OTL logfile created on: 15/08/2016 20:21:46 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Adrien\Downloads
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18426)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
2,93 Gb Total Physical Memory | 1,50 Gb Available Physical Memory | 51,23% Memory free
5,86 Gb Paging File | 3,36 Gb Available in Paging File | 57,35% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 93,33 Gb Free Space | 40,08% Space Free | Partition Type: NTFS
 
Computer Name: ADRIEN | User Name: OHurel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (All) ==========[/color]
 
PRC - [2016/08/15 13:51:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrien\Downloads\OTL.exe
PRC - [2016/07/13 19:25:16 | 029,494,400 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2016/07/08 16:50:50 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
PRC - [2016/06/28 17:38:00 | 000,392,136 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2016/06/25 01:45:12 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2016/06/22 02:13:02 | 000,598,552 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
PRC - [2016/05/25 10:31:20 | 001,687,680 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2016/05/25 10:30:36 | 001,364,096 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2016/04/09 07:37:34 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
PRC - [2015/12/22 03:53:58 | 000,236,928 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\avp.exe
PRC - [2015/12/22 03:52:14 | 000,220,072 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\avpui.exe
PRC - [2015/10/05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2015/08/12 17:03:38 | 000,390,416 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2015/07/08 21:03:46 | 001,683,232 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
PRC - [2015/07/08 21:03:46 | 001,093,920 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
PRC - [2015/05/09 19:08:49 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2015/04/13 05:19:24 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe
PRC - [2014/08/19 09:59:00 | 004,768,360 | ---- | M] (Almico Software (www.almico.com)) -- C:\Program Files\SpeedFan\speedfan.exe
PRC - [2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
PRC - [2013/08/27 12:42:50 | 000,358,480 | ---- | M] (VMware, Inc.) -- C:\Windows\System32\vmnetdhcp.exe
PRC - [2013/08/27 12:42:14 | 000,437,328 | ---- | M] (VMware, Inc.) -- C:\Windows\System32\vmnat.exe
PRC - [2013/08/27 11:50:10 | 000,086,096 | ---- | M] (VMware, Inc.) -- C:\Program Files\VMware\VMware Player\vmware-authd.exe
PRC - [2013/08/26 23:33:26 | 000,719,416 | ---- | M] (VMware, Inc.) -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
PRC - [2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
PRC - [2011/10/14 04:36:26 | 000,107,816 | ---- | M] (Synaptics Incorporated) -- C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
PRC - [2011/10/14 04:36:24 | 002,299,176 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
PRC - [2011/05/04 06:28:31 | 000,427,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011/02/11 19:26:30 | 000,172,568 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpers.exe
PRC - [2011/02/11 19:26:26 | 000,171,032 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hkcmd.exe
PRC - [2010/11/20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe
PRC - [2010/11/20 14:17:48 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\servicing\TrustedInstaller.exe
PRC - [2010/11/20 14:17:47 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
PRC - [2010/11/20 14:17:16 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
PRC - [2010/07/04 21:51:26 | 000,017,408 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe
PRC - [2010/03/23 14:53:06 | 000,495,708 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2010/03/23 14:53:06 | 000,229,458 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\stacsv.exe
PRC - [2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe  [comLaunch]
PRC - [2009/07/14 03:14:19 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
PRC - [2009/07/14 03:14:16 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
PRC - [2009/03/02 18:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\AEstSrv.exe
 
 
[color=#E56717]========== Modules (All) ==========[/color]
 
MOD - [2016/08/15 13:51:10 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrien\Downloads\OTL.exe
MOD - [2016/08/15 13:02:44 | 000,192,512 | ---- | M] () -- C:\Users\Adrien\AppData\Local\Temp\sfamcc00001.dll
MOD - [2016/08/15 13:02:44 | 000,158,720 | ---- | M] () -- C:\Users\Adrien\AppData\Local\Temp\sfareca00001.dll
MOD - [2016/08/02 16:08:55 | 000,235,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\sqmapi.dll
MOD - [2016/08/02 07:54:58 | 020,343,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
MOD - [2016/08/02 07:47:15 | 002,286,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
MOD - [2016/08/02 07:21:20 | 004,608,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
MOD - [2016/08/02 07:11:37 | 013,808,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
MOD - [2016/08/02 06:56:28 | 002,393,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
MOD - [2016/08/02 06:53:30 | 001,316,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
MOD - [2016/08/02 06:48:37 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\ieproxy.dll
MOD - [2016/07/29 17:15:35 | 001,628,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23508_none_5c028c09a01213b0\GdiPlus.dll
MOD - [2016/07/13 19:25:16 | 029,494,400 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
MOD - [2016/07/13 19:25:16 | 028,241,536 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\SkypeSkylib.dll
MOD - [2016/07/11 01:21:42 | 008,391,312 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Phone\RTMPLTFM.dll
MOD - [2016/07/11 01:21:42 | 003,728,016 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Phone\RtmCodecs.dll
MOD - [2016/07/11 01:21:42 | 001,752,720 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Phone\ROOTTOOLS.dll
MOD - [2016/07/11 01:21:42 | 000,657,040 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Phone\RtmMediaManager.dll
MOD - [2016/07/11 01:21:42 | 000,373,904 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Phone\RtmPal.dll
MOD - [2016/07/11 01:21:42 | 000,070,800 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Phone\ssScreenVVS2.dll
MOD - [2016/07/08 17:16:58 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
MOD - [2016/07/08 17:16:54 | 000,655,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
MOD - [2016/07/08 17:16:54 | 000,251,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
MOD - [2016/07/08 17:16:54 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
MOD - [2016/07/08 17:16:50 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
MOD - [2016/07/08 17:16:37 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
MOD - [2016/07/08 16:50:51 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
MOD - [2016/06/28 17:38:01 | 000,049,608 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\browser\components\browsercomps.dll
MOD - [2016/06/28 17:38:00 | 040,946,632 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xul.dll
MOD - [2016/06/28 17:38:00 | 010,437,576 | ---- | M] (The ICU Project) -- C:\Program Files\Mozilla Firefox\icudt56.dll
MOD - [2016/06/28 17:38:00 | 001,733,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nss3.dll
MOD - [2016/06/28 17:38:00 | 001,546,184 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozavcodec.dll
MOD - [2016/06/28 17:38:00 | 001,399,752 | ---- | M] (The ICU Project) -- C:\Program Files\Mozilla Firefox\icuin56.dll
MOD - [2016/06/28 17:38:00 | 000,935,880 | ---- | M] (The ICU Project) -- C:\Program Files\Mozilla Firefox\icuuc56.dll
MOD - [2016/06/28 17:38:00 | 000,402,888 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssckbi.dll
MOD - [2016/06/28 17:38:00 | 000,392,136 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
MOD - [2016/06/28 17:38:00 | 000,335,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\freebl3.dll
MOD - [2016/06/28 17:38:00 | 000,210,376 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\sandboxbroker.dll
MOD - [2016/06/28 17:38:00 | 000,170,952 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozavutil.dll
MOD - [2016/06/28 17:38:00 | 000,154,056 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\softokn3.dll
MOD - [2016/06/28 17:38:00 | 000,113,608 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozglue.dll
MOD - [2016/06/28 17:38:00 | 000,093,640 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssdbm3.dll
MOD - [2016/06/28 17:38:00 | 000,058,824 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\lgpllibs.dll
MOD - [2016/06/22 02:13:02 | 000,598,552 | ---- | M] (Oracle Corporation) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe
MOD - [2016/05/23 15:17:32 | 000,130,176 | R--- | M] (Skype Technologies) -- C:\Program Files\Skype\Updater\Updater.dll
MOD - [2016/05/20 00:39:32 | 003,359,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2016/05/18 18:10:06 | 000,306,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
MOD - [2016/05/13 23:49:50 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
MOD - [2016/05/12 17:18:23 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
MOD - [2016/05/12 15:04:55 | 000,249,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcryptprimitives.dll
MOD - [2016/05/11 17:19:26 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
MOD - [2016/05/11 17:19:25 | 000,351,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
MOD - [2016/05/11 17:19:24 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
MOD - [2016/05/11 17:19:16 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
MOD - [2016/04/29 01:52:58 | 005,902,288 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\KasperskyLab.Platform.NativeInterop.dll
MOD - [2016/04/29 01:52:58 | 002,800,136 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\instrumental_services.dll
MOD - [2016/04/29 01:52:58 | 002,466,256 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\avpuimain.dll
MOD - [2016/04/29 01:52:58 | 001,327,632 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\KasperskyLab.Kis.UI.Loader.dll
MOD - [2016/04/29 01:52:58 | 000,925,136 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\product_metainfo.DLL
MOD - [2016/04/29 01:52:58 | 000,226,312 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\licensing_meta.DLL
MOD - [2016/04/29 01:52:58 | 000,159,400 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\traffic_processing_meta.DLL
MOD - [2016/04/28 06:02:48 | 000,208,352 | ---- | M] (AO Kaspersky Lab) -- C:\ProgramData\Kaspersky Lab\AVP16.0.1\Bases\klsihk.dll
MOD - [2016/04/14 17:33:45 | 002,365,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
MOD - [2016/04/14 17:33:40 | 001,806,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
MOD - [2016/04/11 20:33:14 | 001,692,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
MOD - [2016/04/09 08:57:34 | 001,310,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
MOD - [2016/04/09 08:54:53 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
MOD - [2016/04/09 08:54:42 | 000,644,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
MOD - [2016/04/09 06:20:04 | 001,230,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
MOD - [2016/03/20 20:53:50 | 000,970,912 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\MSVCR120.dll
MOD - [2016/03/20 20:53:50 | 000,455,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\MSVCP120.dll
MOD - [2016/03/16 01:53:30 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
MOD - [2016/03/09 20:40:16 | 000,316,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
MOD - [2016/03/06 20:38:52 | 001,240,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
MOD - [2016/03/02 20:10:22 | 007,003,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
MOD - [2016/03/02 20:10:22 | 000,511,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
MOD - [2016/03/02 20:10:22 | 000,497,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
MOD - [2016/02/03 20:49:27 | 000,572,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
MOD - [2016/02/03 20:49:27 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
MOD - [2016/01/22 08:02:00 | 000,872,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
MOD - [2016/01/22 08:02:00 | 000,293,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
MOD - [2016/01/16 20:36:37 | 001,413,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
MOD - [2015/12/22 03:53:12 | 000,213,928 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\sw_meta.DLL
MOD - [2015/12/22 03:53:10 | 000,057,768 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\pxstub.ppl
MOD - [2015/12/22 03:52:58 | 000,201,640 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\product_info.dll
MOD - [2015/12/22 03:52:56 | 001,427,368 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\params.ppl
MOD - [2015/12/22 03:52:14 | 000,557,992 | ---- | M] (Hipp, Wyrick & Company, Inc.) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\dblite.dll
MOD - [2015/12/22 03:52:14 | 000,220,072 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\avpui.exe
MOD - [2015/12/22 03:52:14 | 000,196,008 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\backup_facade_metainfo.DLL
MOD - [2015/12/22 03:51:46 | 000,150,440 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\ushata.dll
MOD - [2015/12/22 03:50:46 | 000,161,192 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\DumpWriter.dll
MOD - [2015/12/22 02:47:56 | 000,665,056 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\kl_service.dll
MOD - [2015/12/22 02:47:56 | 000,378,848 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\prcore.dll
MOD - [2015/12/22 02:47:56 | 000,374,240 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\prremote.DLL
MOD - [2015/12/22 02:47:56 | 000,356,832 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\content_filtering_meta.DLL
MOD - [2015/12/22 02:47:56 | 000,210,912 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\remote_eka_prague_loader.dll
MOD - [2015/12/22 02:47:56 | 000,124,896 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\instrumental_meta.DLL
MOD - [2015/12/22 02:47:56 | 000,049,632 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\winreg.ppl
MOD - [2015/12/22 02:47:46 | 000,366,048 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\inproc_agent.dll
MOD - [2015/12/22 02:47:46 | 000,284,640 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\plugins_meta.DLL
MOD - [2015/12/22 02:47:46 | 000,272,864 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\vkbd.dll
MOD - [2015/12/22 02:47:42 | 000,285,152 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\am_meta.DLL
MOD - [2015/12/22 02:47:40 | 000,273,376 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\ac_meta.DLL
MOD - [2015/12/22 02:47:40 | 000,220,640 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\app_core_meta.DLL
MOD - [2015/12/22 02:47:40 | 000,106,464 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\system_interceptors_meta.DLL
MOD - [2015/12/22 02:47:34 | 000,192,480 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\ksn_meta.DLL
MOD - [2015/12/22 02:47:32 | 000,191,456 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\updater_meta.DLL
MOD - [2015/12/22 02:47:26 | 000,256,480 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\ucp_meta.DLL
MOD - [2015/12/22 02:47:26 | 000,098,784 | ---- | M] (AO Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\bi_meta.DLL
MOD - [2015/12/22 02:45:54 | 000,773,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\MSVCR100.dll
MOD - [2015/12/22 02:45:54 | 000,421,200 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\MSVCP100.dll
MOD - [2015/12/08 23:54:04 | 002,285,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
MOD - [2015/12/08 23:53:54 | 001,329,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
MOD - [2015/12/08 23:53:54 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
MOD - [2015/12/08 23:53:50 | 000,970,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2adec.dll
MOD - [2015/12/08 23:53:48 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MP3DMOD.DLL
MOD - [2015/12/08 23:53:47 | 003,209,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
MOD - [2015/12/08 23:53:47 | 000,354,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll
MOD - [2015/12/08 23:53:47 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
MOD - [2015/12/08 23:53:44 | 000,489,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
MOD - [2015/12/08 23:53:41 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devenum.dll
MOD - [2015/12/08 23:53:08 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
MOD - [2015/11/14 00:50:01 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
MOD - [2015/11/10 20:39:18 | 001,251,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
MOD - [2015/11/10 20:39:15 | 000,811,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
MOD - [2015/11/05 21:36:48 | 000,868,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
MOD - [2015/11/05 21:36:48 | 000,791,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll
MOD - [2015/11/05 21:36:48 | 000,303,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2015/11/05 21:36:48 | 000,075,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
MOD - [2015/11/03 20:56:18 | 000,627,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
MOD - [2015/10/29 19:49:58 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
MOD - [2015/10/22 11:09:00 | 000,987,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr120_clr0400.dll
MOD - [2015/09/01 19:52:53 | 000,348,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll
MOD - [2015/08/27 19:58:14 | 001,391,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
MOD - [2015/08/12 17:03:38 | 000,122,128 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mdnsNSP.dll
MOD - [2015/08/06 19:44:51 | 012,875,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
MOD - [2015/08/06 19:44:36 | 001,498,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
MOD - [2015/07/30 19:57:30 | 001,987,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
MOD - [2015/07/09 19:42:54 | 001,372,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
MOD - [2015/07/09 19:42:54 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
MOD - [2015/07/08 21:03:58 | 003,082,016 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\srres.dll
MOD - [2015/07/08 21:03:48 | 000,462,624 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\Components\Commands\dpghnt\dpghnt.dll
MOD - [2015/07/08 21:03:46 | 001,683,232 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
MOD - [2015/07/08 21:03:46 | 001,105,184 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\dpgcmd.dll
MOD - [2015/07/08 21:03:46 | 001,093,920 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
MOD - [2015/07/08 21:03:46 | 000,196,416 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Mouse and Keyboard Center\sqmapi.dll
MOD - [2015/07/01 22:30:21 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
MOD - [2015/06/28 10:22:54 | 000,653,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll
MOD - [2015/05/25 20:01:39 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
MOD - [2015/05/09 19:10:42 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
MOD - [2015/05/09 19:08:49 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
MOD - [2015/05/09 19:05:30 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
MOD - [2015/05/09 19:05:30 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
MOD - [2015/05/09 19:05:30 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
MOD - [2015/05/09 19:05:30 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
MOD - [2015/05/09 19:05:30 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
MOD - [2015/05/09 19:05:30 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
MOD - [2015/05/09 19:01:47 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
MOD - [2015/04/27 21:05:58 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
MOD - [2015/04/27 21:04:37 | 001,174,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
MOD - [2015/04/27 21:04:37 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptnet.dll
MOD - [2015/04/24 19:56:58 | 000,530,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll
MOD - [2015/04/24 19:54:13 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d\comctl32.dll
MOD - [2015/02/03 05:12:14 | 001,005,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptui.dll
MOD - [2015/02/03 05:12:14 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptsp.dll
MOD - [2015/02/03 05:12:12 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
MOD - [2015/01/17 04:30:42 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
MOD - [2014/08/19 09:59:00 | 004,768,360 | ---- | M] (Almico Software (www.almico.com)) -- C:\Program Files\SpeedFan\speedfan.exe
MOD - [2014/07/17 03:40:03 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
MOD - [2014/01/29 04:06:47 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
MOD - [2013/11/26 10:16:50 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
MOD - [2013/10/19 03:36:59 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
MOD - [2013/10/12 04:01:25 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
MOD - [2013/10/05 02:38:22 | 000,970,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr120.dll
MOD - [2013/10/05 02:38:22 | 000,455,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp120.dll
MOD - [2013/07/26 03:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
MOD - [2012/12/07 14:26:17 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
MOD - [2012/12/07 14:20:43 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
MOD - [2012/10/31 12:21:48 | 000,049,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
MOD - [2012/10/09 19:40:31 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
MOD - [2012/10/03 18:42:26 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
MOD - [2012/07/04 23:16:56 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
MOD - [2012/07/04 23:14:34 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
MOD - [2012/01/04 10:58:41 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
MOD - [2011/12/30 07:27:56 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
MOD - [2011/12/16 09:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
MOD - [2011/10/14 04:36:34 | 000,173,352 | ---- | M] (Synaptics Incorporated) -- C:\Windows\System32\SynTPAPI.dll
MOD - [2011/10/14 04:36:30 | 000,177,448 | ---- | M] (Synaptics Incorporated) -- C:\Windows\System32\SynCOM.dll
MOD - [2011/10/14 04:36:26 | 000,107,816 | ---- | M] (Synaptics Incorporated) -- C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
MOD - [2011/10/14 04:36:24 | 002,299,176 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
MOD - [2011/08/27 06:26:27 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
MOD - [2011/06/16 06:33:18 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
MOD - [2011/03/11 07:33:59 | 001,164,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
MOD - [2011/03/11 07:33:59 | 001,137,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
MOD - [2011/03/11 07:33:09 | 001,699,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\esent.dll
MOD - [2011/03/03 07:38:01 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
MOD - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
MOD - [2011/02/11 19:26:30 | 000,172,568 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpers.exe
MOD - [2011/02/11 19:26:26 | 000,171,032 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hkcmd.exe
MOD - [2011/02/11 19:12:16 | 004,967,424 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumd32.dll
MOD - [2011/02/11 19:09:48 | 000,571,904 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igdumdx32.dll
MOD - [2011/02/11 19:04:40 | 004,411,392 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igd10umd32.dll
MOD - [2011/02/11 18:44:02 | 000,086,528 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxrfra.lrc
MOD - [2011/02/11 18:41:12 | 000,057,856 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.dll
MOD - [2011/02/11 18:40:48 | 000,095,232 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hccutils.dll
MOD - [2010/11/20 14:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
MOD - [2010/11/20 14:21:39 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
MOD - [2010/11/20 14:21:38 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
MOD - [2010/11/20 14:21:36 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
MOD - [2010/11/20 14:21:36 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
MOD - [2010/11/20 14:21:36 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
MOD - [2010/11/20 14:21:36 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
MOD - [2010/11/20 14:21:35 | 001,063,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
MOD - [2010/11/20 14:21:34 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
MOD - [2010/11/20 14:21:34 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
MOD - [2010/11/20 14:21:33 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
MOD - [2010/11/20 14:21:30 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
MOD - [2010/11/20 14:21:28 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
MOD - [2010/11/20 14:21:27 | 002,146,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
MOD - [2010/11/20 14:21:27 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
MOD - [2010/11/20 14:21:26 | 000,228,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
MOD - [2010/11/20 14:21:26 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srvcli.dll
MOD - [2010/11/20 14:21:25 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
MOD - [2010/11/20 14:21:24 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
MOD - [2010/11/20 14:21:23 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
MOD - [2010/11/20 14:21:19 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
MOD - [2010/11/20 14:21:14 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
MOD - [2010/11/20 14:21:06 | 000,646,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFolder.dll
MOD - [2010/11/20 14:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
MOD - [2010/11/20 14:21:03 | 000,473,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
MOD - [2010/11/20 14:21:03 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcRtRemote.dll
MOD - [2010/11/20 14:21:00 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
MOD - [2010/11/20 14:20:57 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
MOD - [2010/11/20 14:20:57 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
MOD - [2010/11/20 14:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\provsvc.dll
MOD - [2010/11/20 14:20:56 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
MOD - [2010/11/20 14:20:55 | 001,750,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
MOD - [2010/11/20 14:20:55 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
MOD - [2010/11/20 14:20:51 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pdh.dll
MOD - [2010/11/20 14:20:48 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
MOD - [2010/11/20 14:20:46 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
MOD - [2010/11/20 14:20:29 | 002,494,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
MOD - [2010/11/20 14:20:29 | 001,661,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkexplorer.dll
MOD - [2010/11/20 14:20:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
MOD - [2010/11/20 14:20:27 | 000,801,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
MOD - [2010/11/20 14:19:54 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
MOD - [2010/11/20 14:19:47 | 000,592,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
MOD - [2010/11/20 14:19:46 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
MOD - [2010/11/20 14:19:45 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
MOD - [2010/11/20 14:19:45 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
MOD - [2010/11/20 14:19:39 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
MOD - [2010/11/20 14:19:23 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
MOD - [2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
MOD - [2010/11/20 14:19:21 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
MOD - [2010/11/20 14:19:10 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
MOD - [2010/11/20 14:19:10 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
MOD - [2010/11/20 14:19:03 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
MOD - [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\fastprox.dll
MOD - [2010/11/20 14:19:02 | 000,093,696 | ---- | M] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
MOD - [2010/11/20 14:18:38 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
MOD - [2010/11/20 14:18:36 | 000,399,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
MOD - [2010/11/20 14:18:35 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
MOD - [2010/11/20 14:18:27 | 000,854,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
MOD - [2010/11/20 14:18:25 | 001,828,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
MOD - [2010/11/20 14:18:25 | 000,418,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscui.dll
MOD - [2010/11/20 14:18:25 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
MOD - [2010/11/20 14:18:25 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
MOD - [2010/11/20 14:18:25 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscdll.dll
MOD - [2010/11/20 14:18:23 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
MOD - [2010/11/20 14:18:12 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
MOD - [2010/11/20 14:18:06 | 000,740,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
MOD - [2010/11/20 14:18:01 | 000,744,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
MOD - [2010/11/20 14:18:01 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
MOD - [2010/11/20 14:17:47 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
MOD - [2010/11/20 14:16:52 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
MOD - [2010/11/20 14:16:50 | 000,692,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
MOD - [2010/11/20 14:16:50 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
MOD - [2010/11/20 14:16:50 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
MOD - [2010/11/05 03:58:19 | 000,297,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
MOD - [2010/07/04 23:32:36 | 000,004,608 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerHook.dll
MOD - [2010/07/04 21:51:26 | 000,017,408 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe
MOD - [2010/03/23 14:53:06 | 003,354,624 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\STLang.dll
MOD - [2010/03/23 14:53:06 | 000,527,872 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\stapi32.dll
MOD - [2010/03/23 14:53:06 | 000,495,708 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
MOD - [2009/07/14 03:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
MOD - [2009/07/14 03:16:21 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWanAPI.dll
MOD - [2009/07/14 03:16:21 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwapi.dll
MOD - [2009/07/14 03:16:20 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscinterop.dll
MOD - [2009/07/14 03:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
MOD - [2009/07/14 03:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
MOD - [2009/07/14 03:16:20 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
MOD - [2009/07/14 03:16:19 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wmiutils.dll
MOD - [2009/07/14 03:16:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
MOD - [2009/07/14 03:16:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
MOD - [2009/07/14 03:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
MOD - [2009/07/14 03:16:19 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
MOD - [2009/07/14 03:16:18 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
MOD - [2009/07/14 03:16:18 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnApi.dll
MOD - [2009/07/14 03:16:18 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wercplsupport.dll
MOD - [2009/07/14 03:16:17 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
MOD - [2009/07/14 03:16:17 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
MOD - [2009/07/14 03:16:17 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemdisp.dll
MOD - [2009/07/14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
MOD - [2009/07/14 03:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemsvc.dll
MOD - [2009/07/14 03:16:17 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemprox.dll
MOD - [2009/07/14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll
MOD - [2009/07/14 03:16:16 | 000,239,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
MOD - [2009/07/14 03:16:16 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
MOD - [2009/07/14 03:16:15 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Syncreg.dll
MOD - [2009/07/14 03:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slc.dll
MOD - [2009/07/14 03:16:14 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc_os.dll
MOD - [2009/07/14 03:16:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shfolder.dll
MOD - [2009/07/14 03:16:13 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensApi.dll
MOD - [2009/07/14 03:16:12 | 000,325,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
MOD - [2009/07/14 03:16:12 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
MOD - [2009/07/14 03:16:12 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
MOD - [2009/07/14 03:16:12 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
MOD - [2009/07/14 03:16:12 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
MOD - [2009/07/14 03:16:12 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
MOD - [2009/07/14 03:16:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
MOD - [2009/07/14 03:16:12 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcwum.dll
MOD - [2009/07/14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
MOD - [2009/07/14 03:16:12 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfos.dll
MOD - [2009/07/14 03:16:12 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
MOD - [2009/07/14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
MOD - [2009/07/14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
MOD - [2009/07/14 03:16:11 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
MOD - [2009/07/14 03:16:11 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
MOD - [2009/07/14 03:16:11 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
MOD - [2009/07/14 03:16:06 | 002,654,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
MOD - [2009/07/14 03:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netprofm.dll
MOD - [2009/07/14 03:16:03 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkitemfactory.dll
MOD - [2009/07/14 03:16:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
MOD - [2009/07/14 03:15:48 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
MOD - [2009/07/14 03:15:44 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimtf.dll
MOD - [2009/07/14 03:15:44 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
MOD - [2009/07/14 03:15:44 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
MOD - [2009/07/14 03:15:43 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctfui.dll
MOD - [2009/07/14 03:15:43 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
MOD - [2009/07/14 03:15:42 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
MOD - [2009/07/14 03:15:41 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
MOD - [2009/07/14 03:15:40 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
MOD - [2009/07/14 03:15:40 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
MOD - [2009/07/14 03:15:36 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
MOD - [2009/07/14 03:15:27 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
MOD - [2009/07/14 03:15:24 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hcproviders.dll
MOD - [2009/07/14 03:15:24 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
MOD - [2009/07/14 03:15:22 | 000,848,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSST.dll
MOD - [2009/07/14 03:15:21 | 000,462,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
MOD - [2009/07/14 03:15:21 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSAPI.dll
MOD - [2009/07/14 03:15:21 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
MOD - [2009/07/14 03:15:20 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWCN.dll
MOD - [2009/07/14 03:15:20 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
MOD - [2009/07/14 03:15:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWNet.dll
MOD - [2009/07/14 03:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
MOD - [2009/07/14 03:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorShell.dll
MOD - [2009/07/14 03:15:14 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehSSO.dll
MOD - [2009/07/14 03:15:13 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dui70.dll
MOD - [2009/07/14 03:15:13 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
MOD - [2009/07/14 03:15:13 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxva2.dll
MOD - [2009/07/14 03:15:13 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dtsh.dll
MOD - [2009/07/14 03:15:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsrole.dll
MOD - [2009/07/14 03:15:13 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
MOD - [2009/07/14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
MOD - [2009/07/14 03:15:11 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
MOD - [2009/07/14 03:15:11 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devrtl.dll
MOD - [2009/07/14 03:15:11 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfscli.dll
MOD - [2009/07/14 03:15:11 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
MOD - [2009/07/14 03:15:08 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davhlpr.dll
MOD - [2009/07/14 03:15:08 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
MOD - [2009/07/14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
MOD - [2009/07/14 03:14:59 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
MOD - [2009/07/14 03:14:58 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
MOD - [2009/07/14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
MOD - [2009/07/14 03:14:53 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
MOD - [2009/07/14 03:14:19 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
MOD - [2009/07/14 03:14:11 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vidcap.ax
MOD - [2009/07/14 03:14:10 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hhctrl.ocx
MOD - [2009/07/14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
MOD - [2009/07/14 03:14:10 | 000,064,000 | ---- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
MOD - [2009/07/14 03:14:09 | 001,140,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscui.cpl
MOD - [2009/07/14 03:14:08 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
MOD - [2009/07/14 03:10:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc.dll
MOD - [2009/07/14 03:09:14 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcint.dll
MOD - [2009/07/14 03:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll
MOD - [2009/07/14 03:08:33 | 006,237,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
MOD - [2009/07/14 03:05:30 | 000,925,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSRESM.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2016/08/02 07:41:49 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2016/07/13 19:44:43 | 000,270,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2016/06/28 17:38:00 | 000,146,888 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2016/06/25 01:45:12 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2016/06/11 14:25:36 | 002,122,248 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- C:\Program Files\Origin\OriginClientService.exe -- (Origin Client Service)
SRV - [2016/05/25 10:31:20 | 001,687,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2016/05/25 10:30:36 | 001,364,096 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2016/05/23 15:17:32 | 000,324,224 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2015/12/22 03:53:58 | 000,236,928 | ---- | M] (AO Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\avp.exe -- (AVP16.0.1)
SRV - [2015/10/05 09:48:46 | 001,135,416 | ---- | M] (Malwarebytes) [Auto | Stopped] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2015/10/05 09:48:44 | 001,513,784 | ---- | M] (Malwarebytes) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2015/07/22 19:53:34 | 000,937,984 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\diagtrack.dll -- (DiagTrack)
SRV - [2013/08/27 12:42:50 | 000,358,480 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\System32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2013/08/27 12:42:14 | 000,437,328 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\System32\vmnat.exe -- (VMware NAT Service)
SRV - [2013/08/27 11:50:10 | 000,086,096 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)
SRV - [2013/08/26 23:33:26 | 000,719,416 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2013/05/27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2010/03/23 14:53:06 | 000,229,458 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\stacsv.exe -- (STacSV)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/03/02 18:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\AEstSrv.exe -- (AESTFilters)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\OHurel\Desktop\Selfishnet win 7\npf.sys -- (NPF)
DRV - File not found [Kernel | Disabled | Unknown] -- system32\DRIVERS\klkbdflt2.sys -- (klkbdflt2)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (al4osvg2)
DRV - [2016/07/11 20:23:32 | 000,054,096 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\voxaldriverx86.sys -- (voxaldriver)
DRV - [2016/07/02 20:17:21 | 000,037,920 | ---- | M] (SoftEther Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Neo_0041.sys -- (Neo_VPN)
DRV - [2016/06/28 11:50:16 | 000,036,944 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\taphss6.sys -- (taphss6)
DRV - [2016/06/08 10:56:30 | 000,027,040 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2016/04/29 01:52:56 | 000,776,624 | ---- | M] (AO Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2016/04/29 01:52:56 | 000,053,160 | ---- | M] (AO Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\klhk.sys -- (klhk)
DRV - [2016/04/29 01:52:56 | 000,045,144 | ---- | M] (AO Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2015/12/11 17:27:58 | 000,145,800 | ---- | M] (AO Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klflt.sys -- (klflt)
DRV - [2015/12/07 16:08:20 | 000,041,864 | ---- | M] (AO Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klpd.sys -- (klpd)
DRV - [2015/12/03 11:10:22 | 000,096,648 | ---- | M] (AO Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\klwtp.sys -- (Klwtp)
DRV - [2015/12/03 00:36:22 | 000,161,672 | ---- | M] (AO Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\kneps.sys -- (kneps)
DRV - [2015/12/02 00:21:12 | 000,067,456 | ---- | M] (AO Kaspersky Lab) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\kldisk.sys -- (kldisk)
DRV - [2015/12/01 22:42:12 | 000,066,440 | ---- | M] (AO Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klbackupflt.sys -- (klbackupflt)
DRV - [2015/11/11 11:56:28 | 000,046,464 | ---- | M] (AO Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klkbdflt.sys -- (klkbdflt)
DRV - [2015/10/05 09:50:16 | 000,051,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV - [2015/10/05 09:50:04 | 000,023,256 | ---- | M] (Malwarebytes) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2015/09/11 20:30:36 | 000,155,304 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (kl1)
DRV - [2015/08/27 12:25:23 | 000,030,456 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\frzway.sys -- (frzway)
DRV - [2015/07/06 00:10:20 | 000,201,912 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\cm_km.sys -- (cm_km)
DRV - [2015/06/28 03:39:17 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2015/06/11 15:52:38 | 000,054,328 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kltdi.sys -- (kltdi)
DRV - [2015/06/07 01:50:04 | 000,038,072 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2015/06/06 08:50:18 | 000,046,776 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\klbackupdisk.sys -- (klbackupdisk)
DRV - [2013/10/02 02:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2013/08/27 12:43:02 | 000,065,488 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vmx86.sys -- (vmx86)
DRV - [2013/08/27 12:42:44 | 000,026,192 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2013/08/27 12:42:02 | 000,037,456 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2013/08/27 12:42:00 | 000,025,808 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VMkbd.sys -- (vmkbd)
DRV - [2013/08/27 12:42:00 | 000,017,104 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2013/08/26 23:33:44 | 000,043,192 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hcmon.sys -- (hcmon)
DRV - [2013/08/26 23:33:26 | 000,031,928 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmusb.sys -- (vmusb)
DRV - [2013/08/22 14:40:22 | 000,035,288 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2013/08/15 18:25:02 | 000,063,824 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vsock.sys -- (vsock)
DRV - [2013/08/15 18:24:54 | 000,071,888 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmci.sys -- (vmci)
DRV - [2012/12/29 22:59:38 | 000,024,184 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\Windows\System32\speedfan.sys -- (speedfan)
DRV - [2012/08/23 16:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012/06/20 09:43:02 | 002,957,312 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2010/11/20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/07/04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2010/03/23 14:53:06 | 000,423,424 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2009/09/19 06:30:10 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus)
DRV - [2008/11/16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2007/01/18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [1996/04/03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\giveio.sys -- (giveio)
 
