D65455E565EA83
C:\Windows\System32\drivers\WudfPf.sys 835F60262E7E310080EA05F6752BF248
C:\Windows\System32\drivers\WUDFRd.sys 4E848DE29E4279C7F25EF5B34ED94FDD
C:\Windows\system32\DRIVERS\WUDFRd.sys 4E848DE29E4279C7F25EF5B34ED94FDD
C:\Windows\system32\DRIVERS\WUDFRd.sys 4E848DE29E4279C7F25EF5B34ED94FDD
C:\Windows\System32\drivers\xboxgip.sys 30021D1E0407B71E8D5D4F8DAE4E656A
C:\Windows\System32\drivers\xinputhid.sys 6851673B90D8CB332439E0339F81A6B6

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2015-11-18 13:24 - 2015-11-18 13:25 - 00041180 _____ C:\Users\romai_000\Downloads\FRST.txt
2015-11-18 13:22 - 2015-11-18 13:22 - 02008576 _____ (Farbar) C:\Users\romai_000\Downloads\FRST64 (1).exe
2015-11-18 13:21 - 2015-11-18 13:21 - 02008576 _____ (Farbar) C:\Users\romai_000\Downloads\FRST64.exe
2015-11-18 13:19 - 2015-11-18 13:19 - 00000875 _____ C:\Users\romai_000\Desktop\AdwCleaner[C6].txt
2015-11-18 13:16 - 2015-11-18 13:16 - 00016148 _____ C:\WINDOWS\system32\ROMAIN_romai_000_HistoryPrediction.bin
2015-11-18 01:16 - 2015-11-18 01:16 - 00929872 _____ (Google Inc.) C:\Users\romai_000\Downloads\ChromeSetup.exe
2015-11-17 16:14 - 2015-11-17 16:14 - 00000000 ___HD C:\$Windows.~BT
2015-11-17 13:14 - 2015-11-17 16:25 - 00000000 _____ C:\Recovery.txt
2015-11-14 22:53 - 2015-11-14 22:53 - 00000000 ____D C:\Users\romai_000\Downloads\vbates
2015-11-13 00:22 - 2015-11-13 00:22 - 00011376 _____ C:\WINDOWS\system32\.crusader
2015-11-12 22:20 - 2015-11-05 06:15 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2015-11-12 22:20 - 2015-11-05 06:13 - 00577888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-12 22:20 - 2015-11-05 05:56 - 01083072 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-11-12 22:20 - 2015-11-05 05:56 - 00025280 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-11-12 22:20 - 2015-11-05 05:20 - 21873664 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-11-12 22:20 - 2015-11-05 05:18 - 24597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-12 22:20 - 2015-11-05 05:18 - 03248128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-11-12 22:20 - 2015-11-05 05:17 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-12 22:20 - 2015-11-05 04:59 - 02675200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2015-11-12 22:20 - 2015-11-05 04:54 - 00502272 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2015-11-12 22:20 - 2015-11-05 04:47 - 19326464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-12 22:20 - 2015-11-05 04:35 - 18803712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-11-12 22:20 - 2015-11-05 04:28 - 11262976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-12 22:20 - 2015-11-05 04:27 - 02049536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2015-11-12 22:20 - 2015-11-05 04:23 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dlnashext.dll
2015-11-12 22:19 - 2015-11-05 06:15 - 08020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-12 22:19 - 2015-11-05 06:14 - 00459104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2015-11-12 22:19 - 2015-11-05 06:11 - 01392480 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-11-12 22:19 - 2015-11-05 06:06 - 03621248 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-12 22:19 - 2015-11-05 06:06 - 00966416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2015-11-12 22:19 - 2015-11-05 06:01 - 00607408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-12 22:19 - 2015-11-05 05:56 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-12 22:19 - 2015-11-05 05:30 - 00961376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-11-12 22:19 - 2015-11-05 05:24 - 02878512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-12 22:19 - 2015-11-05 05:23 - 00762888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2015-11-12 22:19 - 2015-11-05 05:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2015-11-12 22:19 - 2015-11-05 05:18 - 00539728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-12 22:19 - 2015-11-05 05:12 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2015-11-12 22:19 - 2015-11-05 05:11 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2015-11-12 22:19 - 2015-11-05 05:10 - 12504064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-12 22:19 - 2015-11-05 05:10 - 02987520 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2015-11-12 22:19 - 2015-11-05 05:07 - 01068032 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-12 22:19 - 2015-11-05 05:06 - 00453120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2015-11-12 22:19 - 2015-11-05 05:05 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-12 22:19 - 2015-11-05 05:05 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-12 22:19 - 2015-11-05 05:03 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-11-12 22:19 - 2015-11-05 05:03 - 01015808 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2015-11-12 22:19 - 2015-11-05 05:01 - 00949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-12 22:19 - 2015-11-05 05:01 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-11-12 22:19 - 2015-11-05 05:01 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-11-12 22:19 - 2015-11-05 04:59 - 03587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-12 22:19 - 2015-11-05 04:58 - 01383936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-12 22:19 - 2015-11-05 04:58 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-12 22:19 - 2015-11-05 04:56 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-11-12 22:19 - 2015-11-05 04:55 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2015-11-12 22:19 - 2015-11-05 04:42 - 02647040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-11-12 22:19 - 2015-11-05 04:40 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-11-12 22:19 - 2015-11-05 04:35 - 02639872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2015-11-12 22:19 - 2015-11-05 04:34 - 00311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2015-11-12 22:19 - 2015-11-05 04:33 - 01380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-12 22:19 - 2015-11-05 04:33 - 00650240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-12 22:19 - 2015-11-05 04:30 - 00767488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-12 22:19 - 2015-11-05 04:27 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-12 20:50 - 2015-11-13 00:35 - 00041080 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2015-11-12 20:49 - 2015-11-13 00:29 - 00000000 ____D C:\ProgramData\HitmanPro
2015-11-12 20:47 - 2015-11-12 20:49 - 11337112 _____ (SurfRight B.V.) C:\Users\romai_000\Downloads\HitmanPro_x64.exe

