Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 08-05-2017
Exécuté par Nathalie (administrateur) sur DESKTOP-P3BPQ77 (13-05-2017 18:48:43)
Exécuté depuis C:\Users\Nathalie\Desktop
Profils chargés: Nathalie (Profils disponibles: Nathalie)
Platform: Windows 10 Home Version 1511 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.5.541\AsusWSWinService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\FIRSTRUN.EXE
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.5.541\AsusWSPanel.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Zhuhai Kingsoft Office Software Co.,Ltd) C:\Program Files (x86)\Kingsoft\WPS Office\10.2.0.5811\office6\wpscloudsvr.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-03] (NVIDIA Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.5.541\ASUSWSLoader.exe [63272 2015-10-22] ()
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3044848 2016-11-16] (Electronic Arts)
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\RunOnce: [Uninstall C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\RunOnce: [Uninstall C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\RunOnce: [Uninstall C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.6514.0720\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.6514.0720\amd64"
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\RunOnce: [Uninstall C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Nathalie\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64"
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\MountPoints2: {68b3779b-1ad9-11e7-828d-74c63b18427a} - "F:\startme.exe" 
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\...\MountPoints2: {83fa229b-15dd-11e7-828c-74c63b18427a} - "F:\HiSuiteDownLoader.exe" 
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
Startup: C:\Users\Nathalie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-03-16]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\Nathalie\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\..\Interfaces\{4c1253f7-1140-4c17-a730-a48e5609e3cd}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus15.msn.com/?pc=ASTE
HKU\S-1-5-21-2562644513-2863382249-3838408987-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKU\S-1-5-21-2562644513-2863382249-3838408987-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2562644513-2863382249-3838408987-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-09-03] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

