Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
Exécuté par raphi (administrateur) sur RAPHI-PC (23-12-2016 13:23:56)
Exécuté depuis C:\Users\raphi\Desktop
Profils chargés: raphi (Profils disponibles: raphi)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
() C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(yn) C:\Program Files\PGEHJYL1PB\NFLRR7FQ6.exe
(yn) C:\Users\raphi\AppData\Local\Temp\94V8499UCN\caster.exe
(yn) C:\Users\raphi\AppData\Local\Temp\YKE0OAQA60.exe
(yn) C:\Program Files\G9P0VTONQZ\RY2OB1PD7.exe
(yn) C:\Program Files\712IEAML5G\NCEOWI52J.exe
(yn) C:\Users\raphi\AppData\Local\Temp\7R46LGJOM\7R46LGJOM.exe
(yn) C:\Users\raphi\AppData\Local\Temp\ESZL7DSR9\JVUHFPIZL.exe
(yn) C:\Program Files\SFLQ24SAZN\SFLQ24SAZ.exe
() C:\Users\raphi\AppData\Roaming\cacaoweb\cacaoweb.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
(Search Module Ltd.) C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
() C:\Windows\svchost.exe
(Microsoft Corporation) C:\Windows\csrss.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5263504 2012-08-09] (VIA)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-05-20] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-08-24] (Adobe Systems Incorporated)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-06-22] (Disc Soft Ltd)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1046064 2016-12-07] ()
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3998832 2016-11-24] (Tonec Inc.)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [TOVHXYLABS] => "C:\Program Files (x86)\PublicHotspot\8RLUCPK10C.exe"
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [RC1S05PNPH] => "C:\Program Files (x86)\BestCleaner\ICQVJUPHVV.exe" <===== ATTENTION
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [QDZK3LW3MK] => C:\Program Files\PGEHJYL1PB\NFLRR7FQ6.exe [370176 2016-12-22] (yn)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [HL1CTCOWHA] => C:\Users\raphi\AppData\Local\Temp\94V8499UCN\caster.exe [370176 2016-12-22] (yn) <===== ATTENTION
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [2T350D44Q6] => C:\Users\raphi\AppData\Local\Temp\YKE0OAQA60.exe [370176 2016-12-22] (yn) <===== ATTENTION
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [U231BA53DM] => "C:\Program Files (x86)\DPower\F4J382816P.exe" <===== ATTENTION
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [R7S3U7TLGR] => "C:\Program Files (x86)\BestCleaner\BWHYBZA43Z.exe" <===== ATTENTION
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [07ZX2WRFBS] => C:\Program Files\G9P0VTONQZ\RY2OB1PD7.exe [370176 2016-12-22] (yn)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [FPFMPJ4XFE] => C:\Program Files\712IEAML5G\NCEOWI52J.exe [370176 2016-12-22] (yn)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [WPZAQ6WJYI] => C:\Users\raphi\AppData\Local\Temp\7R46LGJOM\7R46LGJOM.exe [370176 2016-12-22] (yn) <===== ATTENTION
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [RMKMSIYFQ6] => C:\Users\raphi\AppData\Local\Temp\ESZL7DSR9\JVUHFPIZL.exe [370176 2016-12-22] (yn) <===== ATTENTION
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [57YB0FJC5N] => C:\Program Files\SFLQ24SAZN\SFLQ24SAZ.exe [370176 2016-12-22] (yn)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [cacaoweb] => C:\Users\raphi\AppData\Roaming\cacaoweb\cacaoweb.exe [563896 2016-12-22] ()
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Run: [OutlookOnDesktop] => C:\Program Files (x86)\Outlook on the Desktop\OutlookDesktop.exe [2052608 2016-03-29] (SMR Computer Services)
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\MountPoints2: F - F:\setup.exe
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\MountPoints2: {bc6f36dd-45ef-11e6-b2c8-74d4359a9f1a} - D:\setup.exe
HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\MountPoints2: {de7139b3-51ed-11e6-8bb2-74d4359a9f1a} - I:\setup.exe
HKU\S-1-5-18\...\Run: [script_fcbd] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat [351 2016-12-05] ()
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-06-26] (Microsoft Corporation)
HKLM\...\Providers\d98xhjsa: C:\Program Files (x86)\Nzsyeradom Monitor\local64spl.dll [292352 2016-12-22] ()
AppInit_DLLs: C:\ProgramData\Hotfresh\Zoolax.dll => C:\ProgramData\Hotfresh\Zoolax.dll [358912 2016-12-22] ()
AppInit_DLLs-x32: C:\ProgramData\Hotfresh\Tip-Plus.dll => C:\ProgramData\Hotfresh\Tip-Plus.dll [248320 2016-12-22] ()
ShellExecuteHooks: Pas de nom - {1E4DD366-C5C1-11E6-B012-64006A5CFC35} - C:\Users\raphi\AppData\Roaming\Qozokshinack\Ghehersarzaward.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers-x32: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX32.dll [2016-11-14] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\fcbd.bat [2016-12-05] ()

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 89.2.0.10
Tcpip\..\Interfaces\{53FA9EDF-D413-4FA9-8FF4-F4423F3AC0A3}: [DhcpNameServer] 89.2.0.10

Internet Explorer:
==================
HKU\S-1-5-21-226680707-336431296-3396986734-1000\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-11-30] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-06-24] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-06-24] (Oracle Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-11-30] (Internet Download Manager, Tonec Inc.)