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2015-11-18 13:24 - 2015-10-03 13:27 - 00000000 ____D C:\FRST
2015-11-18 13:16 - 2015-10-02 14:47 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-11-18 13:15 - 2015-07-10 13:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-18 13:14 - 2015-10-02 14:45 - 00001510 _____ C:\WINDOWS\PFRO.log
2015-11-18 13:14 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-11-18 13:14 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-11-18 13:14 - 2015-07-10 10:05 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-11-18 13:12 - 2015-09-19 13:28 - 00004168 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{C5C659FC-BC88-4DDD-B8E0-28D3DFE146FD}
2015-11-18 13:12 - 2013-09-09 21:59 - 00000000 ____D C:\AdwCleaner
2015-11-18 01:22 - 2014-11-05 17:52 - 00000000 ____D C:\Program Files (x86)\Google
2015-11-18 01:19 - 2015-09-18 21:54 - 00000000 ___RD C:\Users\romai_000\Documents\MEGAsync
2015-11-18 01:12 - 2015-06-06 18:23 - 00000000 ____D C:\Users\romai_000\AppData\Roaming\Spotify
2015-11-18 01:11 - 2015-06-06 18:24 - 00000000 ____D C:\Users\romai_000\AppData\Local\Spotify
2015-11-17 16:35 - 2014-11-10 23:32 - 00000000 ____D C:\Users\romai_000\AppData\Local\CrashDumps
2015-11-17 16:26 - 2015-08-30 20:05 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-17 16:26 - 2014-11-04 23:02 - 00000000 ___HD C:\$SysReset
2015-11-17 16:07 - 2015-08-30 19:36 - 02022530 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-17 16:07 - 2015-07-10 17:24 - 00886332 _____ C:\WINDOWS\system32\perfh00C.dat
2015-11-17 16:07 - 2015-07-10 17:24 - 00178752 _____ C:\WINDOWS\system32\perfc00C.dat
2015-11-16 23:37 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\rescache
2015-11-15 15:49 - 2015-07-10 11:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-13 13:22 - 2015-02-01 22:43 - 00000000 ____D C:\Users\romai_000\AppData\Roaming\vlc
2015-11-13 02:03 - 2015-10-03 16:14 - 00000000 ____D C:\Users\romai_000\AppData\Roaming\.ACEStream
2015-11-13 02:03 - 2015-10-03 16:13 - 00000000 ____D C:\Users\romai_000\AppData\Roaming\ACEStream
2015-11-13 00:32 - 2015-07-10 12:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-12 22:53 - 2014-11-09 14:39 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-11-12 22:53 - 2014-11-09 14:32 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-12 22:40 - 2014-11-06 13:51 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-12 22:40 - 2013-08-22 14:25 - 00000167 _____ C:\WINDOWS\win.ini
2015-11-12 22:23 - 2015-01-12 20:57 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-11-12 19:17 - 2015-08-30 20:57 - 00002394 _____ C:\Users\romai_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-12 19:17 - 2014-11-08 16:03 - 00000000 __RDO C:\Users\romai_000\OneDrive
2015-11-03 19:20 - 2015-10-02 14:53 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-03 19:20 - 2015-10-02 14:53 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-10-27 18:43 - 2014-11-06 13:50 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Fichiers à la racine de certains dossiers =======

