Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 21-06-2017 01 Exécuté par Sylvain (administrateur) sur PORTABLE_DELL (23-06-2017 13:23:24) Exécuté depuis C:\Users\Sylvain\Desktop Profils chargés: Sylvain (Profils disponibles: Sylvain & Sabrina & Ainoa) Platform: Windows 10 Home (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: FF) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe () C:\Program Files (x86)\IPCWebComponents\IPCPlgSvr.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Aviata Inc) C:\Program Files (x86)\Dell Product Registration\prodreg.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2806000 2014-01-15] (Synaptics Incorporated) HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3777696 2014-01-16] (Dell Inc.) HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [410616 2017-05-26] () HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <====== ATTENTION HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe HKU\S-1-5-21-2217766410-939951776-3949381301-1001\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe [3730192 2014-12-09] (Disc Soft Ltd) HKU\S-1-5-21-2217766410-939951776-3949381301-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.) HKU\S-1-5-21-2217766410-939951776-3949381301-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd) HKU\S-1-5-21-2217766410-939951776-3949381301-1001\...\RunOnce: [Uninstall C:\Users\Sylvain\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sylvain\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIconBackuped.dll [2014-12-30] (Softthinks SAS) ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIconNotBackuped.dll [2014-12-30] (Softthinks SAS) ShellIconOverlayIdentifiers: [DBRShellOverlayBackupFile] -> {831CEBDD-6BAF-4432-BE76-9E0989C14AEF} => C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIconBackuped.dll [2014-12-30] (Softthinks SAS) ShellIconOverlayIdentifiers: [DBRShellOverlayModifiedBackupFile] -> {275E4FD7-21EF-45CF-A836-832E5D2CC1B3} => C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBROverlayIconNotBackuped.dll [2014-12-30] (Softthinks SAS) GroupPolicy: Restriction <======= ATTENTION GroupPolicyUsers\S-1-5-21-2217766410-939951776-3949381301-1003\User: Restriction <======= ATTENTION GroupPolicyUsers\S-1-5-21-2217766410-939951776-3949381301-1002\User: Restriction <======= ATTENTION GroupPolicyUsers\S-1-5-21-2217766410-939951776-3949381301-1001\User: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 37.59.72.228 192.168.1.254 Tcpip\..\Interfaces\{696bc6f2-12f4-4e0a-a692-889b0b238ec9}: [DhcpNameServer] 37.59.72.228 192.168.1.254 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2217766410-939951776-3949381301-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2217766410-939951776-3949381301-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell13.msn.com/?pc=DCJB SearchScopes: HKU\S-1-5-21-2217766410-939951776-3949381301-1001 -> DefaultScope {CFB599D1-685D-4636-97A5-2DF3997E0DA9} URL = SearchScopes: HKU\S-1-5-21-2217766410-939951776-3949381301-1001 -> {CFB599D1-685D-4636-97A5-2DF3997E0DA9} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: 4mt3ri2g.default-1498208467130 FF ProfilePath: C:\Users\Sylvain\AppData\Roaming\Mozilla\Firefox\Profiles\4mt3ri2g.default-1498208467130 [2017-06-23] FF Extension: (Adblock Plus) - C:\Users\Sylvain\AppData\Roaming\Mozilla\Firefox\Profiles\4mt3ri2g.default-1498208467130\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-23] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-10] () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-10] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation) FF Plugin-x32: @IPCWebComponents -> C:\Program Files (x86)\IPCWebComponents\npIPCReg.dll [2016-07-15] () FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.) ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S4 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2557136 2015-02-26] (Dell Inc.) S4 DellProdRegManager; C:\Program Files (x86)\Dell Product Registration\regmgrsvc.exe [278568 2014-10-31] (Aviata, Inc.) S4 Disc Soft Ultra Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [1378576 2014-12-09] (Disc Soft Ltd) R2 FosCloudSvr; C:\Program Files (x86)\IPCWebComponents\IPCPlgSvr.exe [90128 2016-07-15] () R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [382456 2017-05-26] (Intel Corporation) S4 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Fichier non signé] S4 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) S4 My Dell Client Framework; C:\Program Files (x86)\Dell\My Dell Client Framework\Dell.ClientFramework.exe [168960 2014-01-10] (Dell Inc.) [Fichier non signé] S4 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-07-30] (CyberLink) S4 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor) S4 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [2005392 2015-02-12] (SoftThinks SAS) S4 