FireFox:
========
FF DefaultProfile: jf61qc98.default
FF ProfilePath: C:\Users\raphi\AppData\Roaming\Mozilla\Firefox\Profiles\jf61qc98.default [2016-12-22]
FF NewTab: Mozilla\Firefox\Profiles\jf61qc98.default -> C:\\ProgramData\\Hotfresh\\ff.NT
FF Homepage: Mozilla\Firefox\Profiles\jf61qc98.default -> C:\\ProgramData\\Hotfresh\\ff.HP
FF Extension: (Fast search) - C:\Users\raphi\AppData\Roaming\Mozilla\Firefox\Profiles\jf61qc98.default\Extensions\amcontextmenu@loucypher [2016-12-22]
FF Extension: (cacaoweb) - C:\Users\raphi\AppData\Roaming\Mozilla\Firefox\Profiles\jf61qc98.default\Extensions\cacaoweb@cacaoweb.org [2016-12-22] [non signé]
FF Extension: (Adblock Plus) - C:\Users\raphi\AppData\Roaming\Mozilla\Firefox\Profiles\jf61qc98.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-21]
FF SearchPlugin: C:\Users\raphi\AppData\Roaming\Mozilla\Firefox\Profiles\jf61qc98.default\searchplugins\slxy0qea.xml [2016-12-22]
FF HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2016-11-16]
FF HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\raphi\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\raphi\AppData\Roaming\IDM\idmmzcc5 [2016-12-23] [non signé]
FF HKU\S-1-5-21-226680707-336431296-3396986734-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-06-24] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-06-24] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-08-24] (Adobe Systems)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-22] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-22] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-08-24] (Adobe Systems)
FF Plugin HKU\S-1-5-21-226680707-336431296-3396986734-1000: @nsroblox.roblox.com/launcher -> C:\Users\raphi\AppData\Local\Roblox\Versions\version-4f4eb962659b4ffb\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-226680707-336431296-3396986734-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\raphi\AppData\Local\Roblox\Versions\version-4f4eb962659b4ffb\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)

Chrome: 
=======
CHR DefaultProfile: ChromeDefaultData
CHR HomePage: ChromeDefaultData -> hxxp://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRYSttY34mamef947lyuZn5X7qpkDH3GIxiArCaityClJPAjEkhOG2s_NMSv8vI3TiqxvZDvgJCVKqGms08N17OKvclWxlZlR5zcWBb85Foa7_cR3CsmZyVMqoXVQ1vH8rdgojd0fL3eg0-Gl3ccZwGj83Gutvyab0j-3TBXqCUR3xH72
CHR StartupUrls: ChromeDefaultData -> "hxxps://www.google.fr/"
CHR Profile: C:\Users\raphi\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-12-23] <==== ATTENTION
CHR Extension: (Google Drive) - C:\Users\raphi\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-22]
CHR Extension: (YouTube) - C:\Users\raphi\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-22]
CHR Extension: (Gmail) - C:\Users\raphi\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-22]
CHR Profile: C:\Users\raphi\AppData\Local\Google\Chrome\User Data\Default [2016-12-22]
CHR Extension: (Fast search) - C:\Users\raphi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbdpajcdgknpendpmecafmopknefafha [2016-12-22]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-11-30]
CHR HKU\S-1-5-21-226680707-336431296-3396986734-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2016-11-30]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-08-24] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2218712 2016-12-13] (Adobe Systems, Incorporated)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-12-11] ()
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-06-22] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [229152 2016-06-26] (EasyAntiCheat Ltd)
R2 Hecerry; C:\Program Files (x86)\Drowotywervught\cksControls.dll [180736 2016-12-22] () [Fichier non signé]
S2 Hotfresh; C:\ProgramData\\Hotfresh\\Hotfresh.exe [1051136 2016-12-22] () [Fichier non signé]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-05] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-05] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1316080 2016-12-07] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-12-09] ()
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [45056 2010-01-21] (Realtek) [Fichier non signé]
R2 SMUpd; C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe [3109888 2016-12-19] (Search Module Ltd.) [Fichier non signé]
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-03] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 Windows; C:\Windows\svchost.exe [177152 2016-12-22] () [Fichier non signé] <==== ATTENTION
S2 GmSvc; C:\Program Files (x86)\LDSGameCenter\GmSvc.dll [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-06-25] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-06-25] (Disc Soft Ltd)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R3 SMUpdd; C:\Program Files\Common Files\Noobzo\GNUpdate\smw.sys [52992 2016-12-19] ()
R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [231112 2013-01-03] (VIA Technologies, Inc.)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [301256 2013-01-03] (VIA Technologies, Inc.)
S3 dtldrvhelp; \??\c:\program files\safiplayer\dtldrvhelp64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

NETSVCx32: HpSvc -> pas de chemin du fichier.
NETSVCx32: GmSvc -> C:\Program Files (x86)\LDSGameCenter\GmSvc.dll ==> Pas de fichier

==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-12-23 04:11 - 2016-12-23 04:11 - 00407544 _____ C:\Windows\Minidump\122316-17581-01.dmp
2016-12-23 03:13 - 2016-12-23 03:13 - 00000222 _____ C:\Users\raphi\Desktop\Minion Masters.url
2016-12-23 02:40 - 2016-12-23 02:40 - 00000000 ____D C:\temp
2016-12-23 02:40 - 2016-12-23 02:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook on the Desktop
2016-12-23 02:40 - 2016-12-23 02:40 - 00000000 ____D C:\Program Files (x86)\Outlook on the Desktop
2016-12-23 01:31 - 2016-12-23 01:31 - 00003250 _____ C:\Windows\System32\Tasks\IBUpd2
2016-12-23 01:30 - 2016-12-23 01:54 - 00000000 ____D C:\Users\raphi\AppData\Local\BrowserAir
2016-12-23 01:30 - 2016-12-23 01:30 - 00439808 _____ C:\ProgramData\smp2.exe
2016-12-23 01:30 - 2016-12-23 01:30 - 00004240 _____ C:\Windows\System32\Tasks\SMW_UpdateTask_Time_333036363832353538342d3755556c415a505757414a34
2016-12-23 01:30 - 2016-12-23 01:30 - 00004160 _____ C:\Windows\System32\Tasks\SMW_P
2016-12-23 01:30 - 2016-12-23 01:30 - 00000000 ____D C:\ProgramData\SearchModule
2016-12-23 01:30 - 2016-12-23 01:30 - 00000000 ____D C:\Program Files\Common Files\Noobzo
2016-12-22 23:34 - 2016-12-22 23:34 - 00001034 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2016-12-22 23:34 - 2016-12-22 23:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-12-22 23:34 - 2016-12-22 23:34 - 00000000 ____D C:\Program Files\VS Revo Group