 
[color=#E56717]========== Standard Registry (All) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\OldSearch: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
 
IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
 
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-FR
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 95 40 5D 57 34 DD D1 01  [binary data]
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE10
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\..\SearchScopes\OldSearch: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.countryCode: "FR"
FF - prefs.js..browser.search.region: "FR"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:47.0.1
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_22_0_0_209.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.101.2: C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.101.2: C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\OHurel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll File not found
FF - HKCU\Software\MozillaPlugins\SkypePlugin: C:\Users\Adrien\AppData\Local\SkypePlugin\7.18.0.51\npGatewayNpapi.dll (Skype Technologies S.A.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\light_plugin_ACF0E80077C511E59DED005056C00008@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\FFExt\light_plugin_firefox\addon.xpi [2016/04/29 01:52:56 | 000,092,851 | ---- | M] ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 47.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 47.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 47.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 47.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2016/04/24 20:44:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adrien\AppData\Roaming\mozilla\Extensions
[2016/08/11 17:31:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adrien\AppData\Roaming\mozilla\Firefox\Profiles\gn8gs0sa.default-1468168574309\extensions
[2016/07/11 19:10:37 | 000,038,150 | ---- | M] () (No name found) -- C:\Users\Adrien\AppData\Roaming\mozilla\firefox\profiles\gn8gs0sa.default-1468168574309\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi
[2016/07/10 19:09:58 | 001,036,367 | ---- | M] () (No name found) -- C:\Users\Adrien\AppData\Roaming\mozilla\firefox\profiles\gn8gs0sa.default-1468168574309\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2016/07/11 19:20:44 | 000,006,260 | ---- | M] () (No name found) -- C:\Users\Adrien\AppData\Roaming\mozilla\firefox\profiles\gn8gs0sa.default-1468168574309\features\{bb01f367-0dd1-431e-9af1-a0225dcfc348}\e10srollout@mozilla.org.xpi
[2016/07/11 19:20:47 | 000,686,164 | ---- | M] () (No name found) -- C:\Users\Adrien\AppData\Roaming\mozilla\firefox\profiles\gn8gs0sa.default-1468168574309\features\{bb01f367-0dd1-431e-9af1-a0225dcfc348}\firefox@getpocket.com.xpi
[2016/07/11 19:20:51 | 001,696,657 | ---- | M] () (No name found) -- C:\Users\Adrien\AppData\Roaming\mozilla\firefox\profiles\gn8gs0sa.default-1468168574309\features\{bb01f367-0dd1-431e-9af1-a0225dcfc348}\loop@mozilla.org.xpi
[2016/06/28 17:38:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Adrien\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\14.0.0.4971_0\
CHR - Extension: No name found = C:\Users\Adrien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
CHR - Extension: No name found = C:\Users\Adrien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
 
O1 HOSTS File: ([2016/07/19 21:29:56 | 000,001,239 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1    localhost
O1 - Hosts: 127.0.0.1    www.animalcrossing.forumactif.com
O1 - Hosts: 127.0.0.1    animalcrossing.forumactif.com
O2 - BHO: (Kaspersky Protection) - {03993315-5CE9-4F00-8790-D14A94F1D91A} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\IEExt\ie_plugin.dll (AO Kaspersky Lab)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Kaspersky Protection Toolbar) - {001032CB-B0AC-4F2C-A650-AD4B2B26E5DA} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 16.0.1\IEExt\ie_plugin.dll (AO Kaspersky Lab)
O3 - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\..\Toolbar\WebBrowser: (no name) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - No CLSID value found.
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKU\S-1-5-21-3062719487-4057316587-1700168192-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000036 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000037 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000038 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000039 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000040 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000041 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000042 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000043 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000044 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000045 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000046 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5668281F-15DC-44F0-9A5D-18596829FFFD}: DhcpNameServer = 212.27.40.240 212.27.40.241
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2016/06/05 20:16:07 | 000,000,039 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{ab91d5f6-642c-11e5-943d-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{ab91d5f6-642c-11e5-943d-005056c00008}\Shell\AutoRun\command - "" = F:\LaunchU3.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
MsConfig - StartUpReg: [b]CCleaner Monitoring[/b] - hkey= - key= - C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
MsConfig - StartUpReg: [b]LogMeIn Hamachi Ui[/b] - hkey= - key= -  File not found
MsConfig - State: "startup" - 2
MsConfig - State: "bootini" - 2
MsConfig - State: "services" - 0
 