FireFox:
========
FF DefaultProfile: bin5xmqy.default
FF ProfilePath: C:\Users\Nathalie\AppData\Roaming\Mozilla\Firefox\Profiles\bin5xmqy.default [2017-05-13]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-04-21] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-17] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-01-17] (Foxit Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.5.541\AsusWSWinService.exe [75264 2015-10-22] (ASUS Cloud Corporation) [Fichier non signé]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [323152 2015-07-29] (Windows (R) Win 7 DDK provider)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
R2 FoxitReaderService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitConnectedPDFService.exe [1659592 2017-02-24] (Foxit Software Inc.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373312 2015-04-14] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [887232 2013-12-24] (Intel(R) Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2117128 2016-11-16] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2178576 2016-11-16] (Electronic Arts)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
S3 Soda PDF 8; C:\Program Files\Soda PDF 8\ws.exe [2263504 2016-04-19] (LULU SOFTWARE LIMITED)
S3 Soda PDF 8 CrashHandler; C:\Program Files\Soda PDF 8\crash-handler-ws.exe [920016 2016-04-19] (LULU SOFTWARE LIMITED)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-17] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2017-03-28] (Microsoft Corporation)
S3 wpscloudsvr; C:\Program Files (x86)\Kingsoft\WPS Office\wpscloudsvr.exe [173824 2017-02-21] (Zhuhai Kingsoft Office Software Co.,Ltd)
S4 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\\McCSPServiceHost.exe" [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 athr; C:\Windows\System32\drivers\athw10x.sys [4317808 2015-07-14] (Qualcomm Atheros Communications, Inc.)
S3 ATP; C:\Windows\System32\drivers\AsusTP.sys [98296 2015-12-18] (ASUS Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [251832 2017-05-13] (Malwarebytes)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [41464 2015-06-26] (Intel(R) Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [887552 2015-07-15] (Realtek                                            )
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-16] (Intel Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Trois mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-05-13 18:48 - 2017-05-13 18:49 - 00015159 _____ C:\Users\Nathalie\Desktop\FRST.txt
2017-05-13 18:48 - 2017-05-13 18:48 - 00000000 ____D C:\FRST
2017-05-13 18:47 - 2017-05-13 18:48 - 02429440 _____ (Farbar) C:\Users\Nathalie\Desktop\FRST64.exe
2017-05-13 18:47 - 2017-05-13 18:47 - 00001506 _____ C:\Users\Nathalie\Desktop\malwares.txt
2017-05-13 18:27 - 2017-05-13 18:27 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-05-13 18:27 - 2017-05-13 18:27 - 00187320 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-05-13 18:27 - 2017-05-13 18:27 - 00113592 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-05-13 18:27 - 2017-05-13 18:27 - 00093624 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-05-13 18:27 - 2017-05-13 18:27 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-05-13 18:27 - 2017-05-13 18:27 - 00001914 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-05-13 18:27 - 2017-05-13 18:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-05-13 18:27 - 2017-05-13 18:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-13 18:27 - 2017-05-13 18:27 - 00000000 ____D C:\Program Files\Malwarebytes
2017-05-13 18:27 - 2017-05-09 16:37 - 00077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-05-13 18:24 - 2017-05-13 18:26 - 63035592 _____ (Malwarebytes ) C:\Users\Nathalie\Desktop\mb3-setup-35891.35891-3.1.2.1733.exe
2017-05-13 13:55 - 2017-05-13 13:55 - 00113704 _____ C:\Users\Nathalie\Desktop\ZHPDiag rapport 1.txt
2017-05-13 13:48 - 2017-05-13 13:51 - 00113701 _____ C:\Users\Nathalie\Desktop\ZHPDiag.txt
2017-05-13 13:44 - 2017-05-13 13:44 - 00000870 _____ C:\Users\Nathalie\Desktop\ZHPDiag.lnk
2017-05-13 13:42 - 2017-05-13 13:44 - 02726400 _____ C:\Users\Nathalie\Desktop\ZHPDiag3.exe
2017-05-12 22:32 - 2017-05-12 22:32 - 00066568 _____ C:\Users\Nathalie\Desktop\ZHPCleaner rapport 2.txt
2017-05-12 22:26 - 2017-05-12 22:26 - 00070320 _____ C:\Users\Nathalie\Desktop\ZHPCleaner rapport 1.txt
2017-05-12 22:24 - 2017-05-12 22:29 - 00066565 _____ C:\Users\Nathalie\Desktop\ZHPCleaner.txt
2017-05-12 22:12 - 2017-05-13 13:50 - 00000000 ____D C:\Users\Nathalie\AppData\Roaming\ZHP
2017-05-12 22:12 - 2017-05-13 13:50 - 00000000 ____D C:\Users\Nathalie\AppData\Local\ZHP
2017-05-12 22:12 - 2017-05-12 22:12 - 00000880 _____ C:\Users\Nathalie\Desktop\ZHPCleaner.lnk
2017-05-12 22:01 - 2017-05-12 22:12 - 02769920 _____ C:\Users\Nathalie\Desktop\ZHPCleaner.exe
2017-05-05 08:43 - 2017-05-05 15:37 - 00000000 ____D C:\Windows\System32\Tasks\ASUSTek Computer Inc
2017-04-13 12:15 - 2017-03-28 11:11 - 00808288 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-04-13 12:15 - 2017-03-28 11:05 - 06536248 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe
2017-04-13 12:15 - 2017-03-28 10:59 - 00262400 _____ (Microsoft Corporation) C:\Windows\system32\LsaIso.exe
2017-04-13 12:15 - 2017-03-28 10:52 - 00168360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2017-04-13 12:15 - 2017-03-28 10:51 - 00602256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2017-04-13 12:15 - 2017-03-28 10:50 - 01862008 _____ C:\Windows\SysWOW64\CoreUIComponents.dll
2017-04-13 12:15 - 2017-03-28 09:53 - 06958304 _____ (Microsoft Corp.) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-04-13 12:15 - 2017-03-28 09:51 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll
2017-04-13 12:15 - 2017-03-28 09:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BasicRender.sys
2017-04-13 12:15 - 2017-03-28 09:45 - 00958120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-04-13 12:15 - 2017-03-28 09:44 - 02944592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-04-13 12:15 - 2017-03-28 09:44 - 00703840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-04-13 12:15 - 2017-03-28 09:41 - 00465760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2017-04-13 12:15 - 2017-03-28 09:40 - 05240440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2017-04-13 12:15 - 2017-03-28 09:08 - 00546968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontdrvhost.exe