2016-12-22 23:27 - 2016-12-22 23:27 - 00359560 _____ C:\Windows\Minidump\122216-21028-01.dmp
2016-12-22 23:25 - 2016-12-22 23:25 - 00407480 _____ C:\Windows\Minidump\122216-19702-01.dmp
2016-12-22 22:51 - 2016-12-23 13:09 - 00563896 _____ C:\Users\raphi\Desktop\cacaoweb.exe
2016-12-22 22:51 - 2016-12-23 04:12 - 00000000 ____D C:\Users\raphi\AppData\Roaming\cacaoweb
2016-12-22 22:23 - 2016-12-22 22:23 - 00563896 _____ C:\Users\raphi\Downloads\cacaoweb.exe
2016-12-22 22:13 - 2016-12-22 22:17 - 00010525 _____ C:\Users\raphi\Desktop\ZHPCleaner.txt
2016-12-22 22:07 - 2016-12-22 22:17 - 00000000 ____D C:\Users\raphi\AppData\Roaming\ZHP
2016-12-22 21:56 - 2016-12-22 21:56 - 00006350 _____ C:\Users\raphi\Desktop\JRT.txt
2016-12-22 21:45 - 2016-12-22 21:45 - 01663040 _____ (Malwarebytes) C:\Users\raphi\Desktop\JRT.exe
2016-12-22 18:44 - 2016-12-23 13:24 - 00021996 _____ C:\Users\raphi\Desktop\FRST.txt
2016-12-22 18:43 - 2016-12-22 18:44 - 00000000 ____D C:\FRST
2016-12-22 18:43 - 2016-12-22 18:43 - 02420736 _____ (Farbar) C:\Users\raphi\Downloads\FRST64.exe
2016-12-22 18:43 - 2016-12-22 18:43 - 02420736 _____ (Farbar) C:\Users\raphi\Desktop\FRST64.exe
2016-12-22 18:41 - 2016-12-22 18:41 - 02656256 _____ C:\Users\raphi\Downloads\ZHPCleaner (1).exe
2016-12-22 18:36 - 2016-12-22 18:36 - 02656256 _____ C:\Users\raphi\Downloads\ZHPCleaner.exe
2016-12-22 18:31 - 2016-12-22 18:31 - 00407712 _____ C:\Windows\Minidump\122216-21340-01.dmp
2016-12-22 16:21 - 2016-12-22 16:21 - 00000000 ____D C:\Program Files\d98xhjsa
2016-12-22 15:07 - 2016-12-23 13:19 - 00001565 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-22 15:07 - 2016-12-23 13:19 - 00001492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-22 15:06 - 2016-12-22 15:14 - 00003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-22 15:06 - 2016-12-22 15:14 - 00003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-22 15:05 - 2016-12-22 15:05 - 01065376 _____ (Google Inc.) C:\Users\raphi\Downloads\ChromeSetup.exe
2016-12-22 12:46 - 2016-12-22 12:50 - 135632432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-22 12:18 - 2016-12-22 12:18 - 03977168 _____ C:\Users\raphi\Desktop\adwcleaner_6.041_2.exe
2016-12-22 12:15 - 2016-12-22 12:15 - 00000000 ____D C:\Program Files\SFLQ24SAZN
2016-12-22 02:39 - 2016-12-22 02:39 - 00000000 ____D C:\Users\raphi\AppData\LocalLow\AggroStudios
2016-12-22 02:27 - 2016-12-22 02:27 - 00003572 _____ C:\Windows\System32\Tasks\{B24A22A4-1FE6-4B72-A875-EE7000E356E6}
2016-12-22 02:26 - 2016-12-22 02:26 - 00250912 _____ C:\Windows\SysWOW64\kz.exe
2016-12-22 02:11 - 2016-12-22 02:15 - 00000000 ____D C:\Users\raphi\AppData\Roaming\navplugin
2016-12-22 02:07 - 2016-12-22 02:08 - 00000000 ____D C:\ProgramData\{FD73110D-C373-4641-A73F-6121604BA5F5}.tmp
2016-12-22 02:07 - 2016-12-22 02:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\鲁大师
2016-12-22 02:06 - 2016-12-22 02:06 - 01938532 _____ C:\Users\raphi\AppData\Roaming\Cantop.bin
2016-12-22 02:06 - 2016-12-22 02:06 - 01907523 _____ C:\Users\raphi\AppData\Roaming\Geokix.tst
2016-12-22 02:04 - 2016-12-23 04:12 - 00000000 ____D C:\ProgramData\Hotfresh
2016-12-22 02:04 - 2016-12-22 02:06 - 07316480 _____ C:\Users\raphi\AppData\Roaming\agent.dat
2016-12-22 02:04 - 2016-12-22 02:06 - 00126464 _____ C:\Users\raphi\AppData\Roaming\noah.dat
2016-12-22 02:04 - 2016-12-22 02:06 - 00070704 _____ C:\Users\raphi\AppData\Roaming\Config.xml
2016-12-22 02:04 - 2016-12-22 02:06 - 00018432 _____ C:\Users\raphi\AppData\Roaming\Main.dat
2016-12-22 02:04 - 2016-12-22 02:06 - 00005568 _____ C:\Users\raphi\AppData\Roaming\md.xml
2016-12-22 02:04 - 2016-12-22 02:04 - 01938532 _____ C:\Users\raphi\AppData\Roaming\Zam-It.bin
2016-12-22 02:04 - 2016-12-22 02:04 - 01907523 _____ C:\Users\raphi\AppData\Roaming\Kinlux.tst
2016-12-22 02:04 - 2016-12-22 02:04 - 00190394 _____ C:\Users\raphi\AppData\Roaming\LexiFan.bin
2016-12-22 02:04 - 2016-12-22 02:04 - 00136826 _____ () C:\Users\raphi\AppData\Roaming\Ap-Com.bin
2016-12-22 02:04 - 2016-12-22 02:04 - 00000000 ____D C:\Users\raphi\AppData\Local\UCBrowser
2016-12-22 02:03 - 2016-12-22 02:25 - 00000000 ____D C:\Users\raphi\AppData\Local\Apps\2.0
2016-12-22 02:02 - 2016-12-22 02:02 - 00190394 _____ C:\Users\raphi\AppData\Roaming\Villasoft.bin
2016-12-22 02:02 - 2016-12-22 02:02 - 00000000 ____D C:\Windows\SysWOW64\sstmp
2016-12-22 02:01 - 2016-12-22 02:01 - 00000000 ____D C:\Program Files\712IEAML5G
2016-12-22 02:00 - 2016-12-22 22:02 - 00625272 _____ C:\Windows\system32\NetUtils2016.dll
2016-12-22 02:00 - 2016-12-22 02:01 - 00000000 ____D C:\Program Files\G9P0VTONQZ
2016-12-22 02:00 - 2016-12-22 02:00 - 00000000 ____D C:\Windows\system32\sstmp
2016-12-22 01:59 - 2016-12-22 02:04 - 00017856 _____ C:\Users\raphi\AppData\Roaming\InstallationConfiguration.xml
2016-12-22 01:59 - 2016-12-22 01:59 - 00140288 _____ C:\Users\raphi\AppData\Roaming\Installer.dat
2016-12-22 01:59 - 2016-12-22 01:59 - 00000000 ____D C:\Program Files (x86)\Nzsyeradom Monitor
2016-12-22 01:58 - 2016-12-22 02:01 - 00000000 ____D C:\Program Files (x86)\PublicHotspot
2016-12-22 01:58 - 2016-12-22 01:58 - 00005994 _____ C:\Windows\System32\Tasks\Clajely Host
2016-12-22 01:58 - 2016-12-22 01:58 - 00000000 ____D C:\Program Files\PGEHJYL1PB
2016-12-22 01:58 - 2016-12-22 01:58 - 00000000 ____D C:\Program Files\JUWOB2BKKU
2016-12-22 01:58 - 2016-12-22 01:58 - 00000000 _____ C:\TOSTACK
2016-12-22 01:57 - 2016-12-22 18:31 - 00000000 ____D C:\Program Files (x86)\Drowotywervught
2016-12-22 01:57 - 2016-12-22 02:29 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Qozokshinack
2016-12-22 01:57 - 2016-12-22 02:11 - 00000000 ____D C:\Users\raphi\AppData\Local\Atezerry
2016-12-22 01:57 - 2016-12-22 01:57 - 01625824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\libeay32.dll
2016-12-22 01:57 - 2016-12-22 01:57 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2016-12-22 01:57 - 2016-12-22 01:57 - 00608117 _____ C:\Windows\libcurl-4.dll
2016-12-22 01:57 - 2016-12-22 01:57 - 00177152 _____ C:\Windows\svchost.exe
2016-12-22 01:57 - 2016-12-22 01:57 - 00073216 _____ C:\Windows\taskmgr.exe
2016-12-22 01:57 - 2016-12-22 01:57 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2016-12-22 01:57 - 2016-12-22 01:57 - 00000000 ____D C:\Windows\Azart
2016-12-22 01:57 - 2016-12-22 01:57 - 00000000 ____D C:\ProgramData\vCore
2016-12-22 01:38 - 2016-12-16 12:07 - 00000000 ____D C:\Users\raphi\Desktop\Earth.Liberation.v0.5
2016-12-22 01:13 - 2016-12-22 01:13 - 00000000 ____D C:\Users\raphi\Downloads\[ Torrent9.ws ] Teenage.Mutant.Ninja.Turtles.Out.of.the.Shadows.2016.FRENCH.BDRip.XViD-FUNKKY