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {23A20C3C-2ADD-4A80-AFB4-C146F8847D79} - .NET Framework
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {30500C7C-2206-3DC6-9792-96E95A04669D} - .NET Framework
ActiveX: {3911CF56-9EF2-39BA-846A-C27BD3CD0685} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {47B3BDBB-F2AE-4B55-95C8-921C25DB3B76} - .NET Framework
ActiveX: {49C187D7-91E1-459E-9759-2925384BD397} - .NET Framework
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5A604D2C-E968-429B-8327-62B5CE52126D} - .NET Framework
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {66C64F22-FC60-4E6C-A6B5-F0D580E680CE} - C:\Windows\System32\ie4uinit.exe -EnableTLS
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {7D715857-A67C-4C2F-A929-038448584D63} - C:\Windows\System32\ie4uinit.exe -DisableSSL3
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {9793EDE2-499E-4A14-8220-523691D8F91B} - .NET Framework
ActiveX: {A59B76D1-5E3B-4893-BB7F-AF69B2570A73} - .NET Framework
ActiveX: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\Windows\system32\Rundll32.exe" "C:\Program Files\Adobe\Acrobat Reader DC\Esl\AiodLite.dll",CreateReaderUserSettings
ActiveX: {BFA2E378-31D9-4595-AFA9-CA19E610DC0F} - .NET Framework
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CE4BC71D-A88B-4943-BB3D-AF9C0E7D4387} - .NET Framework
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {FE600E50-2C69-46D5-ACAA-2B617006245C} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS -  File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS -  File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2016/08/14 18:23:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2016/08/12 19:55:35 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2016/08/12 19:55:34 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2016/08/12 19:55:34 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2016/08/12 19:55:33 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2016/08/12 19:55:32 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2016/08/12 19:55:31 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2016/08/12 19:55:30 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2016/08/12 19:55:29 | 000,346,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2016/08/12 19:55:28 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2016/08/12 19:55:27 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2016/08/12 19:55:27 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2016/08/12 19:55:26 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2016/08/12 19:55:26 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2016/08/12 19:55:25 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2016/08/12 19:55:24 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2016/08/12 19:55:20 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2016/08/12 19:55:16 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2016/08/12 19:55:15 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2016/08/12 19:55:14 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2016/08/12 19:55:08 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2016/08/12 19:55:05 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2016/08/12 19:55:00 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2016/08/12 19:54:55 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2016/08/12 19:54:52 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2016/08/12 19:54:43 | 004,608,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2016/08/12 16:10:49 | 000,000,000 | ---D | C] -- C:\QuickDiag
[2016/08/12 15:51:04 | 002,399,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2016/08/12 15:50:36 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2016/08/12 15:50:34 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2016/08/12 15:50:33 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2016/08/12 15:50:31 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2016/08/12 15:50:26 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2016/08/12 15:50:20 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2016/08/12 15:50:10 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2016/08/08 19:31:18 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll
[2016/08/08 19:31:17 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
[2016/08/07 15:21:23 | 000,000,000 | ---D | C] -- C:\Users\Adrien\AppData\Roaming\Anuman Interactive
[2016/08/07 15:16:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games
[2016/08/07 15:14:53 | 000,000,000 | ---D | C] -- C:\Program Files\PopCap Games
[2016/07/31 14:23:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2016/07/31 14:15:57 | 000,000,000 | ---D | C] -- C:\Users\Adrien\AppData\Roaming\Sun
[2016/07/31 14:15:30 | 000,095,808 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2016/07/31 14:15:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2016/07/31 14:14:34 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2016/07/31 14:02:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2016/07/30 18:29:23 | 000,000,000 | ---D | C] -- C:\Users\Adrien\Desktop\Nouveau dossier
[2016/07/30 10:57:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
[2016/07/30 10:53:44 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP
[2016/07/30 10:53:30 | 000,000,000 | ---D | C] -- C:\Program Files\Kaspersky Lab
[2016/07/30 10:53:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2016/07/30 10:52:33 | 000,776,624 | ---- | C] (AO Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2016/07/30 10:52:33 | 000,145,800 | ---- | C] (AO Kaspersky Lab) -- C:\Windows\System32\drivers\klflt.sys
[2016/07/30 10:52:33 | 000,053,160 | ---- | C] (AO Kaspersky Lab) -- C:\Windows\System32\drivers\klhk.sys
[2016/07/23 12:52:26 | 000,000,000 | ---D | C] -- C:\Users\Adrien\AppData\Roaming\AdbDriverInstaller
[2016/07/23 12:47:50 | 000,000,000 | ---D | C] -- C:\Users\Adrien\.android
[2016/07/23 12:32:10 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
[2016/07/21 21:39:39 | 000,000,000 | --SD | C] -- C:\Windows\System32\GWX
[2016/07/20 20:27:50 | 000,000,000 | ---D | C] -- C:\Users\Adrien\Documents\Les sims 4
[2016/07/20 20:27:21 | 000,000,000 | ---D | C] -- C:\Users\Adrien\Documents\Ccleaner
[2016/07/20 20:27:12 | 000,000,000 | ---D | C] -- C:\Users\Adrien\Documents\Photofiltre
[2016/07/20 20:27:02 | 000,000,000 | ---D | C] -- C:\Users\Adrien\Documents\War2Combat
[2016/07/20 10:22:15 | 000,027,040 | -H-- | C] (LogMeIn, Inc.) -- C:\Windows\System32\hamachi.sys
[2016/07/18 15:06:48 | 024,081,761 | ---- | C] (War2 Combat RU                                              ) -- C:\Users\Adrien\Documents\War2Combat401.exe
[2016/07/18 14:54:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo
[2016/07/18 13:59:29 | 000,000,000 | ---D | C] -- C:\Users\Adrien\AppData\Local\LogMeIn
[2016/07/18 13:59:29 | 000,000,000 | ---D | C] -- C:\ProgramData\LogMeIn
[2016/07/17 23:08:15 | 000,000,000 | ---D | C] -- C:\Users\Adrien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Lunch Design
[2016/07/17 23:08:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Lunch Design
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2016/08/15 19:59:00 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2016/08/15 19:42:24 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2016/08/15 17:59:47 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2016/08/15 13:12:13 | 000,020,672 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016/08/15 13:12:13 | 000,020,672 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016/08/15 13:01:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2016/08/14 18:23:28 | 000,001,197 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller.lnk
[2016/08/14 14:41:15 | 000,000,071 | ---- | M] () -- C:\Users\Adrien\Documents\Test.bat
[2016/08/13 20:39:59 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player PPAPI Notifier.job
[2016/08/13 14:01:30 | 000,411,816 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2016/08/12 20:58:31 | 000,007,672 | ---- | M] () -- C:\Users\Adrien\AppData\Local\Resmon.ResmonCfg
[2016/08/07 15:16:34 | 000,001,289 | ---- | M] () -- C:\Users\Public\Desktop\Plantes contre Zombies.lnk
[2016/08/02 16:08:55 | 000,346,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2016/08/02 08:03:48 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2016/08/02 08:03:38 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2016/08/02 07:51:49 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2016/08/02 07:51:12 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2016/08/02 07:51:03 | 000,341,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2016/08/02 07:50:11 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2016/08/02 07:45:17 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2016/08/02 07:44:48 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2016/08/02 07:42:41 | 000,476,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2016/08/02 07:41:49 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2016/08/02 07:41:43 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2016/08/02 07:41:24 | 000,620,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2016/08/02 07:36:39 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2016/08/02 07:33:46 | 000,416,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2016/08/02 07:29:16 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2016/08/02 07:28:25 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2016/08/02 07:26:20 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2016/08/02 07:24:10 | 000,279,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2016/08/02 07:21:20 | 004,608,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2016/08/02 07:15:09 | 000,692,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2016/08/02 07:14:58 | 000,689,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2016/08/02 07:14:32 | 002,055,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2016/08/02 07:14:02 | 001,155,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2016/08/02 06:51:20 | 000,710,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2016/07/31 14:15:06 | 000,095,808 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2016/07/30 21:32:49 | 000,750,254 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2016/07/30 21:32:49 | 000,739,944 | ---- | M] () -- C:\Windows\System32\perfh00A.dat
[2016/07/30 21:32:49 | 000,737,986 | ---- | M] () -- C:\Windows\System32\perfh013.dat
[2016/07/30 21:32:49 | 000,734,846 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2016/07/30 21:32:49 | 000,734,534 | ---- | M] () -- C:\Windows\System32\perfh010.dat
[2016/07/30 21:32:49 | 000,723,506 | ---- | M] () -- C:\Windows\System32\prfh0816.dat
[2016/07/30 21:32:49 | 000,719,088 | ---- | M] () -- C:\Windows\System32\perfh019.dat
[2016/07/30 21:32:49 | 000,708,368 | ---- | M] () -- C:\Windows\System32\prfh0416.dat
[2016/07/30 21:32:49 | 000,691,696 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2016/07/30 21:32:49 | 000,678,242 | ---- | M] () -- C:\Windows\System32\perfh00E.dat
[2016/07/30 21:32:49 | 000,663,328 | ---- | M] () -- C:\Windows\System32\perfh005.dat
[2016/07/30 21:32:49 | 000,658,208 | ---- | M] () -- C:\Windows\System32\perfh01D.dat
[2016/07/30 21:32:49 | 000,656,824 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2016/07/30 21:32:49 | 000,651,170 | ---- | M] () -- C:\Windows\System32\perfh01F.dat
[2016/07/30 21:32:49 | 000,601,476 | ---- | M] () -- C:\Windows\System32\perfh008.dat
[2016/07/30 21:32:49 | 000,503,902 | ---- | M] () -- C:\Windows\System32\perfh006.dat
[2016/07/30 21:32:49 | 000,489,002 | ---- | M] () -- C:\Windows\System32\perfh014.dat
[2016/07/30 21:32:49 | 000,475,990 | ---- | M] () -- C:\Windows\System32\perfh00B.dat
[2016/07/30 21:32:49 | 000,473,502 | ---- | M] () -- C:\Windows\System32\perfh001.dat
[2016/07/30 21:32:49 | 000,422,912 | ---- | M] () -- C:\Windows\System32\perfh012.dat
[2016/07/30 21:32:49 | 000,411,266 | ---- | M] () -- C:\Windows\System32\perfh011.dat
[2016/07/30 21:32:49 | 000,392,830 | ---- | M] () -- C:\Windows\System32\prfh0404.dat
[2016/07/30 21:32:49 | 000,386,832 | ---- | M] () -- C:\Windows\System32\perfh00D.dat
[2016/07/30 21:32:49 | 000,375,658 | ---- | M] () -- C:\Windows\System32\prfh0804.dat
[2016/07/30 21:32:49 | 000,172,352 | ---- | M] () -- C:\Windows\System32\perfc00E.dat
[2016/07/30 21:32:49 | 000,159,552 | ---- | M] () -- C:\Windows\System32\perfc00A.dat
[2016/07/30 21:32:49 | 000,156,950 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2016/07/30 21:32:49 | 000,154,180 | ---- | M] () -- C:\Windows\System32\perfc013.dat
[2016/07/30 21:32:49 | 000,153,984 | ---- | M] () -- C:\Windows\System32\prfc0816.dat
[2016/07/30 21:32:49 | 000,151,920 | ---- | M] () -- C:\Windows\System32\perfc019.dat
[2016/07/30 21:32:49 | 000,151,272 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2016/07/30 21:32:49 | 000,150,194 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2016/07/30 21:32:49 | 000,148,734 | ---- | M] () -- C:\Windows\System32\prfc0416.dat
[2016/07/30 21:32:49 | 000,147,924 | ---- | M] () -- C:\Windows\System32\perfc010.dat
[2016/07/30 21:32:49 | 000,143,552 | ---- | M] () -- C:\Windows\System32\perfc01D.dat
[2016/07/30 21:32:49 | 000,142,504 | ---- | M] () -- C:\Windows\System32\perfc005.dat
[2016/07/30 21:32:49 | 000,141,078 | ---- | M] () -- C:\Windows\System32\perfc01F.dat
[2016/07/30 21:32:49 | 000,123,222 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2016/07/30 21:32:49 | 000,123,178 | ---- | M] () -- C:\Windows\System32\perfc011.dat
[2016/07/30 21:32:49 | 000,121,462 | ---- | M] () -- C:\Windows\System32\perfc012.dat
[2016/07/30 21:32:49 | 000,120,670 | ---- | M] () -- C:\Windows\System32\prfc0804.dat
[2016/07/30 21:32:49 | 000,116,168 | ---- | M] () -- C:\Windows\System32\prfc0404.dat
[2016/07/30 21:32:49 | 000,112,206 | ---- | M] () -- C:\Windows\System32\perfc008.dat
[2016/07/30 21:32:49 | 000,102,598 | ---- | M] () -- C:\Windows\System32\perfc00B.dat
[2016/07/30 21:32:49 | 000,099,736 | ---- | M] () -- C:\Windows\System32\perfc006.dat
[2016/07/30 21:32:49 | 000,096,482 | ---- | M] () -- C:\Windows\System32\perfc014.dat
[2016/07/30 21:32:49 | 000,095,850 | ---- | M] () -- C:\Windows\System32\perfc001.dat
[2016/07/30 21:32:49 | 000,085,836 | ---- | M] () -- C:\Windows\System32\perfc00D.dat
[2016/07/30 19:37:39 | 000,001,034 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2016/07/28 17:55:07 | 000,001,306 | ---- | M] () -- C:\Users\Public\Desktop\Les Sims 4.lnk
[2016/07/26 14:24:26 | 000,406,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2016/07/20 12:08:50 | 000,027,040 | -H-- | M] (LogMeIn, Inc.) -- C:\Windows\System32\hamachi.sys
[2016/07/18 15:08:19 | 000,129,506 | ---- | M] () -- C:\Users\Adrien\Documents\ipxwrapper-0.6.0.zip
[2016/07/18 15:08:04 | 024,081,761 | ---- | M] (War2 Combat RU                                              ) -- C:\Users\Adrien\Documents\War2Combat401.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2016/08/14 18:23:28 | 000,001,197 | ---- | C] () -- C:\Users\Public\Desktop\Revo Uninstaller.lnk
[2016/08/14 14:41:14 | 000,000,071 | ---- | C] () -- C:\Users\Adrien\Documents\Test.bat
[2016/08/07 15:16:34 | 000,001,289 | ---- | C] () -- C:\Users\Public\Desktop\Plantes contre Zombies.lnk
[2016/07/30 19:37:39 | 000,001,034 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2016/07/22 14:08:41 | 000,001,306 | ---- | C] () -- C:\Users\Public\Desktop\Les Sims 4.lnk
[2016/07/19 12:15:28 | 000,411,816 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2016/07/18 15:07:59 | 000,129,506 | ---- | C] () -- C:\Users\Adrien\Documents\ipxwrapper-0.6.0.zip
[2016/07/11 20:23:32 | 000,054,096 | ---- | C] () -- C:\Windows\System32\drivers\voxaldriverx86.sys
[2016/07/10 17:06:41 | 002,226,688 | ---- | C] () -- C:\Users\Adrien\ZHPDiag3.exe
[2016/03/16 19:25:37 | 000,000,660 | RHS- | C] () -- C:\Users\Adrien\ntuser.pol
[2016/01/17 22:24:48 | 000,019,537 | ---- | C] () -- C:\Users\Adrien\AppData\Roaming\UserTile.png
[2015/12/11 22:40:24 | 000,000,290 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2015/10/09 09:49:54 | 000,294,764 | ---- | C] () -- C:\Windows\System32\perfi01D.dat
[2015/10/09 09:49:52 | 000,658,208 | ---- | C] () -- C:\Windows\System32\perfh01D.dat
[2015/10/09 09:49:52 | 000,143,552 | ---- | C] () -- C:\Windows\System32\perfc01D.dat
[2015/10/09 09:49:52 | 000,037,052 | ---- | C] () -- C:\Windows\System32\perfd01D.dat
[2015/10/09 08:56:42 | 000,157,694 | ---- | C] () -- C:\Windows\System32\perfi012.dat
[2015/10/09 08:56:39 | 000,422,912 | ---- | C] () -- C:\Windows\System32\perfh012.dat
[2015/10/09 08:56:39 | 000,121,462 | ---- | C] () -- C:\Windows\System32\perfc012.dat
[2015/10/09 08:56:39 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd012.dat
[2015/10/09 06:14:22 | 000,111,310 | ---- | C] () -- C:\Windows\System32\prfi0804.dat
[2015/10/09 06:14:20 | 000,375,658 | ---- | C] () -- C:\Windows\System32\prfh0804.dat
[2015/10/09 06:14:20 | 000,120,670 | ---- | C] () -- C:\Windows\System32\prfc0804.dat
[2015/10/09 06:14:20 | 000,031,548 | ---- | C] () -- C:\Windows\System32\prfd0804.dat
[2015/10/09 05:03:17 | 000,141,988 | ---- | C] () -- C:\Windows\System32\perfi011.dat
[2015/10/09 05:03:15 | 000,411,266 | ---- | C] () -- C:\Windows\System32\perfh011.dat
[2015/10/09 05:03:15 | 000,123,178 | ---- | C] () -- C:\Windows\System32\perfc011.dat
[2015/10/09 05:03:15 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd011.dat
[2015/10/09 04:22:10 | 000,287,518 | ---- | C] () -- C:\Windows\System32\perfi00E.dat
[2015/10/09 04:22:09 | 000,678,242 | ---- | C] () -- C:\Windows\System32\perfh00E.dat
[2015/10/09 04:22:09 | 000,172,352 | ---- | C] () -- C:\Windows\System32\perfc00E.dat
[2015/10/09 04:22:09 | 000,048,094 | ---- | C] () -- C:\Windows\System32\perfd00E.dat
[2015/10/09 04:02:21 | 000,279,790 | ---- | C] () -- C:\Windows\System32\perfi00B.dat
[2015/10/09 04:02:20 | 000,475,990 | ---- | C] () -- C:\Windows\System32\perfh00B.dat
[2015/10/09 04:02:20 | 000,102,598 | ---- | C] () -- C:\Windows\System32\perfc00B.dat
[2015/10/09 04:02:20 | 000,038,258 | ---- | C] () -- C:\Windows\System32\perfd00B.dat
[2015/10/09 03:44:18 | 000,229,316 | ---- | C] () -- C:\Windows\System32\perfi00D.dat
[2015/10/09 03:44:17 | 000,386,832 | ---- | C] () -- C:\Windows\System32\perfh00D.dat
[2015/10/09 03:44:17 | 000,085,836 | ---- | C] () -- C:\Windows\System32\perfc00D.dat
[2015/10/09 03:44:17 | 000,032,166 | ---- | C] () -- C:\Windows\System32\perfd00D.dat
[2015/10/09 03:27:17 | 000,341,322 | ---- | C] () -- C:\Windows\System32\perfi013.dat
[2015/10/09 03:27:15 | 000,737,986 | ---- | C] () -- C:\Windows\System32\perfh013.dat
[2015/10/09 03:27:15 | 000,154,180 | ---- | C] () -- C:\Windows\System32\perfc013.dat
[2015/10/09 03:27:15 | 000,043,068 | ---- | C] () -- C:\Windows\System32\perfd013.dat
[2015/10/09 03:09:49 | 000,298,300 | ---- | C] () -- C:\Windows\System32\perfi014.dat
[2015/10/09 03:09:48 | 000,489,002 | ---- | C] () -- C:\Windows\System32\perfh014.dat
[2015/10/09 03:09:48 | 000,096,482 | ---- | C] () -- C:\Windows\System32\perfc014.dat
[2015/10/09 03:09:48 | 000,036,156 | ---- | C] () -- C:\Windows\System32\perfd014.dat
[2015/10/09 02:37:06 | 000,369,984 | ---- | C] () -- C:\Windows\System32\perfi008.dat
[2015/10/09 02:37:05 | 000,601,476 | ---- | C] () -- C:\Windows\System32\perfh008.dat
[2015/10/09 02:37:05 | 000,112,206 | ---- | C] () -- C:\Windows\System32\perfc008.dat
[2015/10/09 02:37:05 | 000,045,182 | ---- | C] () -- C:\Windows\System32\perfd008.dat
[2015/10/09 02:07:20 | 000,335,478 | ---- | C] () -- C:\Windows\System32\perfi010.dat
[2015/10/09 02:07:18 | 000,734,534 | ---- | C] () -- C:\Windows\System32\perfh010.dat
[2015/10/09 02:07:18 | 000,147,924 | ---- | C] () -- C:\Windows\System32\perfc010.dat
[2015/10/09 02:07:18 | 000,037,534 | ---- | C] () -- C:\Windows\System32\perfd010.dat
[2015/10/09 01:51:23 | 000,292,004 | ---- | C] () -- C:\Windows\System32\perfi005.dat
[2015/10/09 01:51:22 | 000,663,328 | ---- | C] () -- C:\Windows\System32\perfh005.dat
[2015/10/09 01:51:22 | 000,142,504 | ---- | C] () -- C:\Windows\System32\perfc005.dat
[2015/10/09 01:51:22 | 000,036,232 | ---- | C] () -- C:\Windows\System32\perfd005.dat
[2015/10/09 01:36:09 | 000,289,060 | ---- | C] () -- C:\Windows\System32\perfi001.dat
[2015/10/09 01:36:07 | 000,473,502 | ---- | C] () -- C:\Windows\System32\perfh001.dat
[2015/10/09 01:36:07 | 000,095,850 | ---- | C] () -- C:\Windows\System32\perfc001.dat
[2015/10/09 01:36:07 | 000,042,056 | ---- | C] () -- C:\Windows\System32\perfd001.dat
[2015/10/09 01:19:55 | 000,336,656 | ---- | C] () -- C:\Windows\System32\prfi0816.dat
[2015/10/09 01:19:54 | 000,723,506 | ---- | C] () -- C:\Windows\System32\prfh0816.dat
[2015/10/09 01:19:54 | 000,153,984 | ---- | C] () -- C:\Windows\System32\prfc0816.dat
[2015/10/09 01:19:54 | 000,040,548 | ---- | C] () -- C:\Windows\System32\prfd0816.dat
[2015/10/09 01:05:35 | 000,306,636 | ---- | C] () -- C:\Windows\System32\perfi006.dat
[2015/10/09 01:05:34 | 000,503,902 | ---- | C] () -- C:\Windows\System32\perfh006.dat
[2015/10/09 01:05:34 | 000,099,736 | ---- | C] () -- C:\Windows\System32\perfc006.dat
[2015/10/09 01:05:34 | 000,039,236 | ---- | C] () -- C:\Windows\System32\perfd006.dat
[2015/10/09 00:52:12 | 000,341,432 | ---- | C] () -- C:\Windows\System32\perfi00A.dat
[2015/10/09 00:52:11 | 000,739,944 | ---- | C] () -- C:\Windows\System32\perfh00A.dat
[2015/10/09 00:52:11 | 000,159,552 | ---- | C] () -- C:\Windows\System32\perfc00A.dat
[2015/10/09 00:52:11 | 000,041,390 | ---- | C] () -- C:\Windows\System32\perfd00A.dat
[2015/10/09 00:30:51 | 000,117,840 | ---- | C] () -- C:\Windows\System32\prfi0404.dat
[2015/10/09 00:30:50 | 000,392,830 | ---- | C] () -- C:\Windows\System32\prfh0404.dat
[2015/10/09 00:30:50 | 000,116,168 | ---- | C] () -- C:\Windows\System32\prfc0404.dat
[2015/10/09 00:30:50 | 000,031,548 | ---- | C] () -- C:\Windows\System32\prfd0404.dat
[2015/10/09 00:17:41 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2015/10/09 00:17:40 | 000,734,846 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2015/10/09 00:17:40 | 000,156,950 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2015/10/09 00:17:40 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2015/10/09 00:05:37 | 000,336,704 | ---- | C] () -- C:\Windows\System32\perfi019.dat
[2015/10/09 00:05:36 | 000,719,088 | ---- | C] () -- C:\Windows\System32\perfh019.dat
[2015/10/09 00:05:36 | 000,151,920 | ---- | C] () -- C:\Windows\System32\perfc019.dat
[2015/10/09 00:05:36 | 000,039,446 | ---- | C] () -- C:\Windows\System32\perfd019.dat
[2015/10/08 23:53:42 | 000,323,154 | ---- | C] () -- C:\Windows\System32\prfi0416.dat
[2015/10/08 23:53:41 | 000,708,368 | ---- | C] () -- C:\Windows\System32\prfh0416.dat
[2015/10/08 23:53:41 | 000,148,734 | ---- | C] () -- C:\Windows\System32\prfc0416.dat
[2015/10/08 23:53:41 | 000,038,536 | ---- | C] () -- C:\Windows\System32\prfd0416.dat
[2015/10/08 23:24:17 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2015/10/08 23:24:16 | 000,691,696 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2015/10/08 23:24:16 | 000,150,194 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2015/10/08 23:24:16 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2015/10/08 23:05:32 | 000,285,034 | ---- | C] () -- C:\Windows\System32\perfi01F.dat
[2015/10/08 23:05:31 | 000,651,170 | ---- | C] () -- C:\Windows\System32\perfh01F.dat
[2015/10/08 23:05:31 | 000,141,078 | ---- | C] () -- C:\Windows\System32\perfc01F.dat
[2015/10/08 23:05:31 | 000,037,160 | ---- | C] () -- C:\Windows\System32\perfd01F.dat
[2015/09/13 00:04:04 | 000,720,172 | ---- | C] () -- C:\Windows\unins000.exe
[2015/09/13 00:04:04 | 000,000,658 | ---- | C] () -- C:\Windows\unins000.dat
[2015/06/27 21:44:42 | 000,007,672 | ---- | C] () -- C:\Users\Adrien\AppData\Local\Resmon.ResmonCfg
[2015/05/09 16:37:22 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2015/05/09 16:36:08 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2015/05/09 15:48:40 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2015/08/06 19:44:51 | 012,875,776 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2015/08/30 04:42:09 | 000,000,000 | ---D | M] -- C:\Users\Administrateur\AppData\Roaming\Bitdefender
[2016/07/23 12:52:26 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\AdbDriverInstaller
[2016/08/07 15:21:23 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Anuman Interactive
[2016/03/09 21:59:40 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Apowersoft
[2016/08/07 18:14:53 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Audacity
[2016/08/08 20:02:04 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\cerasus.media
[2015/11/19 22:10:28 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Citra team
[2016/07/18 22:16:06 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\DAEMON Tools Lite
[2016/02/20 15:23:15 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\discord
[2016/04/16 22:13:53 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\DVDVideoSoft
[2015/09/06 02:01:39 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\IsolatedStorage
[2016/08/03 20:48:08 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Mumble
[2016/07/19 21:29:45 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Notepad++
[2016/03/23 19:50:04 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Opera Software
[2016/05/21 13:57:02 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Origin
[2016/07/10 14:37:01 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\PhotoFiltre 7
[2015/06/09 04:19:10 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Softplicity
[2016/02/08 18:27:44 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\Thinstall
[2016/07/30 16:10:04 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Roaming\ZHP
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]< HKCU\Software >[/color]
 
[HKEY_CURRENT_USER\Software\7-Zip]
 
[HKEY_CURRENT_USER\Software\Adobe]
 
[HKEY_CURRENT_USER\Software\Ambertation]
 
[HKEY_CURRENT_USER\Software\Apowersoft]
 
[HKEY_CURRENT_USER\Software\AppDataLow]
 
[HKEY_CURRENT_USER\Software\Apple Computer, Inc.]
 