2017-04-13 12:15 - 2017-03-28 09:08 - 00316248 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-04-13 12:15 - 2017-03-28 09:06 - 01522664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2017-04-13 12:15 - 2017-03-28 09:06 - 01370736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-04-13 12:15 - 2017-03-28 08:41 - 00865792 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-04-13 12:15 - 2017-03-28 08:37 - 00089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2017-04-13 12:15 - 2017-03-28 08:26 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll
2017-04-13 12:15 - 2017-03-28 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcconf.dll
2017-04-13 12:15 - 2017-03-28 08:23 - 00037376 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-04-13 12:15 - 2017-03-28 08:17 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmjpegdec.dll
2017-04-13 12:15 - 2017-03-28 08:12 - 00079360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2017-04-13 12:15 - 2017-03-28 08:10 - 02280960 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-04-13 12:15 - 2017-03-28 08:07 - 00256512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unimdm.tsp
2017-04-13 12:15 - 2017-03-28 08:06 - 00205312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oemlicense.dll
2017-04-13 12:15 - 2017-03-28 08:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll
2017-04-13 12:15 - 2017-03-28 07:57 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-04-13 12:15 - 2017-03-28 07:56 - 00190464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-04-13 12:15 - 2017-03-28 07:53 - 00541184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe
2017-04-13 12:15 - 2017-03-28 07:47 - 00250880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-04-13 12:15 - 2017-03-28 07:43 - 00153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll
2017-04-13 12:15 - 2017-03-28 07:42 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-04-13 12:15 - 2017-03-28 07:41 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2017-04-13 12:15 - 2017-03-28 07:35 - 00805888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2017-04-13 12:15 - 2017-03-28 07:33 - 03695104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-04-13 12:15 - 2017-03-28 07:33 - 00667648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-04-13 12:15 - 2017-03-28 07:32 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licensingdiag.exe
2017-04-13 12:15 - 2017-03-28 07:19 - 02911744 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-04-13 12:15 - 2017-03-28 07:18 - 04078080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2017-04-13 12:15 - 2017-03-28 07:18 - 01542656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2017-04-13 12:15 - 2017-03-28 07:11 - 01501696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-04-13 12:15 - 2017-03-28 07:08 - 02878976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-04-13 12:15 - 2017-03-28 07:04 - 06296064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mos.dll
2017-04-13 12:15 - 2017-03-28 06:47 - 04405248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2017-04-13 12:15 - 2017-03-28 06:45 - 00339456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-04-13 12:15 - 2017-03-28 06:41 - 02604032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-04-13 12:15 - 2017-03-28 06:13 - 00461824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll
2017-04-13 12:15 - 2017-03-18 18:41 - 13018624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2017-04-13 12:14 - 2017-03-28 12:20 - 00100192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2017-04-13 12:14 - 2017-03-28 12:19 - 00202480 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2017-04-13 12:14 - 2017-03-28 12:18 - 01997840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-04-13 12:14 - 2017-03-28 12:17 - 02656952 _____ C:\Windows\system32\CoreUIComponents.dll
2017-04-13 12:14 - 2017-03-28 12:17 - 00800080 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2017-04-13 12:14 - 2017-03-28 12:12 - 00061792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys
2017-04-13 12:14 - 2017-03-28 11:51 - 03449168 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll
2017-04-13 12:14 - 2017-03-28 11:18 - 08710320 _____ (Microsoft Corp.) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-04-13 12:14 - 2017-03-28 11:12 - 01322760 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-04-13 12:14 - 2017-03-28 11:11 - 03698216 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-04-13 12:14 - 2017-03-28 11:06 - 06604992 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll
2017-04-13 12:14 - 2017-03-28 11:05 - 01540216 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-04-13 12:14 - 2017-03-28 10:51 - 01557776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-04-13 12:14 - 2017-03-28 10:30 - 00379232 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-04-13 12:14 - 2017-03-28 10:29 - 00636304 _____ (Microsoft Corporation) C:\Windows\system32\fontdrvhost.exe
2017-04-13 12:14 - 2017-03-28 10:28 - 01777792 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2017-04-13 12:14 - 2017-03-28 10:12 - 00388888 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-04-13 12:14 - 2017-03-28 10:05 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-04-13 12:14 - 2017-03-28 09:52 - 00824320 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-04-13 12:14 - 2017-03-28 09:52 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2017-04-13 12:14 - 2017-03-28 09:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\vss_ps.dll
2017-04-13 12:14 - 2017-03-28 09:50 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2017-04-13 12:14 - 2017-03-28 09:42 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mfmjpegdec.dll