2016-12-22 01:11 - 2016-12-22 01:11 - 00115725 _____ C:\Users\raphi\Downloads\ninja-turtles-2-french-dvdrip-2016.torrent
2016-12-21 22:57 - 2016-12-21 22:57 - 00000000 ____D C:\Users\raphi\Downloads\Deadpool.2016.TRUEFRENCH.BDRip.XVID-EVE
2016-12-21 22:56 - 2016-12-21 22:56 - 00115373 _____ C:\Users\raphi\Downloads\deadpool-truefrench-dvdrip-2016-2.torrent
2016-12-21 17:58 - 2016-12-21 17:58 - 00000000 ____D C:\Users\raphi\AppData\Local\Astro
2016-12-21 17:56 - 2016-12-20 15:47 - 00000000 ____D C:\Users\raphi\Desktop\ASTRONEER Early Access
2016-12-21 17:54 - 2016-12-21 17:55 - 00000000 ____D C:\Users\raphi\Downloads\3DMGAME-ASTRONEER.Pre-Alpha.v0.2.108.0.Cracked-3DM
2016-12-21 11:55 - 2016-12-21 11:55 - 00404480 _____ C:\Windows\system32\bi3.exe
2016-12-21 02:34 - 2016-12-21 02:34 - 00390960 _____ C:\Windows\Minidump\122116-19531-01.dmp
2016-12-20 22:21 - 2016-12-20 22:22 - 388039498 _____ C:\Users\raphi\Downloads\Hancock (2008).flv
2016-12-20 22:18 - 2016-12-20 22:18 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free FLV Player
2016-12-20 22:18 - 2016-12-20 22:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free FLV Player
2016-12-20 22:18 - 2016-12-20 22:18 - 00000000 ____D C:\Program Files\Free FLV Player
2016-12-20 21:02 - 2016-12-20 21:02 - 00386016 _____ C:\Windows\Minidump\122016-24086-01.dmp
2016-12-20 21:02 - 2016-12-20 21:02 - 00003296 ____N C:\bootsqm.dat
2016-12-20 21:01 - 2016-12-20 21:01 - 00000000 __SHD C:\found.000
2016-12-20 20:53 - 2016-12-20 20:53 - 00000923 _____ C:\Users\Public\Desktop\DS3 Tool.lnk
2016-12-20 20:53 - 2016-12-20 20:53 - 00000000 ____D C:\Users\raphi\AppData\Roaming\MotioninJoy
2016-12-20 20:53 - 2016-12-20 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy
2016-12-20 20:53 - 2011-12-07 19:42 - 00328712 _____ (Logitech Inc.) C:\Windows\system32\MijFrc.dll
2016-12-20 20:50 - 2016-12-20 20:53 - 00000000 ____D C:\Program Files\MotioninJoy
2016-12-20 20:50 - 2016-12-20 20:50 - 02551656 _____ (www.motioninjoy.com ) C:\Users\raphi\Downloads\motioninjoy_060004_amd64_signed.exe
2016-12-20 20:44 - 2016-12-20 20:44 - 04117346 _____ C:\Users\raphi\Downloads\MotioninJoy_071001_signed (1).zip
2016-12-20 20:06 - 2016-12-20 20:06 - 00378776 _____ C:\Windows\Minidump\122016-18907-01.dmp
2016-12-20 19:42 - 2016-12-20 19:42 - 00375672 _____ C:\Windows\Minidump\122016-16738-01.dmp
2016-12-20 19:40 - 2016-12-20 19:40 - 00380856 _____ C:\Windows\Minidump\122016-15444-01.dmp
2016-12-20 19:37 - 2016-12-20 19:37 - 00378744 _____ C:\Windows\Minidump\122016-17160-01.dmp
2016-12-20 19:34 - 2016-12-20 19:35 - 00380288 _____ C:\Windows\Minidump\122016-16286-01.dmp
2016-12-20 12:31 - 2016-12-20 12:31 - 00403128 _____ C:\Windows\Minidump\122016-16645-01.dmp
2016-12-18 11:48 - 2016-12-21 16:06 - 00000889 _____ C:\Users\Public\Desktop\TruckersMP.lnk
2016-12-18 11:48 - 2016-12-21 16:06 - 00000000 ____D C:\ProgramData\TruckersMP
2016-12-18 11:48 - 2016-12-21 16:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TruckersMP Launcher
2016-12-18 11:48 - 2016-12-21 16:06 - 00000000 ____D C:\Program Files\TruckersMP Launcher
2016-12-17 14:31 - 2016-12-17 14:31 - 00000000 ____D C:\Users\raphi\AppData\LocalLow\stillalive studios GmbH
2016-12-17 14:29 - 2016-12-17 14:29 - 00000768 _____ C:\Users\raphi\Desktop\Bus Simulator 16.lnk
2016-12-17 14:29 - 2016-12-17 14:29 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Bus Simulator 16_Uninstall
2016-12-17 14:29 - 2016-12-17 14:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2016-12-17 14:16 - 2016-12-17 14:17 - 00000000 ____D C:\Users\raphi\Downloads\[R.G. Mechanics] Bus Simulator 16
2016-12-17 14:15 - 2016-12-17 14:15 - 00012072 _____ C:\Users\raphi\Downloads\Bus.Simulator.16.With.Update.1.Incl.DLC-Repack.torrent
2016-12-17 14:05 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2016-12-17 14:05 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-12-17 14:05 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2016-12-17 14:05 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-12-17 14:05 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2016-12-17 14:05 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-12-16 19:34 - 2016-12-16 19:34 - 00000233 _____ C:\Users\raphi\Desktop\Tom Clancy's Splinter Cell.url
2016-12-16 19:27 - 2016-12-16 19:27 - 00000000 ____D C:\Users\raphi\Desktop\SAMP Keybinder
2016-12-16 19:21 - 2016-12-16 19:28 - 00000226 ____H C:\Users\raphi\Desktop\Ultimate_Keybinder_Settings.ini
2016-12-16 19:21 - 2010-09-26 10:22 - 00743424 _____ C:\Users\raphi\Desktop\Ultimate SAMP KeyBinder.exe
2016-12-16 19:20 - 2016-12-16 19:20 - 00000000 ____D C:\Users\raphi\AppData\Local\paul.bv96@yahoo.com
2016-12-16 16:24 - 2016-12-16 16:24 - 01718968 _____ C:\Windows\f9fe422c7dd7a8377bf1e96dab3adff6.exe
2016-12-14 13:01 - 2016-11-21 19:16 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-12-14 13:01 - 2016-11-21 19:16 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-12-14 13:01 - 2016-11-21 19:12 - 01462272 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-12-14 13:01 - 2016-11-21 19:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-12-14 13:01 - 2016-11-20 17:20 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-12-14 13:01 - 2016-11-20 17:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-12-14 13:01 - 2016-11-20 17:20 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-12-14 13:01 - 2016-11-20 17:20 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-12-14 13:01 - 2016-11-20 17:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-12-14 13:01 - 2016-11-20 17:19 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-12-14 13:01 - 2016-11-20 17:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-12-14 13:01 - 2016-11-20 16:58 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-12-14 13:01 - 2016-11-20 16:57 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-12-14 13:01 - 2016-11-20 16:57 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-12-14 13:01 - 2016-11-20 16:57 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-12-14 13:01 - 2016-11-20 16:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-12-14 13:01 - 2016-11-20 16:52 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-12-14 13:01 - 2016-11-20 15:07 - 00467392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-14 13:01 - 2016-11-17 17:41 - 00370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2016-12-14 13:01 - 2016-11-15 00:27 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-12-14 13:01 - 2016-11-14 23:39 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-12-14 