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2016-10-25] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2017-06-03] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4318760 2015-08-13] (Qualcomm Atheros Communications, Inc.) R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink) S3 DDDriver; C:\WINDOWS\system32\drivers\DDDriver64Dcsa.sys [23760 2015-02-26] (Dell Computer Corporation) S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [23312 2015-02-26] (Dell Computer Corporation) R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [10752 2013-01-25] (OSR Open Systems Resources, Inc.) R3 dtultrascsibus; C:\WINDOWS\System32\drivers\dtultrascsibus.sys [30352 2014-12-27] (Disc Soft Ltd) S3 FTDIBUS; C:\WINDOWS\system32\drivers\ftdibus.sys [118160 2017-05-19] (Future Technology Devices International Ltd.) S3 FTSER2K; C:\WINDOWS\system32\drivers\ftser2k.sys [88752 2017-05-19] () R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [252832 2017-06-23] (Malwarebytes) R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [82072 2015-09-23] (McAfee, Inc.) S3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek ) S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [412400 2015-08-25] (Realsil Semiconductor Corporation) R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [41200 2014-01-15] (Synaptics Incorporated) S3 UdeCx; C:\WINDOWS\System32\drivers\udecx.sys [44032 2015-07-10] () S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation) R2 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation) S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-06-23 13:23 - 2017-06-23 13:23 - 00013746 _____ C:\Users\Sylvain\Desktop\FRST.txt 2017-06-23 13:22 - 2017-06-23 13:22 - 00016148 _____ C:\WINDOWS\system32\PORTABLE_DELL_Sylvain_HistoryPrediction.bin 2017-06-23 13:18 - 2017-06-23 13:18 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2017-06-23 11:17 - 2017-06-23 11:17 - 08544408 _____ (AVAST Software) C:\Users\Sylvain\Downloads\avastclear.exe 2017-06-23 11:07 - 2017-06-23 11:07 - 00009622 _____ C:\Users\Sylvain\Documents\cc_20170623_110745.reg 2017-06-23 11:01 - 2017-06-23 11:01 - 00000000 ____D C:\Users\Sylvain\Desktop\Anciennes données de Firefox 2017-06-23 11:00 - 2017-06-23 11:00 - 00001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-06-23 11:00 - 2017-06-23 11:00 - 00001218 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2017-06-23 10:57 - 2017-06-23 10:58 - 00266352 _____ (Mozilla) C:\Users\Sylvain\Desktop\Firefox Setup Stub 54.0.exe 2017-06-23 09:41 - 2017-06-23 13:23 - 00000000 ____D C:\FRST 2017-06-23 09:40 - 2017-06-23 09:41 - 02439680 _____ (Farbar) C:\Users\Sylvain\Desktop\FRST64.exe 2017-06-22 20:35 - 2017-06-22 20:35 - 03067264 _____ (Nicolas Coolman) C:\Users\Sylvain\Downloads\zhpfix_2017-6-13-1 (2).exe 2017-06-22 20:30 - 2017-06-22 20:30 - 00135682 _____ C:\Users\Sylvain\Desktop\ZHPDiag.txt 2017-06-22 20:24 - 2017-06-22 20:24 - 03067264 _____ (Nicolas Coolman) C:\Users\Sylvain\Downloads\zhpfix_2017-6-13-1 (1).exe 2017-06-22 20:19 - 2017-06-22 20:19 - 00001907 _____ C:\Users\Sylvain\Desktop\ZHPFixReport.txt 2017-06-22 20:18 - 2017-06-22 20:18 - 00000000 ____D C:\Users\Sylvain\Downloads\Quarantine 2017-06-22 20:17 - 2017-06-22 20:18 - 03067264 _____ (Nicolas Coolman) C:\Users\Sylvain\Downloads\zhpfix_2017-6-13-1.exe 2017-06-22 17:59 - 2017-06-22 17:59 - 00053976 _____ C:\Users\Sylvain\Documents\cc_20170622_175926.reg 2017-06-22 17:44 - 2017-06-22 17:44 - 00000865 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-06-22 17:43 - 2017-06-22 17:44 - 09598376 _____ (Piriform Ltd) C:\Users\Sylvain\Downloads\ccsetup531.exe 2017-06-22 17:26 - 2017-06-22 20:25 - 00000914 _____ C:\Users\Sylvain\Desktop\ZHPDiag.lnk 2017-06-22 16:00 - 2017-06-22 16:00 - 00000864 _____ C:\DelFix.txt 2017-06-22 14:58 - 2017-06-22 14:58 - 00001914 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-06-22 14:34 - 2017-06-22 20:27 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\ZHP 2017-06-22 14:34 - 2017-06-22 15:19 - 00000000 ____D C:\Users\Sylvain\AppData\Local\ZHP 2017-06-19 14:57 - 2017-06-19 14:57 - 00002237 _____ C:\Users\Public\Desktop\Style Builder 2017.lnk 2017-06-19 14:57 - 2017-06-19 14:57 - 00002151 _____ C:\Users\Public\Desktop\LayOut 2017.lnk 2017-06-19 14:57 - 2017-06-19 14:57 - 00002062 _____ C:\Users\Public\Desktop\SketchUp 2017.lnk 2017-06-19 14:57 - 2017-06-19 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2017 2017-06-19 13:00 - 2017-06-19 13:00 - 00016148 _____ C:\WINDOWS\system32\PORTABLE_DELL_Sabrina_HistoryPrediction.bin 2017-06-19 12:34 - 2017-06-19 12:34 - 00000023 _____ C:\Users\Sylvain\AppData\Roaming\brand.ini 2017-06-19 12:34 - 2017-06-19 12:34 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\NaclFosSdkLog 2017-06-19 12:31 - 2017-06-19 12:31 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\fos_nacl_log 2017-06-19 12:31 - 2017-06-19 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IPCWebComponents 