[HKEY_CURRENT_USER\Software\Apple Inc.]
 
[HKEY_CURRENT_USER\Software\ASCII]
 
[HKEY_CURRENT_USER\Software\Battle.net]
 
[HKEY_CURRENT_USER\Software\Bitdefender]
 
[HKEY_CURRENT_USER\Software\Blizzard Entertainment]
 
[HKEY_CURRENT_USER\Software\BodomChildWorks]
 
[HKEY_CURRENT_USER\Software\Brackets]
 
[HKEY_CURRENT_USER\Software\Clients]
 
[HKEY_CURRENT_USER\Software\Clubic]
 
[HKEY_CURRENT_USER\Software\CyberLink]
 
[HKEY_CURRENT_USER\Software\DeterministicNetworks]
 
[HKEY_CURRENT_USER\Software\DSS]
 
[HKEY_CURRENT_USER\Software\DT Soft]
 
[HKEY_CURRENT_USER\Software\DZIPR]
 
[HKEY_CURRENT_USER\Software\EA GAMES]
 
[HKEY_CURRENT_USER\Software\EditHexa]
 
[HKEY_CURRENT_USER\Software\Electronic Arts]
 
[HKEY_CURRENT_USER\Software\Emotiplus]
 
[HKEY_CURRENT_USER\Software\Emulators]
 
[HKEY_CURRENT_USER\Software\Enterbrain]
 
[HKEY_CURRENT_USER\Software\Eraser]
 
[HKEY_CURRENT_USER\Software\famatech]
 
[HKEY_CURRENT_USER\Software\FreeDownloadManager.ORG]
 
[HKEY_CURRENT_USER\Software\from Dennis Babkin]
 
[HKEY_CURRENT_USER\Software\Frozendo]
 
[HKEY_CURRENT_USER\Software\g3n-h@ckm@n]
 
[HKEY_CURRENT_USER\Software\GoldWave]
 
[HKEY_CURRENT_USER\Software\Google]
 
[HKEY_CURRENT_USER\Software\HP]
 
[HKEY_CURRENT_USER\Software\IDT]
 
[HKEY_CURRENT_USER\Software\IM Providers]
 
[HKEY_CURRENT_USER\Software\IMDownloader]
 
[HKEY_CURRENT_USER\Software\Intel]
 
[HKEY_CURRENT_USER\Software\IPXWrapper]
 
[HKEY_CURRENT_USER\Software\JavaSoft]
 
[HKEY_CURRENT_USER\Software\Jihosoft]
 
[HKEY_CURRENT_USER\Software\KasperskyLab]
 
[HKEY_CURRENT_USER\Software\La Limace Folle]
 
[HKEY_CURRENT_USER\Software\Macromedia]
 
[HKEY_CURRENT_USER\Software\malavida]
 
[HKEY_CURRENT_USER\Software\MarineCat]
 
[HKEY_CURRENT_USER\Software\MediaHuman]
 
[HKEY_CURRENT_USER\Software\Microsoft]
 
[HKEY_CURRENT_USER\Software\Minuterie]
 
[HKEY_CURRENT_USER\Software\Mirage]
 
[HKEY_CURRENT_USER\Software\Mozilla]
 
[HKEY_CURRENT_USER\Software\MozillaPlugins]
 
[HKEY_CURRENT_USER\Software\MyComGames]
 
[HKEY_CURRENT_USER\Software\NCH Software]
 
[HKEY_CURRENT_USER\Software\Netscape]
 
[HKEY_CURRENT_USER\Software\ODBC]
 
[HKEY_CURRENT_USER\Software\Opera Software]
 
[HKEY_CURRENT_USER\Software\osu!]
 
[HKEY_CURRENT_USER\Software\paint.net]
 
[HKEY_CURRENT_USER\Software\PhotoFiltre 7]
 
[HKEY_CURRENT_USER\Software\Piriform]
 
[HKEY_CURRENT_USER\Software\Policies]
 
[HKEY_CURRENT_USER\Software\PopCap]
 
[HKEY_CURRENT_USER\Software\QtProject]
 
[HKEY_CURRENT_USER\Software\Resplendence Sp]
 
[HKEY_CURRENT_USER\Software\RPG Maker 2003 Hacker]
 
[HKEY_CURRENT_USER\Software\SecuROM]
 
[HKEY_CURRENT_USER\Software\SimonTatham]
 
[HKEY_CURRENT_USER\Software\Skype]
 
[HKEY_CURRENT_USER\Software\SkypePlugin]
 
[HKEY_CURRENT_USER\Software\Soft Lemon]
 
[HKEY_CURRENT_USER\Software\SoftEther Project]
 
[HKEY_CURRENT_USER\Software\SpeedFan]
 
[HKEY_CURRENT_USER\Software\supercoolrandom]
 
[HKEY_CURRENT_USER\Software\Synaptics]
 
[HKEY_CURRENT_USER\Software\Sysinternals]
 
[HKEY_CURRENT_USER\Software\SysStreaming]
 
[HKEY_CURRENT_USER\Software\Trolltech]
 
[HKEY_CURRENT_USER\Software\Unity]
 
[HKEY_CURRENT_USER\Software\Valve]
 
[HKEY_CURRENT_USER\Software\VB and VBA Program Settings]
 
[HKEY_CURRENT_USER\Software\VMware, Inc.]
 
[HKEY_CURRENT_USER\Software\VS Revo Group]
 
[HKEY_CURRENT_USER\Software\VSRevoGroup]
 
[HKEY_CURRENT_USER\Software\Winamp]
 
[HKEY_CURRENT_USER\Software\WinRAR SFX]
 
[HKEY_CURRENT_USER\Software\ZebHelpProcess Helper]
 
[HKEY_CURRENT_USER\Software\Classes]
 
[color=#A23BEC]< HKCU\Software\AppDataLow /s >[/color]
[HKEY_CURRENT_USER\Software\AppDataLow\Software]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\JavaSoft]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\JavaSoft\DeploymentProperties]
"deployment.modified.timestamp" = 1453478567226
"deployment.roaming.profile" = false
"deployment.expiration.decision.11.71.2" = undefined
"deployment.version" = 8
"install.disable.sponsor.offers" = false
"deployment.webjava.enabled" = false
"deployment.browser.path" = C:\Program Files\Mozilla Firefox\firefox.exe -- [2016/06/28 17:38:00 | 000,392,136 | ---- | M] (Mozilla Corporation)
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\AntiPhishing]
"i" = DDD799A1-A5CB-4FDC-B31F-D22388F69DEF [binary data]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security\AntiPhishing]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2]
"UserFile" = 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 F8 29 2F 26 4C 28 B8 40 B4 EC 02 15 81 69 31 0A 00 00 00 00 12 00 00 00 55 00 73 00 65 00 72 00 46 00 69 00 6C 00 65 00 00 00 10 66 00 00 00 01 00 00 20 00 00 00 08 53 B8 63 76 7C C0 DA BD E1 DD 74 CE FE 90 6F 79 DA 58 C1 14 20 0C 35 B3 93 82 67 92 C3 4A E1 00 00 00 00 0E 80 00 00 00 02 00 00 20 00 00 00 89 04 61 00 6A 2D B7 16 04 56 B6 03 82 30 A6 D3 46 3C CA 47 93 D4 BE FE 80 5B D0 15 2F A0 31 F5 10 00 00 00 C7 63 C7 87 A9 7E 1F 02 45 4E 0A EE 7D 5F BB 64 40 00 00 00 DD 51 FC AF 4B 1F 71 34 73 C0 0B 7D 1A 62 E1 CB 62 38 48 AB A1 45 D4 31 56 15 62 54 0C 58 31 F2 2B 8D 0E 75 E6 6C 9D B2 8A 8D A3 9A 70 FE 9C 1E 88 D9 20 03 B1 99 FD 6E 73 E1 31 EC AD 04 46 D8  [Binary data over 200 bytes]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\RepService]
"i" = 45082689-FE21-4C94-86EC-6544F224CA1A [binary data]
"B" = 50.000000 [binary data]
"A" = .cpl,.exe,.dll,.ocx,.sys,.scr,.drv [Binary data over 200 bytes]
"E" = 1 [binary data]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\ThinPrint]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\ThinPrint\Client]
"PrinterRevision" = 150
"PName_1" = Microsoft XPS Document Writer,1
"PType_1" = ,Microsoft XPS Document Writer
"PName_2" = HP Deskjet 3520 series (réseau),1
"PType_2" = ,HP Deskjet 3520 series
"PName_3" = Fax,1
"PType_3" = ,Microsoft Shared Fax Driver
"PName_4" = Envoyer à OneNote 2010,1
"PType_4" = ,Send To Microsoft OneNote 2010 Driver
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Unity]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Unity\WebPlayer]
"" = 
 
[color=#A23BEC]< HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /s >[/color]
"NoDriveTypeAutoRun" = 145
 
[color=#A23BEC]< HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /s >[/color]
 
[color=#A23BEC]< HKLM\Software >[/color]
 
[HKEY_LOCAL_MACHINE\Software\7-Zip]
 
[HKEY_LOCAL_MACHINE\Software\Adobe]
 
[HKEY_LOCAL_MACHINE\Software\AdsFix]
 
[HKEY_LOCAL_MACHINE\Software\AdwCleaner]
 
[HKEY_LOCAL_MACHINE\Software\AppDataLow]
 
[HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.]
 
[HKEY_LOCAL_MACHINE\Software\Apple Inc.]
 
[HKEY_LOCAL_MACHINE\Software\ATI Technologies]
 
[HKEY_LOCAL_MACHINE\Software\Battle.net]
 
[HKEY_LOCAL_MACHINE\Software\BitDefender Parental Control]
 
[HKEY_LOCAL_MACHINE\Software\Cisco Systems]
 
[HKEY_LOCAL_MACHINE\Software\Classes]
 
[HKEY_LOCAL_MACHINE\Software\Clients]
 
[HKEY_LOCAL_MACHINE\Software\CyberGhost]
 
[HKEY_LOCAL_MACHINE\Software\DeterministicNetworks]
 
[HKEY_LOCAL_MACHINE\Software\DigitalWave]
 
[HKEY_LOCAL_MACHINE\Software\DT Soft]
 
[HKEY_LOCAL_MACHINE\Software\EA GAMES]
 
[HKEY_LOCAL_MACHINE\Software\Electronic Arts]
 
[HKEY_LOCAL_MACHINE\Software\g3n-h@ckm@n]
 
[HKEY_LOCAL_MACHINE\Software\Google]
 
[HKEY_LOCAL_MACHINE\Software\Hewlett-Packard]
 
[HKEY_LOCAL_MACHINE\Software\HP]
 
[HKEY_LOCAL_MACHINE\Software\IDT]
 
[HKEY_LOCAL_MACHINE\Software\IM Providers]
 
[HKEY_LOCAL_MACHINE\Software\InstalledOptions]
 
[HKEY_LOCAL_MACHINE\Software\InstallShield]
 
[HKEY_LOCAL_MACHINE\Software\Intel]
 
[HKEY_LOCAL_MACHINE\Software\JavaSoft]
 
[HKEY_LOCAL_MACHINE\Software\JreMetrics]
 
[HKEY_LOCAL_MACHINE\Software\KasperskyLab]
 
[HKEY_LOCAL_MACHINE\Software\Macromedia]
 
[HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware]
 
[HKEY_LOCAL_MACHINE\Software\Maxis]
 
[HKEY_LOCAL_MACHINE\Software\Microsoft]
 
[HKEY_LOCAL_MACHINE\Software\Mozilla]
 
[HKEY_LOCAL_MACHINE\Software\mozilla.org]
 
[HKEY_LOCAL_MACHINE\Software\MozillaPlugins]
 
[HKEY_LOCAL_MACHINE\Software\NCH Software]
 
[HKEY_LOCAL_MACHINE\Software\NCH Swift Sound]
 
[HKEY_LOCAL_MACHINE\Software\Notepad++]
 
[HKEY_LOCAL_MACHINE\Software\ODBC]
 
[HKEY_LOCAL_MACHINE\Software\OldTimer Tools]
 
[HKEY_LOCAL_MACHINE\Software\Opera Software]
 
[HKEY_LOCAL_MACHINE\Software\Oracle]
 
[HKEY_LOCAL_MACHINE\Software\Origin]
 
[HKEY_LOCAL_MACHINE\Software\Origin Games]
 
[HKEY_LOCAL_MACHINE\Software\Piriform]
 
[HKEY_LOCAL_MACHINE\Software\Policies]
 
[HKEY_LOCAL_MACHINE\Software\PopCap]
 
[HKEY_LOCAL_MACHINE\Software\RegisteredApplications]
 
[HKEY_LOCAL_MACHINE\Software\ScanSoft]
 
[HKEY_LOCAL_MACHINE\Software\Sims]
 
[HKEY_LOCAL_MACHINE\Software\Skype]
 
[HKEY_LOCAL_MACHINE\Software\SoftEther Project]
 
[HKEY_LOCAL_MACHINE\Software\Solvusoft Corporation]
 
[HKEY_LOCAL_MACHINE\Software\Sonic]
 
[HKEY_LOCAL_MACHINE\Software\SpeedFan]
 
[HKEY_LOCAL_MACHINE\Software\Symantec]
 
[HKEY_LOCAL_MACHINE\Software\Synaptics]
 
[HKEY_LOCAL_MACHINE\Software\Sysinternals]
 
[HKEY_LOCAL_MACHINE\Software\SysStreaming]
 
[HKEY_LOCAL_MACHINE\Software\ThinPrint]
 
[HKEY_LOCAL_MACHINE\Software\Valve]
 
[HKEY_LOCAL_MACHINE\Software\VideoLAN]
 
[HKEY_LOCAL_MACHINE\Software\VMware, Inc.]
 
[HKEY_LOCAL_MACHINE\Software\Volatile]
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node]
 
[HKEY_LOCAL_MACHINE\Software\Yahoo]
 
[color=#A23BEC]< HKCU\Software\Microsoft\Command Processor /s >[/color]
"CompletionChar" = 9
"DefaultColor" = 0
"EnableExtensions" = 1
"PathCompletionChar" = 9
 
[color=#A23BEC]< HKLM\Software\Microsoft\Command Processor /s >[/color]
"CompletionChar" = 64
"DefaultColor" = 0
"EnableExtensions" = 1
"PathCompletionChar" = 64
 
[color=#A23BEC]< HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /s >[/color]
"NoDriveTypeAutoRun" = 60
 
[color=#A23BEC]< HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /s >[/color]
"ConsentPromptBehaviorAdmin" = 5
"ConsentPromptBehaviorUser" = 3
"EnableInstallerDetection" = 1
"EnableLUA" = 1
"EnableSecureUIAPaths" = 1
"EnableUIADesktopToggle" = 0
"EnableVirtualization" = 1
"PromptOnSecureDesktop" = 1
"ValidateAdminCodeSignatures" = 0
"dontdisplaylastusername" = 0
"legalnoticecaption" = 
"legalnoticetext" = 
"scforceoption" = 0
"shutdownwithoutlogon" = 1
"undockwithoutlogon" = 1
"FilterAdministratorToken" = 0
"HideFastUserSwitching" = 0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\ExceptionFormats]
"CF_TEXT" = 1
"CF_BITMAP" = 2
"CF_OEMTEXT" = 7
"CF_DIB" = 8
"CF_PALETTE" = 9
"CF_UNICODETEXT" = 13
"CF_DIBV5" = 17
 
[color=#A23BEC]< HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /s >[/color]
 
[color=#A23BEC]< HKLM\System\CurrentControlSet\Control\Session Manager\AppcertDlls /s >[/color]
 
[color=#A23BEC]< %Homedrive%\* >[/color]
[2016/06/05 20:16:07 | 000,000,039 | ---- | M] () -- C:\autoexec.bat
[2016/02/27 21:58:16 | 000,000,030 | ---- | M] () -- C:\AVScanner.ini
[2015/09/07 11:20:42 | 000,108,886 | ---- | M] () -- C:\bdlog.txt
[2014/06/28 02:21:34 | 000,391,640 | RHS- | M] () -- C:\bootmgr
[2015/05/09 14:21:44 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2009/06/10 23:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
[2015/05/09 15:33:56 | 000,204,528 | RHS- | M] () -- C:\grldr
[2015/06/27 21:32:04 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2015/12/28 20:13:27 | 000,000,198 | ---- | M] () -- C:\mask-list.txt
[2015/06/27 21:32:04 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2016/08/15 13:00:50 | 3148,804,096 | -HS- | M] () -- C:\pagefile.sys
[2016/08/14 23:08:17 | 000,022,403 | ---- | M] () -- C:\QuickDiag.txt
 
[color=#A23BEC]< %Homedrive%\*. >[/color]
[2016/01/31 02:25:53 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2016/08/02 17:46:03 | 000,000,000 | ---D | M] -- C:\AdwCleaner
[2015/05/10 07:25:07 | 000,000,000 | -HSD | M] -- C:\Boot
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2015/05/10 10:50:34 | 000,000,000 | ---D | M] -- C:\Intel
[2015/06/15 11:01:46 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2016/08/14 22:53:59 | 000,000,000 | R--D | M] -- C:\Program Files
[2016/07/31 14:02:25 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2016/08/12 16:10:57 | 000,000,000 | ---D | M] -- C:\QuickDiag
[2015/05/09 13:29:40 | 000,000,000 | -HSD | M] -- C:\Recovery
[2015/09/06 01:55:07 | 000,000,000 | ---D | M] -- C:\Spacekace
[2016/08/15 20:33:22 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2016/01/31 02:24:59 | 000,000,000 | R--D | M] -- C:\Users
[2016/08/13 17:46:26 | 000,000,000 | ---D | M] -- C:\Windows
 
[color=#A23BEC]< %Homedrive%\Recycler\*.exe /s >[/color]
 
[color=#A23BEC]< %Homedrive%\Recycler\*.scr /s >[/color]
 
[color=#A23BEC]< %Homedrive%\Recycler\*.pif /s >[/color]
 