13:01 - 2016-11-12 20:48 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-12-14 13:01 - 2016-11-12 20:48 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-12-14 13:01 - 2016-11-12 20:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-12-14 13:01 - 2016-11-12 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-12-14 13:01 - 2016-11-12 20:26 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-12-14 13:01 - 2016-11-12 20:25 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-12-14 13:01 - 2016-11-12 20:25 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-12-14 13:01 - 2016-11-12 20:21 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-12-14 13:01 - 2016-11-12 20:15 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-12-14 13:01 - 2016-11-12 20:14 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-12-14 13:01 - 2016-11-12 20:09 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-12-14 13:01 - 2016-11-12 20:08 - 25759744 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-14 13:01 - 2016-11-12 20:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-12-14 13:01 - 2016-11-12 20:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-12-14 13:01 - 2016-11-12 20:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-12-14 13:01 - 2016-11-12 20:07 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-12-14 13:01 - 2016-11-12 19:56 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-12-14 13:01 - 2016-11-12 19:53 - 06049280 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-14 13:01 - 2016-11-12 19:52 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-12-14 13:01 - 2016-11-12 19:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-12-14 13:01 - 2016-11-12 19:41 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-12-14 13:01 - 2016-11-12 19:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-12-14 13:01 - 2016-11-12 19:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-12-14 13:01 - 2016-11-12 19:34 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-12-14 13:01 - 2016-11-12 19:31 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-12-14 13:01 - 2016-11-12 19:30 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-12-14 13:01 - 2016-11-12 19:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-12-14 13:01 - 2016-11-12 19:29 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-12-14 13:01 - 2016-11-12 19:29 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-12-14 13:01 - 2016-11-12 19:28 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-12-14 13:01 - 2016-11-12 19:27 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-12-14 13:01 - 2016-11-12 19:20 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-12-14 13:01 - 2016-11-12 19:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-12-14 13:01 - 2016-11-12 19:19 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-12-14 13:01 - 2016-11-12 19:17 - 20302848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-12-14 13:01 - 2016-11-12 19:15 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-12-14 13:01 - 2016-11-12 19:14 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-12-14 13:01 - 2016-11-12 19:14 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-12-14 13:01 - 2016-11-12 19:14 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-12-14 13:01 - 2016-11-12 19:14 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-12-14 13:01 - 2016-11-12 19:11 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-12-14 13:01 - 2016-11-12 19:10 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-12-14 13:01 - 2016-11-12 19:08 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-12-14 13:01 - 2016-11-12 19:08 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-12-14 13:01 - 2016-11-12 19:03 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-12-14 13:01 - 2016-11-12 18:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-12-14 13:01 - 2016-11-12 18:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-12-14 13:01 - 2016-11-12 18:52 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-12-14 13:01 - 2016-11-12 18:51 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-12-14 13:01 - 2016-11-12 18:49 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-12-14 13:01 - 2016-11-12 18:47 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-12-14 13:01 - 2016-11-12 18:41 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-14 13:01 - 2016-11-12 18:40 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-12-14 13:01 - 2016-11-12 18:38 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-12-14 13:01 - 2016-11-12 18:37 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-12-14 13:01 - 2016-11-12 18:36 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-12-14 13:01 - 2016-11-12 18:36 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-12-14 13:01 - 2016-11-12 18:35 - 02920960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-14 13:01 - 2016-11-12 18:21 - 13653504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-12-14 13:01 - 2016-11-12 18:20 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-14 13:01 - 2016-11-12 18:11 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-12-14 13:01 - 2016-11-12 18:05 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-12-14 13:01 - 2016-11-12 18:02 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-12-14 13:01 - 2016-11-12 18:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-12-14 13:01 - 2016-11-10 17:32 - 01009152 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-14 13:01 - 2016-11-10 17:19 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-12-14 13:01 - 2016-11-09 17:41 - 00114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-12-14 13:01 - 2016-11-09 17:33 - 03244032 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-14 13:01 - 2016-11-09 17:33 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-12-14 13:01 - 2016-11-09 17:33 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-12-14 13:01 - 2016-11-09 17:33 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-12-14 13:01 - 2016-11-09 17:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-12-14 13:01 - 2016-11-09 17:33 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-12-14 13:01 - 2016-11-09 17:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-12-14 13:01 - 2016-11-09 17:17 - 01806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-12-14 13:01 - 2016-11-09 17:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2016-12-14 13:01 - 2016-11-09 17:17 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2016-12-14 13:01 - 2016-11-09 17:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-12-14 13:01 - 2016-11-09 17:02 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-12-14 13:01 - 2016-11-09 16:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2016-12-14 13:01 - 2016-11-06 17:33 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-12-14 13:01 - 2016-11-06 17:16 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-12-14 13:01 - 2016-11-06 17:01 - 03219456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-14 13:01 - 2016-10-27 16:33 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2016-12-14 13:01 - 2016-10-27 16:20 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2016-12-14 13:01 - 2016-10-11 16:40 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-12-14 13:01 - 2016-10-11 16:37 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-14 13:01 - 2016-10-11 16:37 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-12-14 13:01 - 2016-10-11 16:34 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-12-14 13:01 - 2016-10-11 16:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:24 - 04000488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-12-14 13:01 - 2016-10-11 16:24 - 03944680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-12-14 13:01 - 2016-10-11 16:21 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:18 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 16:03 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-12-14 13:01 - 2016-10-11 16:03 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-12-14 13:01 - 2016-10-11 16:03 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-12-14 13:01 - 2016-10-11 15:59 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-12-14 13:01 - 2016-10-11 15:59 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-12-14 13:01 - 2016-10-11 15:55 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe
2016-12-14 13:01 - 2016-10-11 15:55 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-12-14 13:01 - 2016-10-11 15:51 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-12-14 13:01 - 2016-10-11 15:51 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-12-14 13:01 - 2016-10-11 15:51 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-12-14 13:01 - 2016-10-11 15:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-12-14 13:01 - 2016-10-11 15:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 15:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 15:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 15:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-12-14 13:01 - 2016-10-11 14:18 - 00419648 _____ C:\Windows\SysWOW64\locale.nls
2016-12-14 13:01 - 2016-10-11 14:17 - 00419648 _____ C:\Windows\system32\locale.nls
2016-12-14 13:01 - 2016-10-08 14:06 - 00633296 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-12-14 13:01 - 2016-10-04 16:31 - 01483264 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-12-14 13:01 - 2016-10-04 16:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-12-14 13:01 - 2016-10-04 16:31 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2016-12-14 13:01 - 2016-10-04 16:31 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2016-12-14 13:01 - 2016-10-04 16:13 - 01176064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-12-14 13:01 - 2016-10-04 16:13 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-12-14 13:01 - 2016-10-04 16:13 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2016-12-14 13:01 - 2016-10-04 16:13 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2016-12-12 21:08 - 2016-12-12 21:08 - 00000000 ____D C:\Users\raphi\AppData\Local\Chromium
2016-12-11 14:25 - 2016-12-11 14:26 - 00000000 ____D C:\Users\raphi\AppData\Local\ArmA 2
2016-12-11 14:25 - 2016-12-11 14:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2016-12-11 14:14 - 2016-12-11 14:14 - 00001336 _____ C:\Users\Public\Desktop\DayZ Commander.lnk
2016-12-11 14:14 - 2016-12-11 14:14 - 00000000 ____D C:\Users\raphi\AppData\Local\DayZCommander
2016-12-11 14:14 - 2016-12-11 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dotjosh Studios
2016-12-11 14:14 - 2016-12-11 14:14 - 00000000 ____D C:\Program Files (x86)\Dotjosh Studios
2016-12-11 14:06 - 2016-12-11 14:06 - 00000221 _____ C:\Users\raphi\Desktop\Arma 2.url
2016-12-11 14:05 - 2016-12-22 15:05 - 00000000 ____D C:\Users\raphi\AppData\LocalLow\Mozilla
2016-12-11 13:58 - 2016-12-11 14:43 - 00000000 ____D C:\Users\raphi\AppData\Local\ArmA 2 OA
2016-12-11 13:58 - 2016-12-11 14:25 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive
2016-12-11 13:58 - 2016-12-11 13:58 - 00000000 ____D C:\ProgramData\Bohemia Interactive Studio
2016-12-11 13:26 - 2016-12-11 13:26 - 00000221 _____ C:\Users\raphi\Desktop\Arma 2 Operation Arrowhead.url
2016-12-11 12:04 - 2016-12-11 12:04 - 00000222 _____ C:\Users\raphi\Desktop\Euro Truck Simulator 2.url
2016-12-11 11:36 - 2016-12-11 11:36 - 00000222 _____ C:\Users\raphi\Desktop\Drift Streets Japan.url
2016-12-10 17:21 - 2016-12-10 17:21 - 00000717 _____ C:\Users\raphi\Desktop\ForestVillage - Raccourci.lnk
2016-12-10 17:03 - 2016-12-10 17:21 - 00000000 ____D C:\Users\raphi\Desktop\Life is Feudal Forest Village
2016-12-10 16:58 - 2016-12-10 16:59 - 00000000 ____D C:\Users\raphi\Downloads\3DMGAME-Life.is.Feudal.Forest.Village.v0.9.4513.Cracked-3DM
2016-12-10 16:57 - 2016-12-10 16:57 - 00021617 _____ C:\Users\raphi\Downloads\Life.is.Feudal.Forest.Village.v0.9.4513.torrent
2016-12-09 20:43 - 2016-12-09 20:43 - 00281392 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2016-12-09 20:43 - 2016-12-09 20:43 - 00281392 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-12-09 20:43 - 2016-12-09 20:43 - 00189248 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-12-09 20:43 - 2016-12-09 20:43 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2016-12-09 20:43 - 2016-12-09 20:43 - 00000000 ____D C:\Users\raphi\AppData\Local\PunkBuster
2016-12-09 19:34 - 2016-12-09 19:34 - 00001100 _____ C:\Users\Public\Desktop\BBO.exe.lnk
2016-12-09 19:34 - 2016-12-09 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SnailGame
2016-12-09 19:34 - 2016-12-09 19:34 - 00000000 ____D C:\Program Files (x86)\Snail Game
2016-12-09 18:34 - 2016-12-23 04:12 - 00000000 ____D C:\Users\raphi\AppData\Roaming\DMCache
2016-12-09 18:34 - 2016-12-22 02:38 - 00000000 ____D C:\Users\raphi\Downloads\Compressed
2016-12-09 18:34 - 2016-12-22 01:51 - 00000000 ____D C:\Users\raphi\AppData\Roaming\IDM
2016-12-09 18:34 - 2016-12-20 22:17 - 00000000 ____D C:\Users\raphi\Downloads\Video
2016-12-09 18:34 - 2016-12-09 18:34 - 00001009 _____ C:\Users\raphi\Desktop\Internet Download Manager.lnk