2017-06-19 12:31 - 2017-06-19 12:31 - 00000000 ____D C:\Program Files (x86)\IPCWebComponents 2017-06-16 16:15 - 2017-06-16 16:15 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\HC2Toolkit 2017-06-16 16:10 - 2017-06-16 16:10 - 00003105 _____ C:\Users\Sylvain\Desktop\HC2 Toolkit.lnk 2017-06-16 16:10 - 2017-06-16 16:10 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HC2 Toolkit 2017-06-16 16:10 - 2017-06-16 16:10 - 00000000 ____D C:\Users\Sylvain\AppData\Local\BrainX_Software 2017-06-16 16:10 - 2017-06-16 16:10 - 00000000 ____D C:\Program Files (x86)\BrainX Software 2017-06-15 20:47 - 2017-06-15 20:47 - 00084384 _____ C:\Users\Sylvain\Desktop\CV.pdf 2017-06-15 17:49 - 2017-06-03 15:03 - 22327272 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-06-15 17:49 - 2017-06-03 14:15 - 20862488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-06-15 17:49 - 2017-06-03 13:15 - 03793408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-06-15 17:49 - 2017-06-03 12:56 - 24588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-06-15 17:49 - 2017-06-03 12:47 - 06791680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-06-15 17:49 - 2017-06-03 12:33 - 19331072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-06-15 17:49 - 2017-06-03 12:27 - 05163520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-06-15 17:49 - 2017-06-03 12:05 - 03523072 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-06-15 17:49 - 2017-06-03 12:04 - 02402816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-06-15 17:49 - 2017-06-03 12:02 - 02559488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-06-15 17:49 - 2017-06-03 11:57 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-06-15 17:49 - 2017-06-03 11:56 - 01981952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-06-15 17:49 - 2017-06-03 11:54 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-06-15 17:49 - 2017-06-03 11:51 - 21857792 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-06-15 17:49 - 2017-06-03 11:42 - 07509504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-06-15 17:49 - 2017-06-03 11:40 - 07502848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-06-15 17:49 - 2017-06-03 11:38 - 18798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-06-15 17:49 - 2017-06-03 11:37 - 06713856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-06-15 17:48 - 2017-06-03 15:44 - 02463704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-06-15 17:48 - 2017-06-03 15:44 - 00605472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-06-15 17:48 - 2017-06-03 15:44 - 00123744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-06-15 17:48 - 2017-06-03 15:43 - 03467784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2017-06-15 17:48 - 2017-06-03 15:43 - 00652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2017-06-15 17:48 - 2017-06-03 15:42 - 01538176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-06-15 17:48 - 2017-06-03 15:41 - 08011616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-06-15 17:48 - 2017-06-03 15:41 - 00552288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-06-15 17:48 - 2017-06-03 15:40 - 02816024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2017-06-15 17:48 - 2017-06-03 15:39 - 02495776 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-06-15 17:48 - 2017-06-03 15:37 - 00335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2017-06-15 17:48 - 2017-06-03 15:36 - 02156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll 2017-06-15 17:48 - 2017-06-03 15:35 - 00388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll 2017-06-15 17:48 - 2017-06-03 15:34 - 01979744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-06-15 17:48 - 2017-06-03 15:33 - 00807832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-06-15 17:48 - 2017-06-03 15:32 - 01584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2017-06-15 17:48 - 2017-06-03 15:29 - 00243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2017-06-15 17:48 - 2017-06-03 15:04 - 00801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-06-15 17:48 - 2017-06-03 15:03 - 00252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2017-06-15 17:48 - 2017-06-03 15:02 - 00724168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2017-06-15 17:48 - 2017-06-03 15:01 - 06525424 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2017-06-15 17:48 - 2017-06-03 15:00 - 01134800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-06-15 17:48 - 2017-06-03 15:00 - 00658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2017-06-15 17:48 - 2017-06-03 14:58 - 01361448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2017-06-15 17:48 - 2017-06-03 14:57 - 02153296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-06-15 17:48 - 2017-06-03 14:54 - 00439648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-06-15 17:48 - 2017-06-03 14:52 - 01766488 