[color=#A23BEC]< %Homedrive%\Recycler\*.vb* /s >[/color]
 
[color=#A23BEC]< %Homedrive%\$Recycle.bin\*.exe /s >[/color]
[2016/07/23 12:28:16 | 000,000,544 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-3062719487-4057316587-1700168192-1000\$I8W1OU3.exe
[2016/07/23 12:26:37 | 000,000,544 | ---- | M] () -- C:\$Recycle.bin\S-1-5-21-3062719487-4057316587-1700168192-1000\$IFC7RLP.exe
 
[color=#A23BEC]< %Homedrive%\$Recycle.bin\*.scr /s >[/color]
 
[color=#A23BEC]< %Homedrive%\$Recycle.bin\*.pif /s >[/color]
 
[color=#A23BEC]< %Homedrive%\$Recycle.bin\*.vb* /s >[/color]
 
[color=#A23BEC]< %Userprofile%\* >[/color]
[2016/08/15 21:15:35 | 004,456,448 | -HS- | M] () -- C:\Users\Adrien\NTUSER.DAT
[2016/08/15 21:15:35 | 000,262,144 | -HS- | M] () -- C:\Users\Adrien\ntuser.dat.LOG1
[2015/05/09 13:29:57 | 000,000,000 | -HS- | M] () -- C:\Users\Adrien\ntuser.dat.LOG2
[2016/03/22 18:31:49 | 000,065,536 | -HS- | M] () -- C:\Users\Adrien\NTUSER.DAT{1de8ddf4-f048-11e5-bd41-005056c00008}.TM.blf
[2016/03/22 18:31:49 | 000,524,288 | -HS- | M] () -- C:\Users\Adrien\NTUSER.DAT{1de8ddf4-f048-11e5-bd41-005056c00008}.TMContainer00000000000000000001.regtrans-ms
[2016/03/22 18:31:49 | 000,524,288 | -HS- | M] () -- C:\Users\Adrien\NTUSER.DAT{1de8ddf4-f048-11e5-bd41-005056c00008}.TMContainer00000000000000000002.regtrans-ms
[2015/05/09 15:35:08 | 000,065,536 | -HS- | M] () -- C:\Users\Adrien\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2015/05/09 15:35:08 | 000,524,288 | -HS- | M] () -- C:\Users\Adrien\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2015/05/09 15:35:08 | 000,524,288 | -HS- | M] () -- C:\Users\Adrien\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2015/05/09 13:29:57 | 000,000,020 | -HS- | M] () -- C:\Users\Adrien\ntuser.ini
[2016/05/15 02:01:08 | 000,000,660 | RHS- | M] () -- C:\Users\Adrien\ntuser.pol
[2016/07/10 17:06:41 | 002,226,688 | ---- | M] () -- C:\Users\Adrien\ZHPDiag3.exe
 
[color=#A23BEC]< %Userprofile%\*. >[/color]
[2016/07/23 12:47:51 | 000,000,000 | ---D | M] -- C:\Users\Adrien\.android
[2016/07/31 14:15:57 | 000,000,000 | ---D | M] -- C:\Users\Adrien\.oracle_jre_usage
[2015/05/09 15:38:09 | 000,000,000 | -H-D | M] -- C:\Users\Adrien\AppData
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Application Data
[2016/05/16 16:25:31 | 000,000,000 | ---D | M] -- C:\Users\Adrien\aTubeCatcher
[2016/02/14 14:55:49 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Contacts
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Cookies
[2016/08/15 20:13:55 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Desktop
[2016/08/14 20:00:06 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Documents
[2016/08/15 13:51:09 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Downloads
[2016/07/17 22:58:31 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Favorites
[2016/02/14 14:55:51 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Links
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Local Settings
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Menu Démarrer
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Mes documents
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Modèles
[2016/07/20 20:53:53 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Music
[2016/08/09 17:35:52 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Pictures
[2016/03/28 14:19:53 | 000,000,000 | ---D | M] -- C:\Users\Adrien\Powersaves3DS
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Recent
[2016/04/12 20:58:05 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Searches
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\SendTo
[2015/06/27 18:46:50 | 000,000,000 | ---D | M] -- C:\Users\Adrien\Tracing
[2016/07/23 12:46:32 | 000,000,000 | R--D | M] -- C:\Users\Adrien\Videos
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Voisinage d'impression
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\Voisinage réseau
 
[color=#A23BEC]< %Allusersprofile%\* >[/color]
[2015/05/09 15:48:40 | 000,000,057 | ---- | M] () -- C:\ProgramData\Ament.ini
[2016/04/30 13:30:22 | 000,262,144 | ---- | M] () -- C:\ProgramData\ntuser.dat
[2016/07/30 10:57:10 | 000,005,120 | -HS- | M] () -- C:\ProgramData\ntuser.dat.LOG1
[2016/04/30 13:30:22 | 000,000,000 | -HS- | M] () -- C:\ProgramData\ntuser.dat.LOG2
[2016/04/30 13:30:24 | 000,065,536 | -HS- | M] () -- C:\ProgramData\ntuser.dat{f86218dd-0ec4-11e6-a6ba-005056c00008}.TM.blf
[2016/04/30 13:30:24 | 000,524,288 | -HS- | M] () -- C:\ProgramData\ntuser.dat{f86218dd-0ec4-11e6-a6ba-005056c00008}.TMContainer00000000000000000001.regtrans-ms
[2016/04/30 13:30:24 | 000,524,288 | -HS- | M] () -- C:\ProgramData\ntuser.dat{f86218dd-0ec4-11e6-a6ba-005056c00008}.TMContainer00000000000000000002.regtrans-ms
[2016/04/30 13:30:28 | 000,065,536 | -HS- | M] () -- C:\ProgramData\ntuser.dat{f86218ee-0ec4-11e6-a6ba-005056c00008}.TM.blf
[2016/04/30 13:30:28 | 000,524,288 | -HS- | M] () -- C:\ProgramData\ntuser.dat{f86218ee-0ec4-11e6-a6ba-005056c00008}.TMContainer00000000000000000001.regtrans-ms
[2016/04/30 13:30:28 | 000,524,288 | -HS- | M] () -- C:\ProgramData\ntuser.dat{f86218ee-0ec4-11e6-a6ba-005056c00008}.TMContainer00000000000000000002.regtrans-ms
[2016/01/01 16:18:00 | 000,000,290 | RHS- | M] () -- C:\ProgramData\ntuser.pol
 
[color=#A23BEC]< %Allusersprofile%\*. >[/color]
[2015/10/31 20:39:32 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe
[2016/06/04 17:54:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple
[2015/12/04 22:40:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2016/04/24 16:33:10 | 000,000,000 | ---D | M] -- C:\ProgramData\BDLogging
[2015/05/09 13:29:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Bureau
[2016/04/24 16:33:11 | 000,000,000 | ---D | M] -- C:\ProgramData\CyberLink
[2015/06/28 03:36:44 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Lite
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2015/06/28 11:57:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Electronic Arts
[2015/05/09 13:29:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoris
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2015/05/09 15:50:34 | 000,000,000 | ---D | M] -- C:\ProgramData\HP
[2015/09/06 02:01:39 | 000,000,000 | ---D | M] -- C:\ProgramData\IsolatedStorage
[2016/08/15 13:18:51 | 000,000,000 | ---D | M] -- C:\ProgramData\Kaspersky Lab
[2016/07/18 13:59:29 | 000,000,000 | ---D | M] -- C:\ProgramData\LogMeIn
[2015/07/20 20:13:05 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes
[2015/05/09 13:29:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Menu Démarrer
[2015/07/24 21:12:20 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft
[2016/08/12 21:03:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft Help
[2015/05/09 13:29:40 | 000,000,000 | -HSD | M] -- C:\ProgramData\Modèles
[2015/05/11 20:10:38 | 000,000,000 | ---D | M] -- C:\ProgramData\Mozilla
[2016/07/11 20:23:51 | 000,000,000 | ---D | M] -- C:\ProgramData\NCH Software
[2016/07/31 14:14:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Oracle
[2016/08/15 19:42:22 | 000,000,000 | ---D | M] -- C:\ProgramData\Origin
[2015/06/28 06:17:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Package Cache
[2016/08/07 15:14:54 | 000,000,000 | ---D | M] -- C:\ProgramData\PopCap Games
[2016/08/04 17:19:53 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2009/07/14 06:53:55 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2016/08/15 13:02:13 | 000,000,000 | ---D | M] -- C:\ProgramData\VMware
[2015/08/02 18:41:16 | 000,000,000 | ---D | M] -- C:\ProgramData\X360CE
 
[color=#A23BEC]< %LocalAppData%\* >[/color]
[2016/07/19 14:57:35 | 000,109,672 | ---- | M] () -- C:\Users\Adrien\AppData\Local\GDIPFONTCACHEV1.DAT
[2016/08/14 23:09:07 | 005,654,605 | -H-- | M] () -- C:\Users\Adrien\AppData\Local\IconCache.db
[2016/08/12 20:58:31 | 000,007,672 | ---- | M] () -- C:\Users\Adrien\AppData\Local\Resmon.ResmonCfg
 
[color=#A23BEC]< %LocalAppData%\*. >[/color]
[2016/07/13 19:35:15 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Adobe
[2016/04/27 17:48:30 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Apple
[2016/03/07 18:48:34 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Apple Computer
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\AppData\Local\Application Data
[2015/05/09 15:23:00 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Apps
[2015/12/04 20:17:08 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\CDex
[2015/08/11 12:08:14 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Clavier+
[2016/07/07 18:33:28 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Diagnostics
[2016/03/19 16:33:20 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Discord
[2015/09/26 20:12:50 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\DOSBox
[2015/06/11 04:23:00 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\AppData\Local\EmieBrowserModeList
[2015/06/11 04:23:00 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\AppData\Local\EmieSiteList
[2015/06/11 04:23:00 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\AppData\Local\EmieUserList
[2016/05/04 21:05:49 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Eraser 6
[2016/06/05 01:55:38 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\GGJ
[2016/04/24 16:35:12 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Google
[2015/08/12 14:08:12 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\GWX
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\AppData\Local\Historique
[2015/05/09 15:53:23 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\HP
[2016/07/18 13:59:29 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\LogMeIn
[2016/04/24 20:54:13 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Macromedia
[2016/04/17 17:07:34 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\MediaHuman
[2016/07/16 18:12:13 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Microsoft
[2016/07/03 02:49:25 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Microsoft Games
[2015/10/18 20:50:52 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Microsoft Help
[2015/05/11 20:14:31 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Mozilla
[2016/03/23 19:50:08 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Opera Software
[2015/06/27 16:40:37 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Origin
[2016/04/26 20:38:55 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Programs
[2016/05/14 17:23:52 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\SkypePlugin
[2016/03/19 16:33:13 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\SquirrelTemp
[2016/08/15 20:18:26 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Temp
[2015/05/09 13:29:57 | 000,000,000 | -HSD | M] -- C:\Users\Adrien\AppData\Local\Temporary Internet Files
[2015/07/05 21:26:32 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Unity
[2016/04/25 21:02:16 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\VirtualStore
[2016/08/14 19:56:21 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\VMware
[2016/04/26 20:41:18 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\VS Revo Group
[2016/04/17 17:07:24 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\YouTubeToMp3
 
[color=#A23BEC]< %Userprofile%\Local Settings\* >[/color]
 
[color=#A23BEC]< %Userprofile%\Local Settings\*. >[/color]
 
[color=#A23BEC]< %Userprofile%\Local Settings\Application Data\* >[/color]
 
[color=#A23BEC]< %Userprofile%\Local Settings\Application Data\*. >[/color]
 
[color=#A23BEC]< %Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\* >[/color]
 
[color=#A23BEC]< %Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*. >[/color]
[2016/03/12 22:23:41 | 000,000,000 | ---D | M] -- C:\Users\Adrien\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZH8WTNL5
 
[color=#A23BEC]< %Userprofile%\Local  Settings\Application Data\Google\Chrome\User Data\Default\Pepper  Data\Shockwave Flash\WritableRoot\#SharedObjects\* >[/color]
 
[color=#A23BEC]< %Userprofile%\Local  Settings\Application Data\Google\Chrome\User Data\Default\Pepper  Data\Shockwave Flash\WritableRoot\#SharedObjects\*. >[/color]
 
[color=#A23BEC]< %programFiles%\* >[/color]
[2009/07/14 06:41:57 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini
 
[color=#A23BEC]< %programFiles%\*. >[/color]
[2016/01/17 15:25:49 | 000,000,000 | ---D | M] -- C:\Program Files\7-Zip
[2015/12/24 22:57:03 | 000,000,000 | ---D | M] -- C:\Program Files\Action Replay PowerSaves 3DS
[2015/10/31 20:40:10 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2016/06/04 18:06:50 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2015/07/24 20:47:38 | 000,000,000 | ---D | M] -- C:\Program Files\Audacity
[2015/12/04 22:16:35 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2015/07/24 20:49:02 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2016/07/31 14:23:58 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2015/06/28 03:43:15 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Lite
[2015/11/21 17:27:32 | 000,000,000 | ---D | M] -- C:\Program Files\DIFX
[2016/06/22 18:09:10 | 000,000,000 | ---D | M] -- C:\Program Files\DOSBox-0.74
[2016/04/14 22:21:19 | 000,000,000 | ---D | M] -- C:\Program Files\DsNET Corp
[2015/10/09 10:29:16 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker
[2016/04/22 18:26:26 | 000,000,000 | ---D | M] -- C:\Program Files\Electronic Arts
[2015/08/07 17:40:41 | 000,000,000 | ---D | M] -- C:\Program Files\Eraser
[2015/05/09 13:29:40 | 000,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2015/05/09 15:49:24 | 000,000,000 | ---D | M] -- C:\Program Files\HP
[2015/05/10 10:52:24 | 000,000,000 | ---D | M] -- C:\Program Files\IDT
[2016/04/22 18:26:26 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2015/05/10 10:50:38 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2016/08/13 13:53:28 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2016/06/04 18:37:38 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2016/06/04 18:43:49 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2016/07/31 14:14:34 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2016/07/30 10:53:30 | 000,000,000 | ---D | M] -- C:\Program Files\Kaspersky Lab
[2016/03/19 09:10:48 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes Anti-Malware
[2015/06/15 11:02:39 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Analysis Services
[2009/07/14 11:01:21 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2015/08/10 01:21:27 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Mouse and Keyboard Center
[2015/06/15 11:12:46 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2016/06/24 16:08:26 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2015/06/27 17:17:54 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft WSE
[2015/06/15 11:12:45 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2016/07/10 20:20:16 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2016/06/29 17:07:38 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2015/06/15 10:33:46 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2016/07/11 20:23:42 | 000,000,000 | ---D | M] -- C:\Program Files\NCH Software
[2016/03/16 18:48:11 | 000,000,000 | ---D | M] -- C:\Program Files\Notepad++
[2016/08/04 17:06:18 | 000,000,000 | ---D | M] -- C:\Program Files\Opera
[2016/06/11 14:26:37 | 000,000,000 | ---D | M] -- C:\Program Files\Origin
[2016/06/21 19:59:28 | 000,000,000 | ---D | M] -- C:\Program Files\Origin Games
[2016/07/10 14:33:52 | 000,000,000 | ---D | M] -- C:\Program Files\PhotoFiltre 7
[2016/08/07 15:14:56 | 000,000,000 | ---D | M] -- C:\Program Files\PopCap Games
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2016/05/01 16:24:41 | 000,000,000 | ---D | M] -- C:\Program Files\RPG Maker 2003
[2016/07/06 20:15:37 | 000,000,000 | ---D | M] -- C:\Program Files\ScanSoft
[2016/08/04 17:19:32 | 000,000,000 | R--D | M] -- C:\Program Files\Skype
[2016/01/30 22:30:06 | 000,000,000 | ---D | M] -- C:\Program Files\Slayers Online
[2016/08/15 13:02:37 | 000,000,000 | ---D | M] -- C:\Program Files\SpeedFan
[2015/05/10 10:55:48 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2016/04/26 20:34:31 | 000,000,000 | ---D | M] -- C:\Program Files\Unlocker
[2015/07/06 18:11:07 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2015/06/28 00:00:27 | 000,000,000 | ---D | M] -- C:\Program Files\VMware
[2016/05/15 20:33:12 | 000,000,000 | ---D | M] -- C:\Program Files\VS Revo Group
[2015/10/09 10:29:16 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2016/07/16 22:26:27 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2015/10/09 10:29:20 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2016/04/24 16:33:04 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2015/05/09 13:29:40 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2015/10/09 10:29:16 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2015/05/09 16:52:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2015/10/09 10:29:20 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
 
[color=#A23BEC]< %programfiles%\Google\Desktop\*. >[/color]
 
[color=#A23BEC]< %ProgramFiles%\Common Files\* >[/color]
 
[color=#A23BEC]< %ProgramFiles%\Common Files\*. >[/color]
[2015/10/31 20:40:11 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\Adobe
[2016/06/04 18:37:37 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\Apple
[2016/08/01 20:36:04 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\AV
[2015/06/15 19:13:21 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\DESIGNER
[2016/04/16 22:13:53 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\DVDVideoSoft
[2016/06/19 16:30:47 | 000,000,000 | -H-D | M] -- C:\Program Files\Common Files\EAInstaller
[2016/07/06 19:48:53 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\InstallShield
[2016/07/31 14:23:58 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\Java
[2016/07/01 16:38:58 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\microsoft shared
[2016/07/10 15:53:12 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\Services
[2016/04/26 20:13:51 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\Skype
[2009/07/14 04:37:05 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\SpeechEngines
[2015/08/10 15:08:04 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\Steam
[2015/10/09 10:29:16 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\System
[2015/06/28 00:06:24 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files\VMware
Invalid Environment Variable: ProgramFiles(X86)
Invalid Environment Variable: ProgramFiles(X86)
 