2016-12-09 18:34 - 2016-12-09 18:34 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-12-09 18:34 - 2016-12-09 18:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-12-09 18:34 - 2016-12-09 18:34 - 00000000 ____D C:\ProgramData\IDM
2016-12-09 18:34 - 2016-12-09 18:34 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2016-12-09 18:32 - 2016-12-09 18:33 - 06914376 _____ (Tonec Inc.) C:\Users\raphi\Downloads\internet-download-manager_6-2-6-build-14_fr_57994.exe
2016-12-09 18:25 - 2016-12-09 18:25 - 00000232 _____ C:\Users\raphi\Desktop\Assassin's Creed III.url
2016-12-09 18:20 - 2016-12-09 19:25 - 2420134664 _____ C:\Users\raphi\Downloads\BountyBayOnlineFranch.exe
2016-12-05 18:33 - 2016-12-05 18:33 - 00375584 _____ C:\Windows\Minidump\120516-21606-01.dmp
2016-12-04 21:58 - 2016-12-04 21:58 - 00407776 _____ C:\Windows\Minidump\120416-20155-01.dmp
2016-12-04 20:53 - 2016-12-04 20:53 - 00000233 _____ C:\Users\raphi\Desktop\Far Cry 3 Blood Dragon.url
2016-12-04 19:35 - 2016-12-04 19:35 - 00407752 _____ C:\Windows\Minidump\120416-25116-01.dmp
2016-12-03 14:53 - 2016-12-03 15:29 - 00000000 ____D C:\Users\raphi\AppData\Local\dwarves
2016-12-03 13:26 - 2016-12-03 14:52 - 00000000 ____D C:\Program Files\The Dwarves
2016-12-03 13:26 - 2016-12-03 13:26 - 00000609 _____ C:\Users\Public\Desktop\The Dwarves.lnk
2016-12-03 11:51 - 2016-12-03 11:51 - 00418880 _____ C:\Windows\Minidump\120316-26457-01.dmp
2016-12-03 11:46 - 2016-12-03 11:46 - 00418704 _____ C:\Windows\Minidump\120316-26722-01.dmp
2016-12-03 11:42 - 2016-12-03 11:42 - 00418704 _____ C:\Windows\Minidump\120316-25755-01.dmp
2016-12-03 11:37 - 2016-12-03 11:37 - 00360896 _____ C:\Windows\Minidump\120316-27690-01.dmp
2016-12-03 11:35 - 2016-12-03 11:35 - 00358928 _____ C:\Windows\Minidump\120316-19390-01.dmp
2016-12-03 11:33 - 2016-12-03 11:33 - 00364840 _____ C:\Windows\Minidump\120316-19936-01.dmp
2016-12-03 11:31 - 2016-12-03 11:31 - 00362144 _____ C:\Windows\Minidump\120316-20404-01.dmp
2016-12-03 11:29 - 2016-12-03 11:29 - 00377200 _____ C:\Windows\Minidump\120316-20264-01.dmp
2016-12-02 16:41 - 2016-12-02 16:41 - 00000785 _____ C:\Users\Public\Desktop\Radiation Island.lnk
2016-12-02 16:41 - 2016-12-02 16:41 - 00000000 ____D C:\Program Files\Radiation Island
2016-12-02 16:14 - 2016-12-02 16:19 - 00000000 ____D C:\Users\raphi\Downloads\Radiation.Island-HI2U
2016-12-02 16:14 - 2016-12-02 16:14 - 00011038 _____ C:\Users\raphi\Downloads\Radiation.Island-HI2U.torrent
2016-12-02 16:10 - 2016-12-02 16:52 - 00000000 ____D C:\Users\raphi\Downloads\The.Dwarves-RELOADED
2016-12-02 16:10 - 2016-12-02 16:10 - 00052166 _____ C:\Users\raphi\Downloads\The.Dwarves-RELOADED.torrent
2016-12-01 18:57 - 2016-12-01 18:57 - 00003110 _____ C:\Windows\System32\Tasks\{D4A7E326-3210-462F-8F9E-9764785FCFF6}
2016-11-30 17:57 - 2016-11-30 17:57 - 00000000 ____D C:\Users\raphi\AppData\Local\Arktos Entertainment
2016-11-30 17:47 - 2016-11-30 17:47 - 00000000 ____D C:\Users\raphi\AppData\Local\FredaikisAB
2016-11-30 17:36 - 2016-11-30 17:36 - 00000222 _____ C:\Users\raphi\Desktop\Infestation The New Z.url
2016-11-30 16:21 - 2016-10-17 16:35 - 00223464 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2016-11-29 22:34 - 2016-11-29 22:34 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-11-29 22:34 - 2016-11-29 22:34 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr110_clr0400.dll
2016-11-29 22:34 - 2016-11-29 22:34 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2016-11-29 22:34 - 2016-11-29 22:34 - 00019112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp110_clr0400.dll
2016-11-29 22:27 - 2016-11-29 22:27 - 00030400 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-11-29 22:27 - 2016-11-29 22:27 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr110_clr0400.dll
2016-11-29 22:27 - 2016-11-29 22:27 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2016-11-29 22:27 - 2016-11-29 22:27 - 00019112 _____ (Microsoft Corporation) C:\Windows\system32\msvcp110_clr0400.dll
2016-11-28 21:25 - 2016-11-28 21:25 - 00000000 ____D C:\Users\raphi\AppData\Local\OrionGame
2016-11-28 19:25 - 2016-12-10 17:29 - 00000000 ____D C:\Program Files\Epic Games
2016-11-28 19:24 - 2016-11-28 19:26 - 207273423 _____ C:\Users\raphi\Downloads\Hiver.rar
2016-11-28 19:18 - 2016-11-28 19:18 - 00000000 ____D C:\Users\raphi\AppData\Local\UnrealEngineLauncher
2016-11-28 19:18 - 2016-11-28 19:18 - 00000000 ____D C:\Users\raphi\AppData\Local\EpicGamesLauncher
2016-11-28 19:17 - 2016-11-28 19:22 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2016-11-28 19:17 - 2016-11-28 19:22 - 00002511 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2016-11-28 19:17 - 2016-11-28 19:20 - 00000000 ____D C:\ProgramData\Epic
2016-11-28 19:17 - 2016-11-28 19:17 - 40574976 _____ C:\Users\raphi\Downloads\ParagonEpicGamesLauncherInstaller-2.12.14-3176191.msi
2016-11-28 19:17 - 2016-11-28 19:17 - 00000000 ____D C:\Program Files (x86)\Epic Games
2016-11-27 12:21 - 2016-11-27 13:41 - 278583772 _____ C:\Users\raphi\Downloads\Non confirmé 719654.crdownload
2016-11-26 22:56 - 2016-11-26 22:56 - 00407648 _____ C:\Windows\Minidump\112616-19250-01.dmp
2016-11-26 18:34 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2016-11-25 20:21 - 2016-11-25 20:21 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Shooter
2016-11-23 06:38 - 2016-12-12 18:39 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-11-23 06:38 - 2016-11-23 06:38 - 00004306 _____ C:\Windows\System32\Tasks\Overwolf Updater Task
2016-11-23 06:38 - 2016-11-23 06:38 - 00001081 _____ C:\Users\Public\Desktop\Overwolf.lnk
2016-11-23 06:38 - 2016-11-23 06:38 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-12-23 13:19 - 2016-06-23 18:21 - 00001382 _____ C:\Users\raphi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-23 13:18 - 2009-07-14 05:45 - 00015008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-23 13:18 - 2009-07-14 05:45 - 00015008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-23 13:09 - 2016-06-23 18:52 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-23 13:09 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-23 04:11 - 2016-06-23 19:06 - 00000000 ____D C:\Windows\Minidump
2016-12-23 04:10 - 2016-06-23 19:06 - 568370184 _____ C:\Windows\MEMORY.DMP
2016-12-23 04:08 - 2016-06-24 10:40 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-23 03:48 - 2016-06-27 10:03 - 00000000 ____D C:\Users\raphi\AppData\Roaming\TS3Client
2016-12-23 00:54 - 2016-08-11 15:16 - 00000000 ____D C:\Users\raphi\AppData\Local\CrashDumps
2016-12-22 22:53 - 2016-10-02 09:43 - 00000000 ____D C:\Users\raphi\AppData\Local\Adobe