2015-06-11 17:15 - 2014-11-08 19:45 - 0000226 _____ () C:\Program Files\update-FM2015.bat
2015-06-11 17:15 - 2013-11-06 12:28 - 0000732 _____ () C:\Program Files\visit-www.nosteam.ro.html
2014-11-21 09:28 - 2015-04-04 17:01 - 0000034 _____ () C:\Users\romai_000\AppData\Local\PdfPort.ini
2014-11-11 17:40 - 2014-11-11 17:40 - 0005621 _____ () C:\Users\romai_000\AppData\Local\recently-used.xbel
2015-08-30 19:11 - 2015-08-30 19:11 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Certains fichiers dans TEMP:
====================
C:\Users\romai_000\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll
[2015-07-10 12:00] - [2015-09-18 23:23] - 0680256 ____A (Microsoft Corporation) DFE89CEAE65A3276A71C82113A2F1BFD

C:\WINDOWS\SysWOW64\dnsapi.dll EST ABSENT <==== ATTENTION
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

==================== BCD ================================

Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur          {fwbootmgr}
displayorder            {bootmgr}
timeout                 0

Gestionnaire de d‚marrage Windows
---------------------------------
identificateur          {bootmgr}
device                  partition=\Device\HarddiskVolume2
path                    \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description             Windows Boot Manager
locale                  fr-FR
inherit                 {globalsettings}
default                 {current}
resumeobject            {a044f20c-3369-11e2-a458-e8039a94ad2e}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {a044f1fb-3369-11e2-a458-e8039a94ad2e}
device                  ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{a044f1fc-3369-11e2-a458-e8039a94ad2e}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  en-us
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  Recovery
osdevice                ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{a044f1fc-3369-11e2-a458-e8039a94ad2e}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {a044f204-3369-11e2-a458-e8039a94ad2e}
device                  ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{a044f205-3369-11e2-a458-e8039a94ad2e}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  en-GB
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  Recovery
osdevice                ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{a044f205-3369-11e2-a458-e8039a94ad2e}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {a044f209-3369-11e2-a458-e8039a94ad2e}
device                  ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{a044f20a-3369-11e2-a458-e8039a94ad2e}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  fr-FR
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  Recovery
osdevice                ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{a044f20a-3369-11e2-a458-e8039a94ad2e}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {current}
device                  partition=C:
path                    \WINDOWS\system32\winload.efi
description             Windows 10
locale                  fr-FR
inherit                 {bootloadersettings}
recoverysequence        {a044f20e-3369-11e2-a458-e8039a94ad2e}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \WINDOWS
resumeobject            {a044f20c-3369-11e2-a458-e8039a94ad2e}
nx                      OptIn
bootmenupolicy          Standard