2017-04-13 12:14 - 2017-03-28 09:38 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-04-13 12:14 - 2017-03-28 09:35 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2017-04-13 12:14 - 2017-03-28 09:31 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-04-13 12:14 - 2017-03-28 09:29 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2017-04-13 12:14 - 2017-03-28 09:21 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-04-13 12:14 - 2017-03-28 09:20 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2017-04-13 12:14 - 2017-03-28 09:18 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-04-13 12:14 - 2017-03-28 09:17 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-04-13 12:14 - 2017-03-28 09:16 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2017-04-13 12:14 - 2017-03-28 09:14 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-04-13 12:14 - 2017-03-28 09:10 - 00383488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-04-13 12:14 - 2017-03-28 09:01 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-04-13 12:14 - 2017-03-28 08:56 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll
2017-04-13 12:14 - 2017-03-28 08:55 - 00971776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-04-13 12:14 - 2017-03-28 08:54 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-04-13 12:14 - 2017-03-28 08:53 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-04-13 12:14 - 2017-03-28 08:51 - 02127360 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-04-13 12:14 - 2017-03-28 08:48 - 00853504 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-04-13 12:14 - 2017-03-28 08:46 - 01752576 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-04-13 12:14 - 2017-03-28 08:44 - 00961536 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2017-04-13 12:14 - 2017-03-28 08:26 - 00572928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-04-13 12:14 - 2017-03-28 08:21 - 03586048 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-04-13 12:14 - 2017-03-28 08:20 - 05123072 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2017-04-13 12:14 - 2017-03-28 08:12 - 01729536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-04-13 12:14 - 2017-03-28 08:06 - 03405312 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-04-13 12:14 - 2017-03-28 08:05 - 07977984 _____ (Microsoft Corporation) C:\Windows\system32\mos.dll
2017-04-13 12:14 - 2017-03-28 08:01 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-04-13 12:14 - 2017-03-28 07:56 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-04-13 12:14 - 2017-03-28 07:55 - 03585536 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-04-13 12:14 - 2017-03-28 07:53 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-04-13 12:14 - 2017-03-28 07:44 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-04-13 12:14 - 2017-03-28 07:42 - 16984576 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2017-04-13 12:14 - 2017-03-28 07:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-04-13 12:14 - 2017-03-28 07:41 - 00687616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-04-13 12:14 - 2017-03-28 07:40 - 02050048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-04-13 12:14 - 2017-03-28 07:39 - 00957952 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2017-04-13 12:14 - 2017-03-28 07:36 - 04895744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-04-13 12:14 - 2017-03-28 07:36 - 01526272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-04-13 12:14 - 2017-03-28 07:29 - 22375424 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-04-13 12:14 - 2017-03-28 07:22 - 06312448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-04-13 12:14 - 2017-03-28 07:20 - 24604160 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-04-13 12:14 - 2017-03-28 07:20 - 13392384 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-04-13 12:14 - 2017-03-28 07:06 - 07856640 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-04-13 12:14 - 2017-03-28 06:48 - 03664384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-04-13 12:14 - 2017-03-28 06:46 - 19344896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-04-13 12:14 - 2017-03-28 06:45 - 18671616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-04-13 12:14 - 2017-03-28 06:45 - 12134912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-04-13 12:14 - 2017-03-28 06:31 - 05670912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-04-13 12:14 - 2017-03-21 03:36 - 00448285 _____ C:\Windows\system32\ApnDatabase.xml
2017-04-13 12:14 - 2017-03-18 22:39 - 22560744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-04-13 12:13 - 2017-03-28 12:14 - 00754664 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll
2017-04-13 12:13 - 2017-03-28 11:08 - 00566112 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2017-04-13 12:13 - 2017-03-28 11:05 - 00692136 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2017-04-13 12:13 - 2017-03-28 11:03 - 01128104 _____ (Microsoft Corporation) C:\Windows\system32\ClipUp.exe
2017-04-13 12:13 - 2017-03-28 11:03 - 00625000 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll
2017-04-13 12:13 - 2017-03-28 10:29 - 01986912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-04-13 12:13 - 2017-03-28 10:29 - 00393568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-04-13 12:13 - 2017-03-28 10:28 - 01594928 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-04-13 12:13 - 2017-03-28 09:48 - 00045568 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-04-13 12:13 - 2017-03-28 09:40 - 00584704 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2017-04-13 12:13 - 2017-03-28 09:37 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\dmcertinst.exe
2017-04-13 12:13 - 2017-03-28 09:28 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\oemlicense.dll
2017-04-13 12:13 - 2017-03-28 09:20 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2017-04-13 12:13 - 2017-03-28 09:18 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-04-13 12:13 - 2017-03-28 09:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-04-13 12:13 - 2017-03-28 09:13 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-04-13 12:13 - 2017-03-28 09:09 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-04-13 12:13 - 2017-03-28 08:55 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Bluetooth.dll
2017-04-13 12:13 - 2017-03-28 08:53 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2017-04-13 12:13 - 2017-03-28 08:41 - 04456448 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-04-13 12:13 - 2017-03-28 08:40 - 00236032 _____ (Microsoft Corporation) C:\Windows\system32\licensingdiag.exe
2017-04-13 12:13 - 2017-03-28 08:19 - 01674240 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-04-13 12:13 - 2017-03-28 08:16 - 00584704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll
2017-04-13 12:13 - 2017-03-28 07:30 - 00459776 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-04-13 12:13 - 2017-03-28 07:01 - 01087488 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll
2017-04-03 16:35 - 2017-04-03 16:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2017-03-31 19:57 - 2017-03-31 19:57 - 00001430 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2017-03-31 19:57 - 2017-03-31 19:57 - 00000000 ____D C:\Users\Nathalie\AppData\Roaming\Foxit AgentInformation
2017-03-31 19:57 - 2017-03-31 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2017-03-31 19:57 - 2017-03-31 19:57 - 00000000 ____D C:\ProgramData\Foxit Software
2017-03-31 19:57 - 2017-03-31 19:57 - 00000000 ____D C:\ProgramData\Foxit ContentPlatform
2017-03-31 10:20 - 2017-03-31 19:43 - 00003902 _____ C:\Users\Nathalie\Desktop\CV NAGYY.odt
2017-03-16 14:17 - 2017-03-04 09:29 - 00535088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-03-16 14:17 - 2017-03-04 09:27 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-03-16 14:17 - 2017-03-04 09:12 - 00987488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LicenseManager.dll
2017-03-16 14:17 - 2017-03-04 08:43 - 00306832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2017-03-16 14:17 - 2017-03-04 08:41 - 02180136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-03-16 14:17 - 2017-03-04 08:41 - 01118208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-03-16 14:17 - 2017-03-04 08:41 - 00980352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-03-16 14:17 - 2017-03-04 08:41 - 00895080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsrcsnk.dll
2017-03-16 14:17 - 2017-03-04 08:41 - 00701384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-03-16 14:17 - 2017-03-04 08:40 - 01349640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2017-03-16 14:17 - 2017-03-04 08:40 - 00925064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2017-03-16 14:17 - 2017-03-04 08:40 - 00713824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2017-03-16 14:17 - 2017-03-04 08:34 - 01824272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2017-03-16 14:17 - 2017-03-04 08:29 - 21123320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-03-16 14:17 - 2017-03-04 08:29 - 04075184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-03-16 14:17 - 2017-03-04 08:29 - 00836752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.appcore.dll
2017-03-16 14:17 - 2017-03-04 08:29 - 00569752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2017-03-16 14:17 - 2017-03-04 08:25 - 00268040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2017-03-16 14:17 - 2017-03-04 07:58 - 02186864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2017-03-16 14:17 - 2017-03-04 07:41 - 02448752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2017-03-16 14:17 - 2017-03-04 07:41 - 00882208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2adec.dll
2017-03-16 14:17 - 2017-03-04 07:40 - 00473616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll
2017-03-16 14:17 - 2017-03-04 07:40 - 00467440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll
2017-03-16 14:17 - 2017-03-04 07:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosHostClient.dll
2017-03-16 14:17 - 2017-03-04 07:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll
2017-03-16 14:17 - 2017-03-04 07:06 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MosStorage.dll
2017-03-16 14:17 - 2017-03-04 07:04 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapsBtSvc.dll
2017-03-16 14:17 - 2017-03-04 06:49 - 00229376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icm32.dll
2017-03-16 14:17 - 2017-03-04 06:49 - 00167936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2017-03-16 14:17 - 2017-03-04 06:46 - 00113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupugc.exe
2017-03-16 14:17 - 2017-03-04 06:45 - 00395776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlansec.dll
2017-03-16 14:17 - 2017-03-04 06:45 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-03-16 14:17 - 2017-03-04 06:42 - 00349696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapConfiguration.dll
2017-03-16 14:17 - 2017-03-04 06:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2017-03-16 14:17 - 2017-03-04 06:33 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JpMapControl.dll
2017-03-16 14:17 - 2017-03-04 06:33 - 00616960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2017-03-16 14:17 - 2017-03-04 06:33 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll
2017-03-16 14:17 - 2017-03-04 06:33 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Enumeration.dll
2017-03-16 14:17 - 2017-03-04 06:33 - 00337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Geolocation.dll
2017-03-16 14:17 - 2017-03-04 06:32 - 00502272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DevicePairing.dll
2017-03-16 14:17 - 2017-03-04 06:31 - 00372224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll
2017-03-16 14:17 - 2017-03-04 06:30 - 00501760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-03-16 14:17 - 2017-03-04 06:29 - 00784896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NMAA.dll
2017-03-16 14:17 - 2017-03-04 06:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2017-03-16 14:17 - 2017-03-04 06:28 - 00711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MapControlCore.dll
2017-03-16 14:17 - 2017-03-04 06:27 - 00854528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2017-03-16 14:17 - 2017-03-04 06:26 - 01586176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-03-16 14:17 - 2017-03-04 06:26 - 01497088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPDMC.exe
2017-03-16 14:17 - 2017-03-04 06:26 - 01467904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2017-03-16 14:17 - 2017-03-04 06:25 - 01117184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-03-16 14:17 - 2017-03-04 06:25 - 00705536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-03-16 14:17 - 2017-03-04 06:24 - 02578432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2017-03-16 14:17 - 2017-03-04 06:24 - 00885248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-16 14:17 - 2017-03-04 06:24 - 00760320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-03-16 14:17 - 2017-03-04 06:23 - 01944576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll
2017-03-16 14:17 - 2017-03-04 06:22 - 00460800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2017-03-16 14:17 - 2017-03-04 06:19 - 00639488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-03-16 14:17 - 2017-03-04 06:18 - 00778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsSpellCheckingFacility.dll
2017-03-16 14:17 - 2017-03-04 06:15 - 01986560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-03-16 14:17 - 2017-03-04 06:14 - 00581632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinapi.dll
2017-03-16 14:17 - 2017-03-04 06:08 - 01185280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationFramework.dll
2017-03-16 14:17 - 2017-03-04 06:07 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2017-03-16 14:17 - 2017-03-04 06:03 - 00116224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rshx32.dll
2017-03-16 14:17 - 2017-03-04 05:59 - 01626112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2017-03-16 14:17 - 2017-03-04 05:58 - 00871936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPEG2ENC.DLL
2017-03-16 14:17 - 2017-03-04 05:57 - 04412928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-03-16 14:17 - 2017-03-04 05:57 - 01708032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2017-03-16 14:17 - 2017-03-04 05:55 - 01860096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2017-03-16 14:17 - 2017-03-04 05:54 - 01799680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2017-03-16 14:17 - 2017-03-04 05:52 - 02000896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2017-03-16 14:17 - 2017-03-04 05:52 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncCore.dll
2017-03-16 14:17 - 2017-03-04 05:51 - 09921024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-03-16 14:17 - 2017-03-04 05:44 - 05205504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll
2017-03-16 14:17 - 2017-03-04 05:38 - 02519552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themecpl.dll
2017-03-16 14:17 - 2017-03-04 05:36 - 01582080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-03-16 14:17 - 2017-03-04 05:35 - 05326336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-03-16 14:17 - 2017-03-04 05:35 - 02798080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-03-16 14:17 - 2017-03-04 05:31 - 02155008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2017-03-16 14:17 - 2017-03-04 05:31 - 02062336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2017-03-16 14:17 - 2017-03-04 05:30 - 01249280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll
2017-03-16 14:17 - 2017-03-04 05:29 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserLanguagesCpl.dll
2017-03-16 14:16 - 2017-03-04 07:15 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stdole2.tlb
2017-03-16 14:16 - 2017-03-04 07:10 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-16 14:16 - 2017-03-04 07:06 - 00168448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReInfo.dll
2017-03-16 14:16 - 2017-03-04 07:06 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CallButtons.dll
2017-03-16 14:16 - 2017-03-04 07:00 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2017-03-16 14:16 - 2017-03-04 06:57 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\feclient.dll
2017-03-16 14:16 - 2017-03-04 06:55 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mcbuilder.exe
2017-03-16 14:16 - 2017-03-04 06:55 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-03-16 14:16 - 2017-03-04 06:48 - 00215040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apds.dll
2017-03-16 14:16 - 2017-03-04 06:13 - 00246784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qwave.dll
2017-03-16 14:16 - 2017-03-04 06:05 - 00329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Proximity.dll
2017-03-16 14:16 - 2017-03-04 06:01 - 00724480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanpref.dll
2017-03-16 14:15 - 2017-03-04 07:27 - 00531968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2017-03-16 14:15 - 2017-03-04 07:15 - 00695296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys
2017-03-16 14:15 - 2017-03-04 06:49 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\P2P.dll
2017-03-16 14:15 - 2017-03-04 06:49 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-03-16 14:15 - 2017-03-04 06:35 - 00286720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2017-03-16 14:15 - 2017-03-04 05:26 - 12590080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-03-16 14:14 - 2017-03-04 08:29 - 00216416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-03-16 14:14 - 2017-03-04 08:27 - 00431456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-16 14:14 - 2017-03-04 08:24 - 00420704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2017-03-16 14:14 - 2017-03-04 06:54 - 00148992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2017-03-16 14:14 - 2017-03-04 06:46 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinFax.dll
2017-03-16 14:13 - 2017-03-04 07:48 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scfilter.sys
2017-02-21 17:20 - 2017-05-13 18:38 - 00000610 _____ C:\Windows\Tasks\WpsExternal_Nathalie_20170221162014.job
2017-02-21 17:20 - 2017-05-13 18:37 - 00000420 _____ C:\Windows\Tasks\WpsUpdateTask_Nathalie.job
2017-02-21 17:20 - 2017-02-21 17:20 - 00003666 _____ C:\Windows\System32\Tasks\WpsExternal_Nathalie_20170221162014
2017-02-21 17:20 - 2017-02-21 17:20 - 00003454 _____ C:\Windows\System32\Tasks\WpsUpdateTask_Nathalie
2017-02-21 17:20 - 2017-02-21 17:20 - 00001479 _____ C:\Users\Public\Desktop\WPS Office.lnk
2017-02-21 17:20 - 2017-02-21 17:20 - 00000000 ____D C:\Users\Nathalie\AppData\Roaming\wps
2017-02-21 17:20 - 2017-02-21 17:20 - 00000000 ____D C:\ProgramData\office6
2017-02-21 17:20 - 2017-02-21 17:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WPS Office
2017-02-21 17:19 - 2017-05-13 18:31 - 00000732 _____ C:\Windows\Tasks\WpsKtpcntrQingTask_Nathalie.job
2017-02-21 17:19 - 2017-02-21 17:19 - 00003708 _____ C:\Windows\System32\Tasks\WpsKtpcntrQingTask_Nathalie
2017-02-21 17:19 - 2017-02-21 17:19 - 00000000 ____D C:\Users\Nathalie\AppData\Local\kingsoft
2017-02-21 17:16 - 2017-02-21 17:16 - 00000000 ____D C:\Users\Nathalie\AppData\Roaming\Kingsoft
2017-02-21 17:13 - 2017-03-31 09:59 - 00006289 _____ C:\Users\Nathalie\Desktop\CV AUDREY BRUNEAU corrigé.odt
2017-02-21 17:13 - 2017-03-31 09:43 - 00004733 _____ C:\Users\Nathalie\Desktop\cv nagy.odt