2016-12-22 22:52 - 2016-10-09 10:50 - 00000000 ____D C:\Users\raphi\AppData\Local\ElevatedDiagnostics
2016-12-22 22:04 - 2016-11-19 09:54 - 00184518 _____ C:\Windows\ntbtlog.txt
2016-12-22 18:45 - 2016-08-13 12:26 - 00000000 ____D C:\AdwCleaner
2016-12-22 15:06 - 2016-06-23 18:24 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-22 02:12 - 2016-06-25 16:42 - 00000000 ____D C:\Users\raphi\AppData\Roaming\qBittorrent
2016-12-21 22:12 - 2016-11-19 11:15 - 00000000 ____D C:\Users\raphi\AppData\Local\Overwolf
2016-12-20 20:23 - 2009-07-14 06:08 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-12-18 14:34 - 2016-06-25 15:12 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-12-18 14:34 - 2016-06-25 15:09 - 00000000 ____D C:\Program Files\Rockstar Games
2016-12-17 14:54 - 2016-11-05 14:27 - 00000000 ____D C:\Users\raphi\AppData\Local\Ubisoft Game Launcher
2016-12-17 14:26 - 2016-06-29 17:08 - 00000000 ____D C:\Games
2016-12-17 14:05 - 2016-07-03 20:48 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-12-17 11:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-12-17 11:04 - 2016-08-25 09:53 - 00000155 _____ C:\Users\raphi\Desktop\SECRET BITCH.txt
2016-12-14 19:17 - 2009-07-14 16:24 - 00747644 _____ C:\Windows\system32\perfh00C.dat
2016-12-14 19:17 - 2009-07-14 16:24 - 00150168 _____ C:\Windows\system32\perfc00C.dat
2016-12-14 19:17 - 2009-07-14 06:13 - 01669584 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-14 19:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-14 19:09 - 2009-07-14 05:45 - 00267816 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-14 13:24 - 2016-06-23 18:27 - 01643716 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-12-12 21:09 - 2016-06-24 10:49 - 00000000 ____D C:\Users\raphi\AppData\Local\Steam
2016-12-11 17:03 - 2016-07-07 11:42 - 00000000 ____D C:\Users\raphi\Desktop\Musiques
2016-12-11 11:39 - 2016-06-26 15:28 - 00000000 ____D C:\ProgramData\Package Cache
2016-12-10 17:25 - 2016-07-25 02:21 - 00000000 ____D C:\Users\raphi\AppData\Local\UnrealEngine
2016-12-09 20:43 - 2016-06-23 18:20 - 00000000 ____D C:\Users\raphi
2016-12-09 20:43 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-12-09 19:34 - 2016-06-23 18:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-08 18:06 - 2016-06-23 18:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-12-07 19:54 - 2016-06-27 11:32 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Skype
2016-12-05 13:40 - 2016-10-28 09:54 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Origin
2016-12-05 12:49 - 2016-10-28 09:48 - 00000000 ____D C:\ProgramData\Origin
2016-12-05 12:48 - 2016-10-28 09:53 - 00000000 ____D C:\Program Files (x86)\Origin
2016-12-02 19:32 - 2016-08-15 11:43 - 00000000 ____D C:\Users\raphi\AppData\Local\Roblox
2016-12-02 19:29 - 2016-08-15 11:44 - 00001348 _____ C:\Users\raphi\Desktop\ROBLOX Player.lnk
2016-12-02 19:29 - 2016-08-15 11:43 - 00001167 _____ C:\Users\raphi\Desktop\ROBLOX Studio.lnk
2016-12-02 19:29 - 2016-08-15 11:43 - 00000000 ____D C:\Users\raphi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2016-11-23 06:38 - 2016-11-19 11:15 - 00000000 ____D C:\ProgramData\Overwolf

==================== Fichiers à la racine de certains dossiers =======

2016-12-22 02:04 - 2016-12-22 02:06 - 7316480 _____ () C:\Users\raphi\AppData\Roaming\agent.dat
2016-12-22 02:04 - 2016-12-22 02:04 - 0136826 _____ () C:\Users\raphi\AppData\Roaming\Ap-Com.bin
2016-12-22 02:06 - 2016-12-22 02:06 - 1938532 _____ () C:\Users\raphi\AppData\Roaming\Cantop.bin
2016-12-22 02:04 - 2016-12-22 02:06 - 0070704 _____ () C:\Users\raphi\AppData\Roaming\Config.xml
2016-12-22 02:06 - 2016-12-22 02:06 - 1907523 _____ () C:\Users\raphi\AppData\Roaming\Geokix.tst
2016-12-22 01:59 - 2016-12-22 02:04 - 0017856 _____ () C:\Users\raphi\AppData\Roaming\InstallationConfiguration.xml
2016-12-22 01:59 - 2016-12-22 01:59 - 0140288 _____ () C:\Users\raphi\AppData\Roaming\Installer.dat
2016-12-22 02:04 - 2016-12-22 02:04 - 1907523 _____ () C:\Users\raphi\AppData\Roaming\Kinlux.tst
2016-12-22 02:04 - 2016-12-22 02:04 - 0190394 _____ () C:\Users\raphi\AppData\Roaming\LexiFan.bin
2016-12-22 02:04 - 2016-12-22 02:06 - 0018432 _____ () C:\Users\raphi\AppData\Roaming\Main.dat
2016-12-22 02:04 - 2016-12-22 02:06 - 0005568 _____ () C:\Users\raphi\AppData\Roaming\md.xml
2016-12-22 02:04 - 2016-12-22 02:06 - 0126464 _____ () C:\Users\raphi\AppData\Roaming\noah.dat
2016-12-22 02:05 - 2016-12-22 02:07 - 0032038 _____ () C:\Users\raphi\AppData\Roaming\uninstall_temp.ico
2016-12-22 02:02 - 2016-12-22 02:02 - 0190394 _____ () C:\Users\raphi\AppData\Roaming\Villasoft.bin
2016-12-22 02:04 - 2016-12-22 02:04 - 1938532 _____ () C:\Users\raphi\AppData\Roaming\Zam-It.bin
2016-12-23 01:30 - 2016-12-23 01:30 - 0439808 _____ () C:\ProgramData\smp2.exe
C:\Windows\svchost.exe
ATTENTION ====> Check for partition/boot infection.

Fichiers à déplacer ou supprimer:
====================
C:\Users\raphi\AppData\Local\Temp\94V8499UCN\caster.exe
C:\Users\raphi\AppData\Local\Temp\YKE0OAQA60.exe
C:\Users\raphi\AppData\Local\Temp\7R46LGJOM\7R46LGJOM.exe
C:\Users\raphi\AppData\Local\Temp\ESZL7DSR9\JVUHFPIZL.exe
C:\ProgramData\smp2.exe


Certains fichiers dans TEMP:
====================
C:\Users\raphi\AppData\Local\Temp\1C89.tmp.exe
C:\Users\raphi\AppData\Local\Temp\45XTX60RBH.exe
C:\Users\raphi\AppData\Local\Temp\6a246669c4722113966d0cbd29442eb9.dll
C:\Users\raphi\AppData\Local\Temp\7064.tmp.exe
C:\Users\raphi\AppData\Local\Temp\76C9.tmp.exe
C:\Users\raphi\AppData\Local\Temp\7729.tmp.exe
C:\Users\raphi\AppData\Local\Temp\a303478ca901072b46dc4c781ccc3bfe.dll
C:\Users\raphi\AppData\Local\Temp\global_installer (1).exe
C:\Users\raphi\AppData\Local\Temp\global_installer.exe
C:\Users\raphi\AppData\Local\Temp\libeay32.dll
C:\Users\raphi\AppData\Local\Temp\ludashisetup.exe
C:\Users\raphi\AppData\Local\Temp\MD476ANJYS.exe
C:\Users\raphi\AppData\Local\Temp\MMIns.exe
C:\Users\raphi\AppData\Local\Temp\msvcr120.dll
C:\Users\raphi\AppData\Local\Temp\nsl3CC.exe
C:\Users\raphi\AppData\Local\Temp\offerpg3.exe
C:\Users\raphi\AppData\Local\Temp\sdfA5B4.exe
C:\Users\raphi\AppData\Local\Temp\sdfAF36.exe
C:\Users\raphi\AppData\Local\Temp\setup.exe
C:\Users\raphi\AppData\Local\Temp\sqlite3.dll
C:\Users\raphi\AppData\Local\Temp\TAJZ6OXDZPV7.exe
C:\Users\raphi\AppData\Local\Temp\VideoBox.exe
C:\Users\raphi\AppData\Local\Temp\YIQ7WSSX2C0L.exe
C:\Users\raphi\AppData\Local\Temp\YKE0OAQA60.exe
C:\Users\raphi\AppData\Local\Temp\Z2VD46HJ0FS4.exe


==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2016-12-17 11:36

==================== Fin de FRST.txt ============================