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-06-15 17:48 - 2017-06-03 14:51 - 00264968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2017-06-15 17:48 - 2017-06-03 14:50 - 01895576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll 2017-06-15 17:48 - 2017-06-03 14:43 - 01813408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2017-06-15 17:48 - 2017-06-03 14:37 - 00224712 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2017-06-15 17:48 - 2017-06-03 14:35 - 00613120 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-06-15 17:48 - 2017-06-03 14:35 - 00379224 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-06-15 17:48 - 2017-06-03 14:21 - 00116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-06-15 17:48 - 2017-06-03 14:19 - 00984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll 2017-06-15 17:48 - 2017-06-03 14:16 - 00700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-06-15 17:48 - 2017-06-03 14:14 - 00565656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2017-06-15 17:48 - 2017-06-03 13:53 - 00185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2017-06-15 17:48 - 2017-06-03 13:52 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-06-15 17:48 - 2017-06-03 13:51 - 00545400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-06-15 17:48 - 2017-06-03 13:44 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll 2017-06-15 17:48 - 2017-06-03 13:36 - 00901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll 2017-06-15 17:48 - 2017-06-03 13:28 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe 2017-06-15 17:48 - 2017-06-03 13:22 - 00995840 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2017-06-15 17:48 - 2017-06-03 13:21 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll 2017-06-15 17:48 - 2017-06-03 13:17 - 02238976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-06-15 17:48 - 2017-06-03 13:16 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll 2017-06-15 17:48 - 2017-06-03 13:09 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll 2017-06-15 17:48 - 2017-06-03 13:07 - 00893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2017-06-15 17:48 - 2017-06-03 13:07 - 00814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll 2017-06-15 17:48 - 2017-06-03 13:03 - 02418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2017-06-15 17:48 - 2017-06-03 13:03 - 00345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2017-06-15 17:48 - 2017-06-03 13:03 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2017-06-15 17:48 - 2017-06-03 13:03 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2017-06-15 17:48 - 2017-06-03 13:03 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2017-06-15 17:48 - 2017-06-03 12:55 - 01823232 _____ C:\WINDOWS\SysWOW64\InputService.dll 2017-06-15 17:48 - 2017-06-03 12:53 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll 2017-06-15 17:48 - 2017-06-03 12:49 - 00846848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll 2017-06-15 17:48 - 2017-06-03 12:47 - 12519424 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-06-15 17:48 - 2017-06-03 12:43 - 01602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-06-15 17:48 - 2017-06-03 12:41 - 02839040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2017-06-15 17:48 - 2017-06-03 12:41 - 00671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2017-06-15 17:48 - 2017-06-03 12:41 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll 2017-06-15 17:48 - 2017-06-03 12:40 - 02253824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll 2017-06-15 17:48 - 2017-06-03 12:39 - 00799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll 2017-06-15 17:48 - 2017-06-03 12:39 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2017-06-15 17:48 - 2017-06-03 12:38 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2017-06-15 17:48 - 2017-06-03 12:38 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2017-06-15 17:48 - 2017-06-03 12:36 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2017-06-15 17:48 - 2017-06-03 12:33 - 16708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-06-15 17:48 - 2017-06-03 12:24 - 04398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2017-06-15 17:48 - 2017-06-03 12:23 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-06-15 17:48 - 2017-06-03 12:22 - 02198016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2017-06-15 17:48 - 2017-06-03 12:22 - 00819712 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe 2017-06-15 17:48 - 2017-06-03 12:20 - 01385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2017-06-15 17:48 - 2017-06-03 12:16 - 00842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-06-15 17:48 - 2017-06-03 12:15 - 01119744 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-06-15 17:48 - 2017-06-03 12:14 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-06-15 17:48 - 2017-06-03 12:11 - 