[color=#A23BEC]< %Systemroot%\Installer\* >[/color]
[2016/06/16 09:39:52 | 051,653,632 | R--- | M] () -- C:\Windows\Installer\1055665.msp
[2016/06/20 22:00:06 | 001,097,728 | R--- | M] () -- C:\Windows\Installer\105566d.msp
[2016/01/13 18:43:10 | 023,829,504 | R--- | M] () -- C:\Windows\Installer\107180.msp
[2016/01/13 11:23:10 | 013,256,192 | R--- | M] () -- C:\Windows\Installer\107560b.msp
[2016/02/09 23:45:22 | 001,648,640 | R--- | M] () -- C:\Windows\Installer\10b4688.msp
[2016/02/18 04:40:04 | 041,164,288 | R--- | M] () -- C:\Windows\Installer\10b469d.msp
[2016/02/09 23:45:12 | 003,456,512 | R--- | M] () -- C:\Windows\Installer\10b46b0.msp
[2015/12/11 16:08:50 | 003,452,416 | R--- | M] () -- C:\Windows\Installer\10dd703.msp
[2016/07/12 17:28:26 | 000,864,256 | ---- | M] () -- C:\Windows\Installer\10dfc2.msi
[2015/07/22 23:39:08 | 041,288,192 | R--- | M] () -- C:\Windows\Installer\10ec22e.msp
[2015/08/12 19:06:01 | 023,826,944 | R--- | M] () -- C:\Windows\Installer\10ec239.msp
[2016/07/12 21:27:14 | 041,163,776 | R--- | M] () -- C:\Windows\Installer\10f3664.msp
[2015/11/06 16:48:00 | 000,937,984 | ---- | M] () -- C:\Windows\Installer\1118f1.msi
[2016/07/04 18:11:26 | 041,540,608 | R--- | M] () -- C:\Windows\Installer\113f446.msp
[2016/02/09 23:45:14 | 000,336,384 | R--- | M] () -- C:\Windows\Installer\119c47d.msp
[2016/02/04 20:15:54 | 005,099,520 | R--- | M] () -- C:\Windows\Installer\119c492.msp
[2016/02/09 23:46:50 | 018,110,464 | R--- | M] () -- C:\Windows\Installer\11f9025.msp
[2016/06/02 06:48:41 | 002,772,992 | R--- | M] () -- C:\Windows\Installer\1205e7.msp
[2016/07/12 21:26:32 | 017,636,352 | R--- | M] () -- C:\Windows\Installer\12226a3.msp
[2015/11/11 10:58:48 | 003,453,440 | R--- | M] () -- C:\Windows\Installer\138ac3.msp
[2015/10/14 10:45:24 | 042,557,440 | R--- | M] () -- C:\Windows\Installer\142ed64.msp
[2016/01/27 19:03:14 | 008,910,848 | R--- | M] () -- C:\Windows\Installer\146abb1.msp
[2015/11/06 16:58:16 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14ce5af.msi
[2015/11/06 16:51:58 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14ce81f.msi
[2015/11/06 16:58:12 | 000,438,272 | ---- | M] () -- C:\Windows\Installer\14cea87.msi
[2015/11/06 16:50:52 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14cecf1.msi
[2015/11/06 16:50:50 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14cef63.msi
[2015/11/06 16:58:36 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14cf1d7.msi
[2015/11/06 16:58:44 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14cf44b.msi
[2015/11/06 16:49:38 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14cf6bd.msi
[2015/11/06 16:50:36 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\14cf92d.msi
[2015/11/06 16:50:46 | 000,438,272 | ---- | M] () -- C:\Windows\Installer\14cfb95.msi
[2015/10/14 10:45:58 | 009,075,200 | R--- | M] () -- C:\Windows\Installer\150bc64.msp
[2015/10/14 10:56:44 | 007,873,024 | R--- | M] () -- C:\Windows\Installer\150bc7c.msp
[2015/10/14 10:54:36 | 051,645,952 | R--- | M] () -- C:\Windows\Installer\150bca6.msp
[2015/10/14 11:44:42 | 000,415,744 | R--- | M] () -- C:\Windows\Installer\150bcad.msp
[2015/10/14 11:44:50 | 041,556,480 | R--- | M] () -- C:\Windows\Installer\150bcc8.msp
[2015/10/30 23:13:32 | 018,010,624 | R--- | M] () -- C:\Windows\Installer\150bcdd.msp
[2015/10/01 09:05:22 | 003,470,336 | R--- | M] () -- C:\Windows\Installer\150bcfc.msp
[2015/10/14 10:54:00 | 003,459,072 | R--- | M] () -- C:\Windows\Installer\150bd0f.msp
[2015/07/08 11:56:34 | 051,384,832 | R--- | M] () -- C:\Windows\Installer\15efad.msp
[2015/06/17 15:23:26 | 000,292,352 | R--- | M] () -- C:\Windows\Installer\15efc0.msp
[2015/06/24 01:19:12 | 002,925,056 | R--- | M] () -- C:\Windows\Installer\15efd3.msp
[2015/06/17 15:25:04 | 017,984,000 | R--- | M] () -- C:\Windows\Installer\15efe6.msp
[2015/06/17 15:23:16 | 042,517,504 | R--- | M] () -- C:\Windows\Installer\15effa.msp
[2015/07/08 11:57:10 | 041,091,584 | R--- | M] () -- C:\Windows\Installer\15f00f.msp
[2015/06/17 15:23:24 | 008,835,072 | R--- | M] () -- C:\Windows\Installer\15f022.msp
[2015/06/17 15:23:30 | 000,432,128 | R--- | M] () -- C:\Windows\Installer\15f029.msp
[2015/06/15 11:01:46 | 003,066,368 | ---- | M] () -- C:\Windows\Installer\161135.msi
[2015/06/15 11:02:09 | 001,807,360 | ---- | M] () -- C:\Windows\Installer\16113d.msi
[2015/06/15 11:02:31 | 001,804,800 | ---- | M] () -- C:\Windows\Installer\161143.msi
[2015/06/15 11:03:22 | 002,120,192 | ---- | M] () -- C:\Windows\Installer\161149.msi
[2015/06/15 11:05:14 | 000,654,848 | ---- | M] () -- C:\Windows\Installer\16114e.msi
[2015/06/15 11:04:53 | 000,663,040 | ---- | M] () -- C:\Windows\Installer\161153.msi
[2015/06/15 11:04:38 | 000,663,040 | ---- | M] () -- C:\Windows\Installer\161158.msi
[2015/06/15 11:04:16 | 000,667,648 | ---- | M] () -- C:\Windows\Installer\16115d.msi
[2015/06/15 11:04:04 | 000,656,896 | ---- | M] () -- C:\Windows\Installer\161162.msi
[2015/06/15 11:03:43 | 000,663,552 | ---- | M] () -- C:\Windows\Installer\161167.msi
[2015/06/15 11:03:42 | 000,653,824 | ---- | M] () -- C:\Windows\Installer\16116c.msi
[2015/06/15 11:05:22 | 001,804,288 | ---- | M] () -- C:\Windows\Installer\161171.msi
[2015/06/15 11:05:40 | 001,824,256 | ---- | M] () -- C:\Windows\Installer\161177.msi
[2015/06/15 11:05:55 | 001,824,768 | ---- | M] () -- C:\Windows\Installer\16117d.msi
[2015/06/15 11:07:14 | 017,376,768 | ---- | M] () -- C:\Windows\Installer\161184.msi
[2016/01/06 03:13:18 | 000,311,296 | R--- | M] () -- C:\Windows\Installer\16ebe6c.msp
[2015/12/15 03:31:08 | 001,126,400 | R--- | M] () -- C:\Windows\Installer\1743689.msp
[2016/06/01 15:23:58 | 040,845,312 | ---- | M] () -- C:\Windows\Installer\1792cf4.msi
[2016/03/09 04:25:22 | 002,412,544 | ---- | M] () -- C:\Windows\Installer\1792d00.msi
[2009/07/21 01:29:14 | 006,057,984 | ---- | M] () -- C:\Windows\Installer\1792d43.msi
[2008/09/30 22:07:10 | 006,042,112 | ---- | M] () -- C:\Windows\Installer\1792d48.msi
[2016/06/01 17:35:56 | 071,868,416 | ---- | M] () -- C:\Windows\Installer\1793c83.msi
[2008/08/12 23:02:36 | 001,305,600 | ---- | M] () -- C:\Windows\Installer\189624d.msi
[2016/07/01 16:21:36 | 002,342,912 | ---- | M] () -- C:\Windows\Installer\19451e.msi
[2016/07/01 16:44:55 | 019,943,424 | ---- | M] () -- C:\Windows\Installer\194522.msi
[2016/07/01 16:45:47 | 023,134,208 | ---- | M] () -- C:\Windows\Installer\19452c.msi
[2016/07/01 16:44:13 | 012,173,312 | ---- | M] () -- C:\Windows\Installer\194530.msi
[2012/09/20 17:07:42 | 014,641,152 | R--- | M] () -- C:\Windows\Installer\19f8964.msp
[2012/09/20 17:08:12 | 014,383,104 | R--- | M] () -- C:\Windows\Installer\19f896e.msp
[2012/09/20 17:06:24 | 005,275,136 | R--- | M] () -- C:\Windows\Installer\19f897b.msp
[2012/09/20 17:07:20 | 016,380,928 | R--- | M] () -- C:\Windows\Installer\19f898f.msp
[2012/09/20 17:07:52 | 010,426,368 | R--- | M] () -- C:\Windows\Installer\19f89a2.msp
[2012/03/21 05:57:52 | 001,591,808 | R--- | M] () -- C:\Windows\Installer\19f89b6.msp
[2012/03/21 05:57:26 | 000,133,632 | R--- | M] () -- C:\Windows\Installer\19f89bd.msp
[2011/10/26 22:51:34 | 016,885,760 | R--- | M] () -- C:\Windows\Installer\19f89da.msp
[2011/10/26 22:52:40 | 000,597,504 | R--- | M] () -- C:\Windows\Installer\19f89e1.msp
[2014/09/03 05:17:54 | 004,028,928 | R--- | M] () -- C:\Windows\Installer\1a22fc5.msp
[2014/09/03 00:41:20 | 000,497,152 | ---- | M] () -- C:\Windows\Installer\1a23008.msi
[2014/09/03 03:14:04 | 000,404,992 | ---- | M] () -- C:\Windows\Installer\1a2301e.msi
[2011/10/26 23:23:32 | 008,821,760 | R--- | M] () -- C:\Windows\Installer\1a23030.msp
[2011/10/26 23:22:30 | 001,071,616 | R--- | M] () -- C:\Windows\Installer\1a23038.msp
[2011/07/21 12:34:34 | 003,456,000 | R--- | M] () -- C:\Windows\Installer\1a2304d.msp
[2013/06/28 04:36:48 | 011,634,176 | R--- | M] () -- C:\Windows\Installer\1a23057.msp
[2013/07/15 19:15:22 | 662,040,064 | R--- | M] () -- C:\Windows\Installer\1a231a8.msp
[2013/06/28 04:14:16 | 017,591,808 | R--- | M] () -- C:\Windows\Installer\1a231b4.msp
[2013/06/28 03:52:32 | 001,220,096 | R--- | M] () -- C:\Windows\Installer\1a231ba.msp
[2013/06/28 04:24:56 | 015,849,472 | R--- | M] () -- C:\Windows\Installer\1a231c5.msp
[2013/06/28 04:42:24 | 015,716,864 | R--- | M] () -- C:\Windows\Installer\1a231cd.msp
[2013/06/28 04:04:24 | 005,651,456 | R--- | M] () -- C:\Windows\Installer\1a231fb.msp
[2013/06/28 04:04:46 | 021,519,360 | R--- | M] () -- C:\Windows\Installer\1a23203.msp
[2013/06/28 04:31:54 | 006,607,872 | R--- | M] () -- C:\Windows\Installer\1a23230.msp
[2013/06/28 04:31:26 | 011,771,392 | R--- | M] () -- C:\Windows\Installer\1a23243.msp
[2013/10/16 03:01:18 | 003,461,120 | R--- | M] () -- C:\Windows\Installer\1a23256.msp
[2015/05/14 15:36:34 | 003,461,632 | R--- | M] () -- C:\Windows\Installer\1a23269.msp
[2015/11/11 10:58:48 | 000,758,784 | R--- | M] () -- C:\Windows\Installer\1b7922b.msp
[2015/11/11 10:59:26 | 000,409,600 | R--- | M] () -- C:\Windows\Installer\1b7923e.msp
[2015/12/11 15:13:06 | 023,828,480 | R--- | M] () -- C:\Windows\Installer\1b79249.msp
[2015/11/18 11:26:00 | 041,193,984 | R--- | M] () -- C:\Windows\Installer\1b7925d.msp
[2016/02/26 22:51:46 | 001,273,856 | R--- | M] () -- C:\Windows\Installer\1ce768.msp
[2016/08/04 17:17:52 | 041,451,520 | ---- | M] () -- C:\Windows\Installer\206680.msi
[2015/02/17 17:38:08 | 051,382,272 | R--- | M] () -- C:\Windows\Installer\222639.msp
[2015/02/17 17:37:22 | 000,746,496 | R--- | M] () -- C:\Windows\Installer\222640.msp
[2013/07/24 08:28:50 | 003,137,536 | R--- | M] () -- C:\Windows\Installer\222653.msp
[2015/05/14 16:26:30 | 017,985,536 | R--- | M] () -- C:\Windows\Installer\22267e.msp
[2015/05/14 16:25:52 | 001,876,480 | R--- | M] () -- C:\Windows\Installer\222685.msp
[2013/09/06 23:07:02 | 011,534,336 | R--- | M] () -- C:\Windows\Installer\222698.msp
[2014/04/17 16:14:20 | 003,668,992 | R--- | M] () -- C:\Windows\Installer\2226ab.msp
[2015/05/14 15:38:42 | 009,630,208 | R--- | M] () -- C:\Windows\Installer\2226b9.msp
[2015/05/14 15:38:52 | 013,788,160 | R--- | M] () -- C:\Windows\Installer\2226c7.msp
[2015/05/14 15:39:06 | 006,406,656 | R--- | M] () -- C:\Windows\Installer\2226cd.msp
[2015/05/14 15:38:04 | 001,432,064 | R--- | M] () -- C:\Windows\Installer\2226d3.msp
[2015/05/14 15:38:40 | 013,250,048 | R--- | M] () -- C:\Windows\Installer\2226e1.msp
[2015/05/14 15:38:56 | 008,766,464 | R--- | M] () -- C:\Windows\Installer\2226ee.msp
[2015/03/22 23:17:58 | 005,605,888 | R--- | M] () -- C:\Windows\Installer\222702.msp
[2015/05/22 12:58:06 | 008,036,352 | R--- | M] () -- C:\Windows\Installer\222715.msp
[2015/03/22 23:32:02 | 000,949,248 | R--- | M] () -- C:\Windows\Installer\22271d.msp
[2015/03/22 23:31:46 | 042,528,256 | R--- | M] () -- C:\Windows\Installer\22273c.msp
[2015/05/22 12:58:04 | 003,713,024 | R--- | M] () -- C:\Windows\Installer\22274f.msp
[2015/04/15 12:18:10 | 002,924,544 | R--- | M] () -- C:\Windows\Installer\222762.msp
[2015/05/22 12:58:38 | 041,327,616 | R--- | M] () -- C:\Windows\Installer\222778.msp
[2013/07/24 08:07:50 | 003,693,056 | R--- | M] () -- C:\Windows\Installer\22278c.msp
[2014/10/03 17:02:42 | 001,872,896 | R--- | M] () -- C:\Windows\Installer\22279f.msp
[2015/04/01 12:30:34 | 005,764,096 | R--- | M] () -- C:\Windows\Installer\2227b3.msp
[2015/05/14 16:09:16 | 001,469,952 | R--- | M] () -- C:\Windows\Installer\2227c6.msp
[2014/07/18 05:01:00 | 001,012,736 | R--- | M] () -- C:\Windows\Installer\2227d9.msp
[2014/10/03 17:01:22 | 000,449,024 | R--- | M] () -- C:\Windows\Installer\2227eb.msp
[2014/11/20 10:09:02 | 000,330,240 | R--- | M] () -- C:\Windows\Installer\222800.msp
[2014/04/17 16:09:20 | 001,133,568 | R--- | M] () -- C:\Windows\Installer\222813.msp
[2015/05/14 15:39:18 | 012,555,264 | R--- | M] () -- C:\Windows\Installer\222831.msp
[2015/05/14 15:39:58 | 000,594,432 | R--- | M] () -- C:\Windows\Installer\222838.msp
[2013/07/24 08:21:48 | 001,097,728 | R--- | M] () -- C:\Windows\Installer\22284b.msp
[2015/02/17 17:43:42 | 008,855,552 | R--- | M] () -- C:\Windows\Installer\22285e.msp
[2015/02/17 17:43:02 | 001,053,696 | R--- | M] () -- C:\Windows\Installer\222866.msp
[2015/05/22 12:57:58 | 009,068,032 | R--- | M] () -- C:\Windows\Installer\222879.msp
[2013/08/14 02:37:10 | 000,390,144 | R--- | M] () -- C:\Windows\Installer\22288c.msp
[2013/09/06 23:07:14 | 002,347,008 | R--- | M] () -- C:\Windows\Installer\22289f.msp
[2014/04/02 02:54:52 | 003,246,592 | R--- | M] () -- C:\Windows\Installer\2228b2.msp
[2015/03/22 23:43:00 | 000,414,208 | R--- | M] () -- C:\Windows\Installer\2228b9.msp
[2015/05/22 12:58:08 | 051,410,944 | R--- | M] () -- C:\Windows\Installer\2228d1.msp
[2015/05/22 12:57:40 | 042,523,136 | R--- | M] () -- C:\Windows\Installer\2228e5.msp
[2015/05/14 16:22:04 | 000,352,256 | R--- | M] () -- C:\Windows\Installer\2228ee.msp
[2013/10/25 17:42:58 | 001,649,664 | R--- | M] () -- C:\Windows\Installer\222901.msp
[2014/11/12 00:00:14 | 001,543,168 | R--- | M] () -- C:\Windows\Installer\222914.msp
[2014/11/11 23:59:58 | 002,994,688 | R--- | M] () -- C:\Windows\Installer\22292a.msp
[2013/12/18 18:07:20 | 002,656,256 | R--- | M] () -- C:\Windows\Installer\222944.msp
[2015/07/08 21:03:46 | 001,531,904 | ---- | M] () -- C:\Windows\Installer\2248352.msi
[2016/01/13 11:18:48 | 042,556,928 | R--- | M] () -- C:\Windows\Installer\23a005b.msp
[2016/01/13 11:36:22 | 018,083,840 | R--- | M] () -- C:\Windows\Installer\24bdd04.msp
[2016/01/13 11:35:42 | 001,877,504 | R--- | M] () -- C:\Windows\Installer\24bdd0a.msp
[2016/01/13 11:19:54 | 005,639,168 | R--- | M] () -- C:\Windows\Installer\24bdd1c.msp
[2016/03/17 11:38:10 | 003,457,024 | R--- | M] () -- C:\Windows\Installer\28250cc.msp
[2016/03/17 11:34:00 | 042,563,584 | R--- | M] () -- C:\Windows\Installer\28250e0.msp
[2016/03/17 11:38:22 | 001,646,592 | R--- | M] () -- C:\Windows\Installer\28250f3.msp
[2016/03/08 05:28:32 | 006,139,904 | R--- | M] () -- C:\Windows\Installer\2825102.msp
[2016/01/12 05:19:17 | 046,080,000 | R--- | M] () -- C:\Windows\Installer\287cb5.msp
[2015/10/27 18:24:18 | 000,561,664 | R--- | M] () -- C:\Windows\Installer\2a4eb2.msp
[2015/07/23 07:45:24 | 002,118,144 | ---- | M] () -- C:\Windows\Installer\2a7d4e.msi
[2009/07/12 12:16:26 | 000,223,232 | ---- | M] () -- C:\Windows\Installer\2f8f079.msi
[2015/06/27 23:50:48 | 005,938,176 | ---- | M] () -- C:\Windows\Installer\2f8f07e.msi
[2008/08/08 14:11:02 | 000,232,960 | ---- | M] () -- C:\Windows\Installer\31a95.msi
[2015/08/07 17:36:36 | 018,542,592 | ---- | M] () -- C:\Windows\Installer\332f7c.msi
[2016/05/17 17:53:42 | 041,572,864 | R--- | M] () -- C:\Windows\Installer\344f5b.msp
[2016/06/23 21:41:17 | 023,830,528 | R--- | M] () -- C:\Windows\Installer\34d59cd.msp
[2011/02/19 23:08:16 | 000,163,840 | ---- | M] () -- C:\Windows\Installer\3a8c3c.msi
[2015/10/14 10:56:02 | 013,395,968 | R--- | M] () -- C:\Windows\Installer\3d2f29.msp
[2014/03/14 03:40:02 | 000,143,360 | ---- | M] () -- C:\Windows\Installer\455da61.msi
[2014/03/14 03:40:02 | 000,143,360 | ---- | M] () -- C:\Windows\Installer\455da66.msi
[2016/07/31 14:13:38 | 054,116,352 | ---- | M] () -- C:\Windows\Installer\4eb501.msi
[2016/07/31 14:23:41 | 000,770,048 | ---- | M] () -- C:\Windows\Installer\4eb506.msi
[2011/04/16 08:44:26 | 002,770,944 | ---- | M] () -- C:\Windows\Installer\5347eb7.msi
[2011/04/19 04:54:14 | 000,227,328 | ---- | M] () -- C:\Windows\Installer\5347ebd.msi
[2016/04/20 06:43:02 | 003,455,488 | R--- | M] () -- C:\Windows\Installer\5730e2.msp
[2016/07/30 10:50:57 | 005,849,088 | ---- | M] () -- C:\Windows\Installer\61590d.msi
[2016/05/14 16:46:06 | 014,319,616 | ---- | M] () -- C:\Windows\Installer\667b7c.msi
[2016/06/16 09:36:12 | 003,459,072 | R--- | M] () -- C:\Windows\Installer\6af53a.msp
[2015/06/28 18:58:49 | 069,822,976 | ---- | M] () -- C:\Windows\Installer\70ede56.msi
[2006/07/20 16:58:24 | 005,289,984 | ---- | M] () -- C:\Windows\Installer\773d15.msi
[2016/05/17 17:55:44 | 003,460,608 | R--- | M] () -- C:\Windows\Installer\84d08.msp
[2015/06/17 15:48:02 | 004,305,408 | R--- | M] () -- C:\Windows\Installer\8ab3ad.msp
[2015/04/15 23:36:50 | 000,038,400 | ---- | M] () -- C:\Windows\Installer\8f9bd.msi
[2015/06/15 18:40:20 | 023,826,944 | R--- | M] () -- C:\Windows\Installer\8f9c3.msp
[2016/07/06 19:47:50 | 019,706,880 | ---- | M] () -- C:\Windows\Installer\9383d9.msi
[2015/10/09 16:42:48 | 002,404,352 | ---- | M] () -- C:\Windows\Installer\9497f8.msi
[2006/12/02 07:09:06 | 002,818,048 | ---- | M] () -- C:\Windows\Installer\971960.msi
[2015/09/03 10:37:50 | 000,561,664 | R--- | M] () -- C:\Windows\Installer\9a3a1b.msp
[2015/08/13 06:16:48 | 003,463,680 | R--- | M] () -- C:\Windows\Installer\9a3a2e.msp
[2015/08/13 06:17:38 | 041,327,104 | R--- | M] () -- C:\Windows\Installer\9a3a43.msp
[2015/12/11 16:13:10 | 041,320,448 | R--- | M] () -- C:\Windows\Installer\9b01ab.msp
[2015/12/16 17:48:42 | 018,106,368 | R--- | M] () -- C:\Windows\Installer\9b01c7.msp
[2015/12/16 17:48:04 | 001,877,504 | R--- | M] () -- C:\Windows\Installer\9b01cd.msp
[2015/12/24 04:26:16 | 042,548,224 | R--- | M] () -- C:\Windows\Installer\9b01e1.msp
[2016/07/12 05:25:29 | 039,538,688 | R--- | M] () -- C:\Windows\Installer\9f59a1.msp
[2015/11/25 11:42:21 | 058,052,608 | R--- | M] () -- C:\Windows\Installer\b7df11.msp
[2016/04/20 06:40:30 | 041,443,328 | R--- | M] () -- C:\Windows\Installer\b8199f.msp
[2016/04/20 06:43:08 | 018,235,392 | R--- | M] () -- C:\Windows\Installer\b819c3.msp
[2016/06/16 09:40:44 | 018,235,392 | R--- | M] () -- C:\Windows\Installer\bb09c4.msp
[2016/06/16 09:40:24 | 042,566,656 | R--- | M] () -- C:\Windows\Installer\bb09d7.msp
[2016/05/26 20:29:15 | 005,763,072 | ---- | M] () -- C:\Windows\Installer\bf78c7.msi
[2015/09/23 10:48:38 | 003,460,608 | R--- | M] () -- C:\Windows\Installer\c0a1df.msp
[2015/09/04 23:34:00 | 008,987,648 | R--- | M] () -- C:\Windows\Installer\c0a1f2.msp
[2015/09/23 10:48:30 | 042,532,864 | R--- | M] () -- C:\Windows\Installer\c0a206.msp
[2015/09/04 23:32:46 | 005,976,064 | R--- | M] () -- C:\Windows\Installer\c0a21a.msp
[2015/09/23 10:49:48 | 018,142,720 | R--- | M] () -- C:\Windows\Installer\c0a244.msp
[2015/09/23 10:49:10 | 001,877,504 | R--- | M] () -- C:\Windows\Installer\c0a24a.msp
[2012/10/17 22:29:10 | 003,014,656 | ---- | M] () -- C:\Windows\Installer\c84be.msi
[2012/10/17 22:29:10 | 000,110,592 | ---- | M] () -- C:\Windows\Installer\c84c3.msi
[2015/03/17 10:41:29 | 002,805,760 | ---- | M] () -- C:\Windows\Installer\ce6efb.msi
[2015/10/13 05:26:24 | 052,576,256 | R--- | M] () -- C:\Windows\Installer\ce6fbb.msp
[2015/07/16 08:19:40 | 000,387,584 | R--- | M] () -- C:\Windows\Installer\ce8ce8.msp
[2015/07/22 23:40:42 | 018,104,832 | R--- | M] () -- C:\Windows\Installer\ce8cfe.msp
[2015/07/22 23:40:02 | 001,876,480 | R--- | M] () -- C:\Windows\Installer\ce8d05.msp
[2015/07/16 08:19:54 | 000,758,784 | R--- | M] () -- C:\Windows\Installer\ce8d18.msp
[2015/07/16 08:20:16 | 051,380,224 | R--- | M] () -- C:\Windows\Installer\ce8d2b.msp
[2015/07/16 08:19:50 | 003,460,096 | R--- | M] () -- C:\Windows\Installer\ce8d3e.msp
[2015/07/16 08:20:48 | 001,110,528 | R--- | M] () -- C:\Windows\Installer\ce8d51.msp
[2015/07/16 08:19:26 | 042,532,864 | R--- | M] () -- C:\Windows\Installer\ce8d65.msp
[2015/07/16 08:19:56 | 007,955,456 | R--- | M] () -- C:\Windows\Installer\ce8d78.msp
[2015/07/22 23:39:58 | 001,645,056 | R--- | M] () -- C:\Windows\Installer\ce8d8b.msp
[2016/05/19 05:30:11 | 001,429,504 | R--- | M] () -- C:\Windows\Installer\ceb563.msp
[2016/08/02 13:49:06 | 001,511,424 | R--- | M] () -- C:\Windows\Installer\cf295a.msp
[2016/03/08 05:45:31 | 002,719,744 | R--- | M] () -- C:\Windows\Installer\d26735.msp
[2015/09/04 23:34:06 | 000,534,016 | R--- | M] () -- C:\Windows\Installer\d4a864.msp
[2015/09/23 10:48:40 | 040,917,504 | R--- | M] () -- C:\Windows\Installer\d4a879.msp
[2015/09/23 10:48:26 | 007,851,008 | R--- | M] () -- C:\Windows\Installer\d4a88c.msp
[2016/05/10 05:20:29 | 058,986,496 | R--- | M] () -- C:\Windows\Installer\d6d13a.msp
[2016/04/20 06:40:04 | 003,716,608 | R--- | M] () -- C:\Windows\Installer\d8c805.msp
[2016/04/14 01:44:16 | 005,242,880 | R--- | M] () -- C:\Windows\Installer\d8c81c.msp
[2015/12/11 16:06:40 | 008,866,816 | R--- | M] () -- C:\Windows\Installer\d9ba6e.msp
[2015/12/11 16:05:14 | 003,471,360 | R--- | M] () -- C:\Windows\Installer\d9ba81.msp
[2015/12/11 16:05:58 | 000,978,432 | R--- | M] () -- C:\Windows\Installer\d9ba9a.msp
[2015/12/11 16:15:28 | 051,617,280 | R--- | M] () -- C:\Windows\Installer\d9bac2.msp
[2016/07/13 04:35:32 | 000,602,624 | R--- | M] () -- C:\Windows\Installer\dbd3dd.msp
[2015/08/13 06:18:46 | 009,611,264 | R--- | M] () -- C:\Windows\Installer\dcaf70.msp
[2016/04/20 06:41:02 | 008,040,960 | R--- | M] () -- C:\Windows\Installer\dd6a6b.msp
[2015/11/06 17:07:06 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de4921.msi
[2015/11/06 17:11:38 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de4b91.msi
[2015/11/06 17:10:52 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de4e01.msi
[2015/11/06 17:04:28 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de5071.msi
[2015/11/06 17:04:44 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de52e1.msi
[2015/11/06 17:03:26 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de5551.msi
[2015/11/06 17:03:52 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de57c1.msi
[2015/11/06 16:57:40 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de5a34.msi
[2015/11/06 16:59:10 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de5ca6.msi
[2015/11/06 17:02:54 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de5f16.msi
[2015/11/06 17:02:36 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de6186.msi
[2015/11/06 16:57:56 | 000,442,368 | ---- | M] () -- C:\Windows\Installer\de63f6.msi
[2016/02/16 14:48:12 | 009,687,040 | R--- | M] () -- C:\Windows\Installer\e5514.msp
[2016/05/17 17:56:42 | 002,978,304 | R--- | M] () -- C:\Windows\Installer\e57ef6.msp
[2015/08/13 06:33:28 | 018,118,144 | R--- | M] () -- C:\Windows\Installer\e624e5.msp
[2015/08/13 06:32:48 | 001,877,504 | R--- | M] () -- C:\Windows\Installer\e624ec.msp
[2015/08/13 06:17:04 | 042,519,040 | R--- | M] () -- C:\Windows\Installer\e62500.msp
[2015/08/19 03:51:46 | 051,412,992 | R--- | M] () -- C:\Windows\Installer\e62513.msp
[2015/08/13 06:16:46 | 000,298,496 | R--- | M] () -- C:\Windows\Installer\e62526.msp
[2016/07/12 21:22:26 | 008,464,384 | R--- | M] () -- C:\Windows\Installer\eed8b8.msp
[2016/07/12 21:25:18 | 013,164,544 | R--- | M] () -- C:\Windows\Installer\eed8cb.msp
[2015/11/11 10:58:38 | 042,552,320 | R--- | M] () -- C:\Windows\Installer\f3c835.msp
[2015/11/11 10:58:52 | 003,471,360 | R--- | M] () -- C:\Windows\Installer\f3c848.msp
[2015/11/11 10:59:14 | 008,869,376 | R--- | M] () -- C:\Windows\Installer\f3c85b.msp
[2016/01/13 11:20:28 | 041,347,072 | R--- | M] () -- C:\Windows\Installer\f684d0.msp
[2016/01/13 11:19:24 | 003,458,560 | R--- | M] () -- C:\Windows\Installer\f684e3.msp
[2016/03/18 21:38:57 | 036,020,224 | ---- | M] () -- C:\Windows\Installer\fa578a.msi
[2016/05/17 17:54:10 | 042,568,704 | R--- | M] () -- C:\Windows\Installer\fc97a4.msp
[2015/06/28 06:17:38 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}
[2016/02/27 21:38:24 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{141D77F8-6A81-3E14-B27D-DDD22D7FA755}
[2015/06/27 23:56:37 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
[2016/07/01 16:38:52 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{22CB8ED7-DF57-4864-BD04-F63B9CE4B494}
[2016/06/04 17:54:23 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{26356515-5821-40FA-9C3D-9785052A1062}
[2016/07/31 14:14:33 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{26A24AE4-039D-4CA4-87B4-2F32180101F0}
[2016/02/27 19:02:54 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{2C3F53E6-CCEB-3DE6-B738-725EF60E76DA}
[2016/02/27 18:44:49 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{2C5C022B-BC16-35B7-8F8E-4073ADE585BF}
[2016/02/21 16:22:51 | 000,028,672 | ---- | M] () -- C:\Windows\Installer\SourceHash{30500C7C-2206-3DC6-9792-96E95A04669D}
[2016/02/27 21:45:16 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{36EFD960-F4E5-36FE-B63E-3C3EB25A393F}
[2016/02/27 21:06:06 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{3AA1A4F0-4C7D-3E7E-807E-AA4660B0697E}
[2016/02/27 19:11:53 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{43622E9E-9147-3E63-89B9-DDF5E5D78B79}
[2016/07/31 14:23:58 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{4A03706F-666A-4037-7777-5F2748764D10}
[2016/07/01 16:50:10 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{4D2DDB98-1FE6-4CFE-BCFD-EFE27FF24FAE}
[2015/06/15 18:15:47 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{4DC59BF3-0D72-3CE8-BFEF-1E8FAF689EB0}
[2015/08/07 17:40:18 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{5140890B-8A88-4E81-A5C3-7B9F92F74FD2}
[2016/06/04 18:06:44 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{56EC47AA-5813-4FF6-8E75-544026FBEA83}
[2016/05/14 16:46:35 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{575E7A6A-F93E-4C3F-AAEB-AF96D8679532}
[2016/07/06 20:15:25 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{58B0F3ED-6FAE-486C-9AB9-1C06514097B4}
[2015/08/21 10:34:08 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{612C34C7-5E90-47D8-9B5C-0F717DD82726}
[2016/02/27 20:03:17 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{679A961A-16F5-3F2A-A29B-6BE7C43DF547}
[2016/02/27 21:12:45 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{692F64AA-4F65-315F-8B36-C3D1A5CC8FFE}
[2015/06/27 18:42:55 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{6D1221A9-17BF-4EC0-81F2-27D30EC30701}
[2015/06/28 10:20:45 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
[2015/11/21 17:03:09 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{716E0306-8318-4364-8B8F-0CC4E9376BAC}
[2016/06/19 16:25:41 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{7299052b-02a4-4627-81f2-1818da5d550d}
[2016/07/01 16:58:05 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{7418AEC8-8D0F-4242-AEC5-B9A67C403686}
[2016/07/06 19:48:50 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{790EC520-CCCC-4810-A0FE-061633204CE4}
[2016/06/04 18:30:38 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{7C14EFF4-6BD4-4398-AF8D-41F40F8D71F1}
[2016/02/27 20:19:19 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{7C86CCA6-01CC-3435-8FF2-85E89514172C}
[2016/03/18 21:40:30 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{817750FA-EC6A-485D-9901-0683AE6FFDF1}
[2015/11/22 00:40:26 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
[2015/08/10 01:20:31 | 000,057,344 | ---- | M] () -- C:\Windows\Installer\SourceHash{868F0A5D-5B3D-4EDD-8899-9668FCDA76DB}
[2016/02/27 20:58:14 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{8858FCDF-4D5C-3704-B9A3-86ADD8A9788C}
[2015/06/15 18:40:16 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
[2016/02/27 20:42:40 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{8A43DF7F-8D46-32D7-9BBB-420FE265C1CB}
[2015/06/15 11:12:29 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-0012-0000-0000-0000000FF1CE}
[2015/06/15 11:02:32 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-0016-040C-0000-0000000FF1CE}
[2015/06/15 11:03:23 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-0018-040C-0000-0000000FF1CE}
[2015/06/15 11:06:07 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-0019-040C-0000-0000000FF1CE}
[2015/06/15 11:03:43 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001A-040C-0000-0000000FF1CE}
[2015/06/15 11:06:47 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001B-040C-0000-0000000FF1CE}
[2015/06/15 11:05:53 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001F-0401-0000-0000000FF1CE}
[2015/06/15 11:05:30 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001F-0407-0000-0000000FF1CE}
[2015/06/15 11:05:47 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001F-0409-0000-0000000FF1CE}
[2015/06/15 11:05:40 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001F-040C-0000-0000000FF1CE}
[2015/06/15 11:05:25 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001F-0413-0000-0000000FF1CE}
[2015/06/15 11:05:36 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-001F-0C0A-0000-0000000FF1CE}
[2015/06/15 11:05:58 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-002C-040C-0000-0000000FF1CE}
[2015/06/15 11:02:13 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-006E-040C-0000-0000000FF1CE}
[2015/06/15 11:06:02 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-00A1-040C-0000-0000000FF1CE}
[2016/02/27 19:41:49 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{939C2321-FDC6-3434-A67C-08EE886A8C22}
[2016/02/27 19:27:07 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{99A8BBCF-F816-3ADD-B8D1-540FB9B3796B}
[2015/08/15 15:25:08 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{9A25302D-30C0-39D9-BD6F-21E6EC160475}
[2016/07/01 17:04:11 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{9B9D928F-97D5-4D95-9A71-EE9B1805BADE}
[2015/06/28 10:22:37 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{9BE518E6-ECC6-35A9-88E4-87755C07200F}
[2016/02/27 19:56:56 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{9FF18E71-98D1-3AF7-B651-05206742C954}
[2016/02/27 19:22:00 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{A105F1D3-D1C2-36A3-A352-2BBB1E1996A0}
[2016/07/12 17:31:47 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{AC76BA86-0804-1033-1959-001824191728}
[2015/10/31 20:38:42 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{AC76BA86-7AD7-1036-7B44-AC0F074E4100}
[2016/02/27 21:33:28 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{C2F8BA34-18D4-3FE8-AF51-D838695DD9F4}
[2016/02/27 19:07:04 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{C689A992-5F33-3089-8C99-88D998977553}
[2015/12/04 22:16:31 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{D168AAD0-6686-47C1-B599-CDD4888B9D1A}
[2016/02/27 19:34:27 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{E161B9C1-DDD6-30C8-A705-C1281A2846D6}
[2015/06/27 17:17:53 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
[2015/06/27 23:59:50 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{E452E727-86B8-4233-8CC3-41FD817AFAFF}
[2015/06/15 18:16:19 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{EC1FEA55-73CC-3A5F-BF47-B340B842C058}
[2016/02/27 21:29:14 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{EC70BD40-F917-3B84-AE42-30E74EAEDF95}
[2016/02/27 21:24:40 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{F09C0CBA-9C6C-3087-B160-C6DAAC61A6DE}
[2016/02/27 21:18:56 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{F4C709E1-76EC-3A6B-A015-38AEB35CAED0}
[2016/07/30 10:52:41 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{F575F386-57EF-4943-B003-A13F13B05EEB}
[2015/11/22 00:38:50 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
[2015/06/28 06:17:47 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}
[2016/04/26 20:13:45 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{FC965A47-4839-40CA-B618-18F486F042C6}
[2016/02/27 19:17:08 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{FF90D4BC-81F8-3CDB-9A13-C54C8BADD9FE}
[2015/06/28 18:58:56 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{FFD9383C-01D5-4897-A954-43AF599AED30}
[2015/12/04 22:17:11 | 000,000,000 | ---- | M] () -- C:\Windows\Installer\wix{9A629DCB-415D-4A50-85B9-5C2E4F8F74A8}.SchedServiceConfig.rmi
 