==================== Trois mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-05-13 18:32 - 2015-11-24 07:08 - 00001226 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2017-05-13 14:54 - 2016-12-27 13:20 - 00000000 ____D C:\Windows\Minidump
2017-05-13 14:36 - 2016-09-26 13:52 - 00000000 ____D C:\Users\Nathalie\Desktop\film
2017-05-13 14:19 - 2016-07-09 11:08 - 00000000 ____D C:\Windows\system32\MRT
2017-05-13 14:19 - 2015-10-30 09:11 - 00000000 ____D C:\Windows\CbsTemp
2017-05-13 14:17 - 2016-07-09 11:07 - 156335152 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-05-13 13:55 - 2016-12-07 16:03 - 00000000 ____D C:\Users\Nathalie\AppData\LocalLow\Mozilla
2017-05-13 13:43 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2017-05-13 13:43 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\AppReadiness
2017-05-13 13:28 - 2016-07-09 17:26 - 00000000 ____D C:\Users\Nathalie\AppData\Local\ASUS GIFTBOX
2017-05-13 12:55 - 2016-07-10 19:01 - 00004184 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1F813A73-C46C-440F-B1C8-254ED69C5B62}
2017-05-13 12:55 - 2016-03-17 17:41 - 00003544 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2017-05-13 12:55 - 2016-03-17 17:41 - 00003534 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2017-05-13 12:52 - 2016-07-09 17:26 - 00000165 _____ C:\Users\Nathalie\AppData\Roaming\sp_data.sys
2017-05-13 12:51 - 2016-07-09 17:26 - 00000000 __SHD C:\Users\Nathalie\IntelGraphicsProfiles
2017-05-13 12:51 - 2015-11-24 07:08 - 00001222 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2017-05-12 22:31 - 2016-12-07 16:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-12 22:31 - 2016-12-07 16:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-12 22:31 - 2015-11-24 06:49 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-12 22:30 - 2015-10-30 08:28 - 00524288 ___SH C:\Windows\system32\config\BBI
2017-05-12 21:41 - 2016-07-12 13:48 - 00000000 ____D C:\ProgramData\Origin
2017-05-12 21:39 - 2016-03-17 17:47 - 00000000 ____D C:\ProgramData\McAfee
2017-05-12 21:36 - 2015-11-24 14:18 - 00825500 _____ C:\Windows\system32\perfh00C.dat
2017-05-12 21:36 - 2015-11-24 14:18 - 00155764 _____ C:\Windows\system32\perfc00C.dat
2017-05-12 21:36 - 2015-11-24 06:55 - 01848398 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-12 21:36 - 2015-10-30 09:21 - 00000000 ____D C:\Windows\INF
2017-05-12 21:33 - 2015-10-30 09:24 - 00000000 ___HD C:\Windows\ELAMBKUP
2017-05-12 21:33 - 2015-10-30 08:28 - 00032768 ___SH C:\Windows\system32\config\ELAM
2017-05-02 10:00 - 2016-07-09 17:26 - 00000000 ____D C:\Users\Nathalie\AppData\Local\Packages
2017-04-29 02:51 - 2016-07-14 15:52 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-04-29 02:51 - 2016-07-14 15:52 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-04-25 12:23 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\rescache
2017-04-18 09:10 - 2016-03-17 17:15 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-18 09:07 - 2015-11-24 06:46 - 00206800 _____ C:\Windows\system32\FNTCACHE.DAT
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ___SD C:\Windows\SysWOW64\F12
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ___SD C:\Windows\system32\F12
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\DevicesFlow
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-04-17 14:43 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender

==================== Fichiers à la racine de certains dossiers =======

2016-07-09 17:26 - 2017-05-13 12:52 - 0000165 _____ () C:\Users\Nathalie\AppData\Roaming\sp_data.sys
2016-03-17 17:30 - 2016-03-17 17:30 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Certains fichiers dans TEMP:
====================
2016-07-12 13:46 - 2016-07-12 13:47 - 47796216 _____ (Electronic Arts, Inc.) C:\Users\Nathalie\AppData\Local\Temp\EAD8496.exe
2009-03-28 23:08 - 2009-03-28 23:08 - 0195056 _____ (Electronic Arts, Inc.) C:\Users\Nathalie\AppData\Local\Temp\UninstallEADM.dll

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

==================== BCD ================================

Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur          {fwbootmgr}
displayorder            {bootmgr}
                        {72d2b8c6-eba6-11e6-828a-806e6f6e6963}
                        {72d2bed9-eba6-11e6-828a-74c63b18427a}
                        {72d2beda-eba6-11e6-828a-74c63b18427a}
                        {72d2bedb-eba6-11e6-828a-74c63b18427a}
timeout                 2

Gestionnaire de d‚marrage Windows
---------------------------------
identificateur          {bootmgr}
device                  partition=\Device\HarddiskVolume1
path                    \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description             Windows Boot Manager
locale                  fr-FR
inherit                 {globalsettings}
default                 {current}
resumeobject            {0d9995b6-ec94-11e5-a83a-d017c21208c8}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Application logicielle (101fffff)
--------------------------------
identificateur          {72d2b8c6-eba6-11e6-828a-806e6f6e6963}
description             CD/DVD Drive 

Application logicielle (101fffff)
--------------------------------
identificateur          {72d2bed9-eba6-11e6-828a-74c63b18427a}
description             UEFI:CD/DVD Drive

Application logicielle (101fffff)
--------------------------------
identificateur          {72d2beda-eba6-11e6-828a-74c63b18427a}
description             UEFI:Removable Device

Application logicielle (101fffff)
--------------------------------
identificateur          {72d2bedb-eba6-11e6-828a-74c63b18427a}
description             UEFI:Network Device

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {current}
device                  partition=C:
path                    \Windows\system32\winload.efi
description             Windows 10
locale                  fr-FR
inherit                 {bootloadersettings}
recoverysequence        {98dba372-ec52-11e5-8254-d017c21208c8}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \Windows
resumeobject            {0d9995b6-ec94-11e5-a83a-d017c21208c8}
nx                      OptIn
bootmenupolicy          Standard

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {98dba372-ec52-11e5-8254-d017c21208c8}
device                  ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{98dba373-ec52-11e5-8254-d017c21208c8}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  en-us
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  Recovery
osdevice                ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{98dba373-ec52-11e5-8254-d017c21208c8}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur          {0d9995b6-ec94-11e5-a83a-d017c21208c8}
device                  partition=C:
path                    \Windows\system32\winresume.efi
description             Windows Resume Application
locale                  fr-FR
inherit                 {resumeloadersettings}
recoverysequence        {98dba372-ec52-11e5-8254-d017c21208c8}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Testeur de m‚moire Windows
--------------------------
identificateur          {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \EFI\Microsoft\Boot\memtest.efi
description             Windows Memory Diagnostic
locale                  fr-FR
inherit                 {globalsettings}
badmemoryaccess         Yes

ParamŠtres EMS
--------------
identificateur          {emssettings}
bootems                 No

ParamŠtres du d‚bogueur
-----------------------
identificateur          {dbgsettings}
debugtype               Serial
debugport               1
baudrate                115200

Erreurs de m‚moire RAM
----------------------
identificateur          {badmemory}

ParamŠtres globaux
------------------
identificateur          {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur          {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

ParamŠtres de l'hyperviseur
-------------------
identificateur          {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

ParamŠtres du chargeur de reprise
---------------------------------
identificateur          {resumeloadersettings}
inherit                 {globalsettings}

Options de p‚riph‚rique
-----------------------
identificateur          {98dba373-ec52-11e5-8254-d017c21208c8}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume4
ramdisksdipath          \Recovery\WindowsRE\boot.sdi


LastRegBack: 2017-05-13 13:53

==================== Fin de FRST.txt ============================