07055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2017-06-15 17:48 - 2017-06-03 12:09 - 06101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2017-06-15 17:48 - 2017-06-03 12:09 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2017-06-15 17:48 - 2017-06-03 12:08 - 01140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2017-06-15 17:48 - 2017-06-03 12:04 - 04168704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2017-06-15 17:48 - 2017-06-03 12:04 - 01671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-06-15 17:48 - 2017-06-03 12:04 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2017-06-15 17:48 - 2017-06-03 12:04 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-06-15 17:48 - 2017-06-03 12:03 - 03581952 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-06-15 17:48 - 2017-06-03 12:03 - 01382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-06-15 17:48 - 2017-06-03 12:01 - 00902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-06-15 17:48 - 2017-06-03 12:00 - 05079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2017-06-15 17:48 - 2017-06-03 11:56 - 03443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2017-06-15 17:48 - 2017-06-03 11:55 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-06-15 17:48 - 2017-06-03 11:55 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-06-15 17:48 - 2017-06-03 11:54 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll 2017-06-15 17:48 - 2017-06-03 11:53 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-06-15 17:48 - 2017-06-03 11:51 - 01844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2017-06-15 17:48 - 2017-06-03 11:50 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2017-06-15 17:48 - 2017-06-03 11:49 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-06-15 17:48 - 2017-06-03 11:42 - 03581440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-06-15 17:48 - 2017-06-03 11:41 - 04785152 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-06-15 17:48 - 2017-06-03 11:41 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll 2017-06-15 17:48 - 2017-06-03 11:40 - 11277312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-06-15 17:48 - 2017-06-03 11:40 - 05456384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-06-15 17:48 - 2017-06-03 11:38 - 00939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2017-06-15 17:48 - 2017-06-03 11:35 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2017-06-15 17:47 - 2017-06-03 13:47 - 00483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2017-06-15 17:47 - 2017-06-03 13:31 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2017-06-15 17:47 - 2017-06-03 13:24 - 02902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll 2017-06-15 17:47 - 2017-06-03 13:23 - 02446336 _____ C:\WINDOWS\system32\InputService.dll 2017-06-15 17:47 - 2017-06-03 13:23 - 00596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll 2017-06-15 17:47 - 2017-06-03 13:23 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2017-06-15 17:47 - 2017-06-03 13:18 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2017-06-15 17:47 - 2017-06-03 13:17 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2017-06-15 17:47 - 2017-06-03 13:17 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll 2017-06-15 17:47 - 2017-06-03 13:16 - 00963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2017-06-15 17:47 - 2017-06-03 13:12 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2017-06-15 17:47 - 2017-06-03 13:11 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-06-15 17:47 - 2017-06-03 13:02 - 00322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp 2017-06-15 17:47 - 2017-06-03 13:02 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassvcs.dll 2017-06-15 17:47 - 2017-06-03 13:00 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2017-06-15 17:47 - 2017-06-03 12:55 - 02599424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll 2017-06-15 17:47 - 2017-06-03 12:55 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe 2017-06-15 17:47 - 2017-06-03 12:54 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll 2017-06-15 17:47 - 2017-06-03 12:50 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2017-06-15 17:47 - 2017-06-03 12:49 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2017-06-15 17:47 - 2017-06-03 12:49 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll 2017-06-15 17:47 - 2017-06-03 12:48 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2017-06-15 17:47 - 2017-06-03 12:44 - 03873280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-06-15 17:47 - 2017-06-03 12:44 - 01686528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2017-06-15 17:47 - 2017-06-03 12:43 - 00573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-06-15 17:47 - 2017-06-03 12:42 - 00775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2017-06-15 17:47 - 2017-06-03 12:39 - 