[color=#A23BEC]< %Systemroot%\Installer\*. >[/color]
[2015/05/09 14:58:12 | 000,000,000 | -HSD | M] -- C:\Windows\Installer\$PatchCache$
[2015/08/06 18:01:33 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
[2016/06/04 17:56:03 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{26356515-5821-40FA-9C3D-9785052A1062}
[2015/05/09 15:51:47 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{29DA693D-1CBC-413C-B3C2-893EC0B3B56C}
[2015/08/07 17:40:41 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{5140890B-8A88-4E81-A5C3-7B9F92F74FD2}
[2016/06/04 18:06:52 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{56EC47AA-5813-4FF6-8E75-544026FBEA83}
[2016/08/08 19:29:24 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{5C5A944F-096E-4ADD-B8E8-887F18BA6228}
[2015/08/21 10:34:11 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{612C34C7-5E90-47D8-9B5C-0F717DD82726}
[2016/05/26 20:38:58 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}
[2015/11/21 17:03:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{716E0306-8318-4364-8B8F-0CC4E9376BAC}
[2016/06/04 18:43:57 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{7C14EFF4-6BD4-4398-AF8D-41F40F8D71F1}
[2016/03/18 21:42:07 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{817750FA-EC6A-485D-9901-0683AE6FFDF1}
[2015/11/22 00:40:30 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
[2015/08/10 01:22:35 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{868F0A5D-5B3D-4EDD-8899-9668FCDA76DB}
[2016/06/23 21:43:35 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
[2016/08/12 21:03:17 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90140000-0012-0000-0000-0000000FF1CE}
[2016/08/10 21:08:31 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{90140000-006E-040C-0000-0000000FF1CE}
[2016/07/12 17:31:53 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-0804-1033-1959-001824191728}
[2016/08/02 20:55:25 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}
[2015/05/09 15:52:04 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}
[2015/12/04 22:16:35 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}
[2015/06/28 00:06:29 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{E452E727-86B8-4233-8CC3-41FD817AFAFF}
[2016/07/30 10:56:29 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F575F386-57EF-4943-B003-A13F13B05EEB}
[2015/11/22 00:38:59 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
[2016/08/04 17:19:34 | 000,000,000 | ---D | M] -- C:\Windows\Installer\{FC965A47-4839-40CA-B618-18F486F042C6}
 
[color=#A23BEC]< %Systemroot%\Temp\*.exe /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.exe /lockedfiles >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.in* >[/color]
[2009/07/14 06:42:29 | 000,000,073 | ---- | M] () -- C:\Windows\system32\desktop.ini
[2015/05/09 19:10:42 | 000,016,303 | ---- | M] () -- C:\Windows\system32\ieuinit.inf
[2009/07/14 06:42:26 | 000,000,535 | ---- | M] () -- C:\Windows\system32\mapisvc.inf
[2016/07/30 21:32:49 | 017,524,662 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI
[2009/06/10 23:39:59 | 000,060,124 | ---- | M] () -- C:\Windows\system32\tcpmon.ini
 
[color=#A23BEC]< %systemroot%\PSS\* /s >[/color]
[2015/12/22 19:07:58 | 000,024,576 | ---- | M] () -- C:\Windows\PSS\boot.backup
[2015/12/22 19:07:58 | 000,025,600 | -HS- | M] () -- C:\Windows\PSS\boot.backup.LOG
[2015/08/30 04:36:55 | 000,000,000 | -HS- | M] () -- C:\Windows\PSS\boot.backup.LOG1
[2015/08/30 04:36:55 | 000,000,000 | -HS- | M] () -- C:\Windows\PSS\boot.backup.LOG2
 
[color=#A23BEC]< %systemroot%\Tasks\* >[/color]
[2016/08/13 20:39:59 | 000,001,064 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
[2016/08/15 20:42:05 | 000,001,002 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player Updater.job
[2016/08/15 17:59:47 | 000,001,054 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2016/08/15 20:59:00 | 000,001,058 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2016/08/15 13:01:25 | 000,000,006 | -H-- | M] () -- C:\Windows\Tasks\SA.DAT
[2016/06/17 16:09:20 | 000,032,482 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#A23BEC]< %systemroot%\Tasks\*. >[/color]
 
[color=#A23BEC]< %systemroot%\system32\Tasks\* >[/color]
[2016/07/12 20:04:55 | 000,004,464 | ---- | M] () -- C:\Windows\system32\Tasks\Adobe Acrobat Update Task
[2016/07/13 19:44:46 | 000,004,056 | ---- | M] () -- C:\Windows\system32\Tasks\Adobe Flash Player PPAPI Notifier
[2016/07/13 19:44:49 | 000,003,940 | ---- | M] () -- C:\Windows\system32\Tasks\Adobe Flash Player Updater
[2015/06/27 10:19:22 | 000,003,518 | ---- | M] () -- C:\Windows\system32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8
[2015/07/24 20:49:52 | 000,002,788 | ---- | M] () -- C:\Windows\system32\Tasks\CCleanerSkipUAC
[2016/02/03 18:54:05 | 000,003,802 | ---- | M] () -- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
[2016/02/03 18:54:07 | 000,004,054 | ---- | M] () -- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
[2015/08/10 01:23:00 | 000,003,092 | ---- | M] () -- C:\Windows\system32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
[2015/08/10 01:22:57 | 000,003,090 | ---- | M] () -- C:\Windows\system32\Tasks\Microsoft_Hardware_Launch_itype_exe
[2015/08/10 01:23:02 | 000,003,118 | ---- | M] () -- C:\Windows\system32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
[2015/08/10 01:22:51 | 000,003,062 | ---- | M] () -- C:\Windows\system32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
[2015/08/10 01:22:41 | 000,003,060 | ---- | M] () -- C:\Windows\system32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
[2016/08/04 17:06:17 | 000,003,856 | ---- | M] () -- C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1458755314
[2015/06/28 03:39:40 | 000,003,148 | ---- | M] () -- C:\Windows\system32\Tasks\SidebarExecute
[2016/04/16 16:47:38 | 000,003,030 | ---- | M] () -- C:\Windows\system32\Tasks\{A5889960-B734-46D0-AD39-FDF94DD15539}
[2015/07/04 17:52:38 | 000,003,162 | ---- | M] () -- C:\Windows\system32\Tasks\{D0956CC2-18C8-4E8C-B79D-6EC20DC555E8}
 