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {a044f20e-3369-11e2-a458-e8039a94ad2e}
device                  ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{a044f20f-3369-11e2-a458-e8039a94ad2e}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  fr-FR
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  PushButtonReset
osdevice                ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{a044f20f-3369-11e2-a458-e8039a94ad2e}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur          {a044f1f7-3369-11e2-a458-e8039a94ad2e}
device                  partition=C:
path                    \windows\system32\winresume.efi
description             Windows Resume Application
locale                  fr-FR
inherit                 {resumeloadersettings}
recoverysequence        {a044f1fb-3369-11e2-a458-e8039a94ad2e}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur          {a044f202-3369-11e2-a458-e8039a94ad2e}
device                  partition=C:
path                    \WINDOWS\system32\winresume.efi
description             Windows Resume Application
locale                  fr-FR
inherit                 {resumeloadersettings}
recoverysequence        {a044f204-3369-11e2-a458-e8039a94ad2e}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur          {a044f207-3369-11e2-a458-e8039a94ad2e}
device                  partition=C:
path                    \WINDOWS\system32\winresume.efi
description             Windows Resume Application
locale                  fr-FR
inherit                 {resumeloadersettings}
recoverysequence        {a044f209-3369-11e2-a458-e8039a94ad2e}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur          {a044f20c-3369-11e2-a458-e8039a94ad2e}
device                  partition=C:
path                    \WINDOWS\system32\winresume.efi
description             Windows Resume Application
locale                  fr-FR
inherit                 {resumeloadersettings}
recoverysequence        {a044f20e-3369-11e2-a458-e8039a94ad2e}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Testeur de m‚moire Windows
--------------------------
identificateur          {memdiag}
device                  partition=\Device\HarddiskVolume2
path                    \EFI\Microsoft\Boot\memtest.efi
description             Diagnostics m‚moire Windows
locale                  fr-FR
inherit                 {globalsettings}
badmemoryaccess         Yes

ParamŠtres EMS
--------------
identificateur          {emssettings}
bootems                 No

ParamŠtres du d‚bogueur
-----------------------
identificateur          {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

Erreurs de m‚moire RAM
----------------------
identificateur          {badmemory}
badmemorylist           0x10007

ParamŠtres globaux
------------------
identificateur          {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur          {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

ParamŠtres de l'hyperviseur
-------------------
identificateur          {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

ParamŠtres du chargeur de reprise
---------------------------------
identificateur          {resumeloadersettings}
inherit                 {globalsettings}

Options de p‚riph‚rique
-----------------------
identificateur          {a044f1fc-3369-11e2-a458-e8039a94ad2e}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume1
ramdisksdipath          \Recovery\WindowsRE\boot.sdi

Options de p‚riph‚rique
-----------------------
identificateur          {a044f1fd-3369-11e2-a458-e8039a94ad2e}
description             Windows Setup
ramdisksdidevice        partition=C:
ramdisksdipath          \$WINDOWS.~BT\Sources\SafeOS\boot.sdi

Options de p‚riph‚rique
-----------------------
identificateur          {a044f205-3369-11e2-a458-e8039a94ad2e}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume1
ramdisksdipath          \Recovery\WindowsRE\boot.sdi

Options de p‚riph‚rique
-----------------------
identificateur          {a044f206-3369-11e2-a458-e8039a94ad2e}
description             Windows Setup
ramdisksdidevice        partition=C:
ramdisksdipath          \$WINDOWS.~BT\Sources\SafeOS\boot.sdi

Options de p‚riph‚rique
-----------------------
identificateur          {a044f20a-3369-11e2-a458-e8039a94ad2e}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume5
ramdisksdipath          \Recovery\WindowsRE\boot.sdi

Options de p‚riph‚rique
-----------------------
identificateur          {a044f20b-3369-11e2-a458-e8039a94ad2e}
description             Windows Setup
ramdisksdidevice        partition=C:
ramdisksdipath          \$WINDOWS.~BT\Sources\SafeOS\boot.sdi

Options de p‚riph‚rique
-----------------------
identificateur          {a044f20f-3369-11e2-a458-e8039a94ad2e}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume5
ramdisksdipath          \Recovery\WindowsRE\boot.sdi



LastRegBack: 2015-11-12 22:08

==================== Fin de FRST.txt ============================