[color=#A23BEC]< %systemroot%\system32\Tasks\*. >[/color]
[2016/06/04 18:07:23 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Apple
[2009/07/14 06:42:30 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\Microsoft
[2016/07/11 20:29:01 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\NCH Software
[2015/06/15 11:15:04 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\OfficeSoftwareProtectionPlatform
[2015/06/15 08:42:26 | 000,000,000 | ---D | M] -- C:\Windows\system32\Tasks\WPD
 
[color=#A23BEC]< %systemroot%\syswow64\Tasks\* >[/color]
 
[color=#A23BEC]< %systemroot%\syswow64\Tasks\*. >[/color]
 
[color=#A23BEC]< %systemroot%\system32\drivers\*.sy* /lockedfiles >[/color]
[2015/07/06 00:10:20 | 000,201,912 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\cm_km.sys
[2015/09/11 20:30:36 | 000,155,304 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kl1.sys
[2015/06/06 08:50:18 | 000,046,776 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klbackupdisk.sys
[2015/12/01 22:42:12 | 000,066,440 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klbackupflt.sys
[2015/12/02 00:21:12 | 000,067,456 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kldisk.sys
[2015/12/11 17:27:58 | 000,145,800 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klflt.sys
[2016/04/29 01:52:56 | 000,053,160 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klhk.sys
[2016/04/29 01:52:56 | 000,776,624 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klif.sys
[2016/04/29 01:52:56 | 000,045,144 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klim6.sys
[2015/11/11 11:56:28 | 000,046,464 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klkbdflt.sys
[2015/06/07 01:50:04 | 000,038,072 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klmouflt.sys
[2015/12/07 16:08:20 | 000,041,864 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klpd.sys
[2015/06/11 15:52:38 | 000,054,328 | ---- | M] (Kaspersky Lab ZAO)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kltdi.sys
[2015/12/03 11:10:22 | 000,096,648 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\klwtp.sys
[2015/12/03 00:36:22 | 000,161,672 | ---- | M] (AO Kaspersky Lab)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\kneps.sys
[2015/06/28 03:39:17 | 000,691,696 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\Windows\system32\drivers\sptd.sys
 
[color=#A23BEC]< %systemroot%\system32\config\*.exe /s >[/color]
 
[color=#A23BEC]< %Systemroot%\ServiceProfiles\*.exe /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.sys >[/color]
[2009/07/13 23:40:41 | 000,009,029 | ---- | M] () -- C:\Windows\system32\ANSI.SYS
[2015/03/04 06:16:14 | 000,249,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\clfs.sys
[2009/07/13 23:40:44 | 000,027,097 | ---- | M] () -- C:\Windows\system32\country.sys
[1996/04/03 21:33:26 | 000,005,248 | ---- | M] () -- C:\Windows\system32\giveio.sys
[2016/07/20 12:08:50 | 000,027,040 | -H-- | M] (LogMeIn, Inc.) -- C:\Windows\system32\hamachi.sys
[2009/07/13 23:40:40 | 000,004,768 | ---- | M] () -- C:\Windows\system32\HIMEM.SYS
[2009/07/13 23:40:43 | 000,042,809 | ---- | M] () -- C:\Windows\system32\KEY01.SYS
[2009/07/13 23:40:43 | 000,042,537 | ---- | M] () -- C:\Windows\system32\KEYBOARD.SYS
[2009/07/13 23:40:23 | 000,027,866 | ---- | M] () -- C:\Windows\system32\NTDOS.SYS
[2009/07/13 23:40:31 | 000,029,146 | ---- | M] () -- C:\Windows\system32\NTDOS404.SYS
[2009/07/13 23:40:35 | 000,029,370 | ---- | M] () -- C:\Windows\system32\NTDOS411.SYS
[2009/07/13 23:40:39 | 000,029,274 | ---- | M] () -- C:\Windows\system32\NTDOS412.SYS
[2009/07/13 23:40:27 | 000,029,146 | ---- | M] () -- C:\Windows\system32\NTDOS804.SYS
[2009/07/13 23:40:11 | 000,033,952 | ---- | M] () -- C:\Windows\system32\NTIO.SYS
[2009/07/13 23:40:15 | 000,034,672 | ---- | M] () -- C:\Windows\system32\NTIO404.SYS
[2009/07/13 23:40:17 | 000,035,776 | ---- | M] () -- C:\Windows\system32\NTIO411.SYS
[2009/07/13 23:40:19 | 000,035,536 | ---- | M] () -- C:\Windows\system32\NTIO412.SYS
[2009/07/13 23:40:13 | 000,034,672 | ---- | M] () -- C:\Windows\system32\NTIO804.SYS
[2012/12/29 22:59:38 | 000,024,184 | ---- | M] (Almico Software) -- C:\Windows\system32\speedfan.sys
[2016/07/08 16:53:59 | 002,399,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\system32\win32k.sys
 
[color=#A23BEC]< dir %Homedrive%\* /S /A:L /C >[/color]
 Le volume dans le lecteur C s'appelle Adrien
 Le num‚ro de s‚rie du volume est 68FB-A02E
 R‚pertoire de C:\
14/07/2009  06:53    <JONCTION>     Documents and Settings [C:\Users]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Program Files
09/05/2015  13:29    <JONCTION>     Fichiers communs [C:\Program Files\Common Files]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Program Files\Windows NT
09/05/2015  13:29    <JONCTION>     Accessoires [C:\Program Files\Windows NT\Accessories]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [.]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [.]
14/07/2009  06:53    <JONCTION>     Documents [.]
09/05/2015  13:29    <JONCTION>     Favoris [.]
14/07/2009  06:53    <JONCTION>     Favorites [.]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [.]
09/05/2015  13:29    <JONCTION>     ModŠles [.]
14/07/2009  06:53    <JONCTION>     Start Menu [.]
14/07/2009  06:53    <JONCTION>     Templates [.]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [.]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\ProgramData\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users
14/07/2009  06:53    <SYMLINKD>     All Users [C:\ProgramData]
14/07/2009  06:53    <JONCTION>     Default User [C:\Users\Default]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Administrateur
30/08/2015  04:41    <JONCTION>     Application Data [C:\Users\Administrateur\AppData\Roaming]
30/08/2015  04:41    <JONCTION>     Cookies [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Cookies]
30/08/2015  04:41    <JONCTION>     Local Settings [C:\Users\Administrateur\AppData\Local]
30/08/2015  04:41    <JONCTION>     Menu D‚marrer [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu]
30/08/2015  04:41    <JONCTION>     Mes documents [C:\Users\Administrateur\Documents]
30/08/2015  04:41    <JONCTION>     ModŠles [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Templates]
30/08/2015  04:41    <JONCTION>     Recent [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Recent]
30/08/2015  04:41    <JONCTION>     SendTo [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\SendTo]
30/08/2015  04:41    <JONCTION>     Voisinage d'impression [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
30/08/2015  04:41    <JONCTION>     Voisinage r‚seau [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Administrateur\AppData\Local
30/08/2015  04:41    <JONCTION>     Application Data [C:\Users\Administrateur\AppData\Local]
30/08/2015  04:41    <JONCTION>     Historique [C:\Users\Administrateur\AppData\Local\Microsoft\Windows\History]
30/08/2015  04:41    <JONCTION>     Temporary Internet Files [C:\Users\Administrateur\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu
30/08/2015  04:41    <JONCTION>     Programmes [C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Administrateur\Documents
30/08/2015  04:41    <JONCTION>     Ma musique [C:\Users\Administrateur\Music]
30/08/2015  04:41    <JONCTION>     Mes images [C:\Users\Administrateur\Pictures]
30/08/2015  04:41    <JONCTION>     Mes vid‚os [C:\Users\Administrateur\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Adrien
09/05/2015  13:29    <JONCTION>     Application Data [C:\Users\OHurel\AppData\Roaming]
09/05/2015  13:29    <JONCTION>     Cookies [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\Cookies]
09/05/2015  13:29    <JONCTION>     Local Settings [C:\Users\OHurel\AppData\Local]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     Mes documents [C:\Users\OHurel\Documents]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\Templates]
09/05/2015  13:29    <JONCTION>     Recent [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\Recent]
09/05/2015  13:29    <JONCTION>     SendTo [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\SendTo]
09/05/2015  13:29    <JONCTION>     Voisinage d'impression [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/05/2015  13:29    <JONCTION>     Voisinage r‚seau [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Adrien\AppData\Local
09/05/2015  13:29    <JONCTION>     Application Data [C:\Users\OHurel\AppData\Local]
09/05/2015  13:29    <JONCTION>     Historique [C:\Users\OHurel\AppData\Local\Microsoft\Windows\History]
09/05/2015  13:29    <JONCTION>     Temporary Internet Files [C:\Users\OHurel\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Adrien\AppData\Roaming\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\Users\OHurel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Adrien\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\OHurel\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\OHurel\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\OHurel\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [C:\ProgramData]
09/05/2015  13:29    <JONCTION>     Bureau [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Desktop [C:\Users\Public\Desktop]
14/07/2009  06:53    <JONCTION>     Documents [C:\Users\Public\Documents]
09/05/2015  13:29    <JONCTION>     Favoris [C:\Users\Public\Favorites]
14/07/2009  06:53    <JONCTION>     Favorites [C:\Users\Public\Favorites]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\ProgramData\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\ProgramData\Microsoft\Windows\Templates]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
14/07/2009  06:53    <JONCTION>     Application Data [.]
09/05/2015  13:29    <JONCTION>     Bureau [.]
14/07/2009  06:53    <JONCTION>     Desktop [.]
14/07/2009  06:53    <JONCTION>     Documents [.]
09/05/2015  13:29    <JONCTION>     Favoris [.]
14/07/2009  06:53    <JONCTION>     Favorites [.]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [.]
09/05/2015  13:29    <JONCTION>     ModŠles [.]
14/07/2009  06:53    <JONCTION>     Start Menu [.]
14/07/2009  06:53    <JONCTION>     Templates [.]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [.]
09/05/2015  13:29    <JONCTION>     Mes images [.]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [.]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [.]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [.]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [.]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Application Data\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Menu D‚marrer
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Oracle\Java\javapath
31/07/2016  14:15    <SYMLINK>      java.exe [C:\Program Files\Java\jre1.8.0_101\bin\java.exe]
31/07/2016  14:15    <SYMLINK>      javaw.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaw.exe]
31/07/2016  14:15    <SYMLINK>      javaws.exe [C:\Program Files\Java\jre1.8.0_101\bin\javaws.exe]
               3 fichier(s)                0 octets
 R‚pertoire de C:\Users\All Users\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Default
14/07/2009  06:53    <JONCTION>     Application Data [C:\Users\Default\AppData\Roaming]
14/07/2009  06:53    <JONCTION>     Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
14/07/2009  06:53    <JONCTION>     Local Settings [C:\Users\Default\AppData\Local]
09/05/2015  13:29    <JONCTION>     Menu D‚marrer [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
09/05/2015  13:29    <JONCTION>     Mes documents [C:\Users\Default\Documents]
09/05/2015  13:29    <JONCTION>     ModŠles [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
14/07/2009  06:53    <JONCTION>     My Documents [C:\Users\Default\Documents]
14/07/2009  06:53    <JONCTION>     NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
14/07/2009  06:53    <JONCTION>     PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
14/07/2009  06:53    <JONCTION>     Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
14/07/2009  06:53    <JONCTION>     SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
14/07/2009  06:53    <JONCTION>     Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
14/07/2009  06:53    <JONCTION>     Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
09/05/2015  13:29    <JONCTION>     Voisinage d'impression [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
09/05/2015  13:29    <JONCTION>     Voisinage r‚seau [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Default\AppData\Local
14/07/2009  06:53    <JONCTION>     Application Data [C:\Users\Default\AppData\Local]
09/05/2015  13:29    <JONCTION>     Historique [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009  06:53    <JONCTION>     History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
14/07/2009  06:53    <JONCTION>     Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
09/05/2015  13:29    <JONCTION>     Programmes [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Default\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Default\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Default\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Default\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Default\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Default\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Default\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Invit‚
31/01/2016  02:25    <JONCTION>     Application Data [C:\Users\Invit‚\AppData\Roaming]
31/01/2016  02:25    <JONCTION>     Cookies [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Cookies]
31/01/2016  02:25    <JONCTION>     Local Settings [C:\Users\Invit‚\AppData\Local]
31/01/2016  02:25    <JONCTION>     Menu D‚marrer [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Start Menu]
31/01/2016  02:25    <JONCTION>     Mes documents [C:\Users\Invit‚\Documents]
31/01/2016  02:25    <JONCTION>     ModŠles [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Templates]
31/01/2016  02:25    <JONCTION>     Recent [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Recent]
31/01/2016  02:25    <JONCTION>     SendTo [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\SendTo]
31/01/2016  02:25    <JONCTION>     Voisinage d'impression [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
31/01/2016  02:25    <JONCTION>     Voisinage r‚seau [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Invit‚\AppData\Local
31/01/2016  02:25    <JONCTION>     Application Data [C:\Users\Invit‚\AppData\Local]
31/01/2016  02:25    <JONCTION>     Historique [C:\Users\Invit‚\AppData\Local\Microsoft\Windows\History]
31/01/2016  02:25    <JONCTION>     Temporary Internet Files [C:\Users\Invit‚\AppData\Local\Microsoft\Windows\Temporary Internet Files]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Start Menu
31/01/2016  02:25    <JONCTION>     Programmes [C:\Users\Invit‚\AppData\Roaming\Microsoft\Windows\Start Menu\Programs]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Invit‚\Documents
31/01/2016  02:25    <JONCTION>     Ma musique [C:\Users\Invit‚\Music]
31/01/2016  02:25    <JONCTION>     Mes images [C:\Users\Invit‚\Pictures]
31/01/2016  02:25    <JONCTION>     Mes vid‚os [C:\Users\Invit‚\Videos]
               0 fichier(s)                0 octets
 R‚pertoire de C:\Users\Public\Documents
09/05/2015  13:29    <JONCTION>     Ma musique [C:\Users\Public\Music]
09/05/2015  13:29    <JONCTION>     Mes images [C:\Users\Public\Pictures]
09/05/2015  13:29    <JONCTION>     Mes vid‚os [C:\Users\Public\Videos]
14/07/2009  06:53    <JONCTION>     My Music [C:\Users\Public\Music]
14/07/2009  06:53    <JONCTION>     My Pictures [C:\Users\Public\Pictures]
14/07/2009  06:53    <JONCTION>     My Videos [C:\Users\Public\Videos]
               0 fichier(s)                0 octets
     Total des fichiers list‚sÿ:
              78 fichier(s)                0 octets
             636 R‚p(s)  100ÿ047ÿ814ÿ656 octets libres
 
[color=#A23BEC]< MD5 for: AFD.SYS  >[/color]
[2010/11/20 10:40:03 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=1151FD4FB0216CFED887BFDE29EBD516 -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_d9efac7dbcaf385b\afd.sys
[2015/10/14 02:41:27 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=3EA58284BD7B72F78D505E82366F7E0C -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.23237_none_da667526d5da9ab2\afd.sys
[2015/10/13 18:31:53 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=93B49FA857F7036A4EFF32371F6E7391 -- C:\Windows\System32\drivers\afd.sys
[2015/10/13 18:31:53 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=93B49FA857F7036A4EFF32371F6E7391 -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.19031_none_d9d6d4b9bcc265b7\afd.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_a5025d31bee4647c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_df26d4d57fdef5b0\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_dfc9143c98e9a6c4\atapi.sys
 
[color=#A23BEC]< MD5 for: CDROM.SYS  >[/color]
[2010/11/20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\drivers\cdrom.sys
[2010/11/20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\System32\DriverStore\FileRepository\cdrom.inf_x86_neutral_6381e09675524225\cdrom.sys
[2010/11/20 10:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=BE167ED0FDB9C1FA1133953C18D5A6C9 -- C:\Windows\winsxs\x86_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_61b0c5ce02098355\cdrom.sys
 
[color=#A23BEC]< MD5 for: EXPLORER.EXE  >[/color]
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
 
[color=#A23BEC]< MD5 for: I8042PRT.SYS  >[/color]
[2009/07/14 01:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\System32\drivers\i8042prt.sys
[2009/07/14 01:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_x86_neutral_50ad659974198591\i8042prt.sys
[2009/07/14 01:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_x86_neutral_7a9084e0177406eb\i8042prt.sys
[2009/07/14 01:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\winsxs\x86_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_9955d7c4373b0589\i8042prt.sys
[2009/07/14 01:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) MD5=F151F0BDC47F4A28B1B20A0818EA36D6 -- C:\Windows\winsxs\x86_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_4e0a61a033aec8c3\i8042prt.sys
 
[color=#A23BEC]< MD5 for: NDIS.SYS  >[/color]
[2012/08/22 19:05:16 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=15B74B6283CEBCCE3054C1001CA01B5E -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_aa0491cf93ad1c31\ndis.sys
[2015/10/13 00:32:56 | 000,713,152 | ---- | M] (Microsoft Corporation) MD5=43C1C599FF590C875764CB6254A506B6 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.23235_none_aa435dc7937e55cc\ndis.sys
[2012/08/22 19:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=8C9C922D71F1CD4DEF73F186416B7896 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_a9bdfee47a5cd154\ndis.sys
[2015/10/13 06:50:31 | 000,712,640 | ---- | M] (Microsoft Corporation) MD5=9804FB2E46077F2977552347DFCA7E05 -- C:\Windows\System32\drivers\ndis.sys
[2015/10/13 06:50:31 | 000,712,640 | ---- | M] (Microsoft Corporation) MD5=9804FB2E46077F2977552347DFCA7E05 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.19030_none_a9b4bda47a653a28\ndis.sys
[2010/11/20 14:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys
 
[color=#A23BEC]< MD5 for: NETBT.SYS  >[/color]
[2010/11/20 10:39:44 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=280122DDCF04B378EDD1AD54D71C1E54 -- C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_626c324d55864070\netbt.sys
[2016/05/11 16:52:27 | 000,188,928 | ---- | M] (Microsoft Corporation) MD5=A00996C9BFEF29A93B9F21DBE1DC502D -- C:\Windows\System32\drivers\netbt.sys
[2016/05/11 16:52:27 | 000,188,928 | ---- | M] (Microsoft Corporation) MD5=A00996C9BFEF29A93B9F21DBE1DC502D -- C:\Windows\winsxs\x86_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.23451_none_62c75d2e6ec73ced\netbt.sys
 
[color=#A23BEC]< MD5 for: TDX.SYS  >[/color]
[2015/10/14 02:41:04 | 000,074,752 | ---- | M] (Microsoft Corporation) MD5=0E5C6676F9ABDB1C54C461EA5BA8175B -- C:\Windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.23237_none_ecbbfae053832419\tdx.sys
[2010/11/20 10:39:17 | 000,074,752 | ---- | M] (Microsoft Corporation) MD5=B459575348C20E8121D6039DA063C704 -- C:\Windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.17514_none_ec4532373a57c1c2\tdx.sys
[2015/10/13 18:31:24 | 000,074,752 | ---- | M] (Microsoft Corporation) MD5=BB8817D0508DD5EA69C770C8DEF5AB67 -- C:\Windows\System32\drivers\tdx.sys
[2015/10/13 18:31:24 | 000,074,752 | ---- | M] (Microsoft Corporation) MD5=BB8817D0508DD5EA69C770C8DEF5AB67 -- C:\Windows\winsxs\x86_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.19031_none_ec2c5a733a6aef1e\tdx.sys
 
[color=#A23BEC]< MD5 for: VOLSNAP.SYS  >[/color]
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\drivers\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_17be216c5a5713d8\volsnap.sys
 
[color=#A23BEC]< MD5 for: WININIT.EXE  >[/color]
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2014/07/16 04:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2014/03/04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2016/07/28 00:38:59 | 000,074,240 | ---- | M] () MD5=A6C645EF2F30ABF61FCDBE5E76999730 -- C:\QuickDiag\MBR\Winlogon.exe
[2014/03/04 12:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe
[2015/10/05 09:48:32 | 000,893,752 | ---- | M] (MalwareBytes) MD5=E9A75E4B409A01E52055CE7CCA7FF925 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe

< End of report >