00279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2017-06-15 17:47 - 2017-06-03 12:38 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp 2017-06-15 17:47 - 2017-06-03 12:33 - 05448704 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-06-15 17:47 - 2017-06-03 12:28 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2017-06-15 17:47 - 2017-06-03 12:24 - 07569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2017-06-15 17:47 - 2017-06-03 12:24 - 01492992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2017-06-15 17:47 - 2017-06-03 12:23 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-06-15 17:47 - 2017-06-03 12:23 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll 2017-06-15 17:47 - 2017-06-03 12:22 - 00679936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2017-06-15 17:47 - 2017-06-03 12:21 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll 2017-06-15 17:47 - 2017-06-03 12:20 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll 2017-06-15 17:47 - 2017-06-03 12:18 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\certenc.dll 2017-06-15 17:47 - 2017-06-03 12:14 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2017-06-15 17:47 - 2017-06-03 12:13 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll 2017-06-15 17:47 - 2017-06-03 12:09 - 00617472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe 2017-06-15 17:47 - 2017-06-03 12:09 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll 2017-06-15 17:47 - 2017-06-03 12:08 - 04453888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-06-15 17:47 - 2017-06-03 12:08 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll 2017-06-15 17:47 - 2017-06-03 12:06 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certenc.dll 2017-06-15 17:47 - 2017-06-03 12:05 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-06-15 17:47 - 2017-06-03 12:03 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2017-06-15 17:47 - 2017-06-03 12:02 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-06-15 17:47 - 2017-06-03 11:59 - 03692032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-06-15 17:47 - 2017-06-03 11:56 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-06-15 17:47 - 2017-06-03 11:54 - 00897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmiEngine.dll 2017-06-15 17:47 - 2017-06-03 11:54 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll 2017-06-15 17:47 - 2017-06-03 11:51 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll 2017-06-15 17:47 - 2017-06-03 11:51 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll 2017-06-15 17:47 - 2017-06-03 11:49 - 00565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-06-15 17:47 - 2017-06-03 11:46 - 00251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll 2017-06-15 17:47 - 2017-06-03 11:41 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2017-06-15 17:47 - 2017-06-03 11:31 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgcore.dll 2017-06-15 17:47 - 2017-06-03 11:29 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgcore.dll 2017-06-15 17:47 - 2017-06-03 11:17 - 00512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-06-15 17:47 - 2017-06-03 08:49 - 00448576 _____ C:\WINDOWS\system32\ApnDatabase.xml 2017-06-14 15:29 - 2017-06-14 15:29 - 00001007 _____ C:\Users\Sylvain\Documents\Recettes.txt 2017-06-14 14:36 - 2017-06-16 17:46 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\KeePass 2017-06-14 14:35 - 2017-06-23 11:06 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2 2017-06-09 18:15 - 2017-06-09 18:15 - 00011812 _____ C:\Users\Sylvain\Desktop\R-CNC.xlsx 2017-06-07 16:13 - 2017-06-07 16:13 - 00000000 ____D C:\Users\Sylvain\AppData\LocalLow\Temp 2017-06-07 13:03 - 2017-06-07 13:03 - 00061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys 2017-06-07 09:54 - 2017-06-07 09:55 - 00000000 ____D C:\Users\Sylvain\AppData\Local\Arduino15 2017-06-07 09:54 - 2017-06-07 09:54 - 00000000 ____D C:\Users\Sylvain\Documents\Arduino 2017-06-07 09:53 - 2017-06-07 09:53 - 00001074 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arduino.lnk 2017-06-07 09:53 - 2017-06-07 09:53 - 00000000 ____D C:\ProgramData\Oracle 2017-06-07 09:48 - 2017-06-07 09:53 - 00000000 ____D C:\Program Files (x86)\Arduino 2017-06-04 16:40 - 2017-06-04 18:07 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\Filmotech_prefs 2017-06-04 16:40 - 2017-06-04 16:40 - 00001090 _____ C:\Users\Sylvain\Desktop\Filmotech.lnk 2017-06-04 16:40 - 2017-06-04 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Filmotech 2017-06-04 16:40 - 2017-06-04 16:40 - 00000000 ____D C:\Program Files (x86)\Filmotech 2017-06-02 16:23 - 2017-06-02 16:23 - 00016148 _____ C:\WINDOWS\system32\PORTABLE_DELL_Ainoa_HistoryPrediction.bin 2017-06-02 16:22 - 2017-06-02 16:22 - 00002425 _____ C:\Users\Ainoa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-06-02 16:22 - 2017-06-02 16:22 - 00000000 ___RD C:\Users\Ainoa\OneDrive 2017-06-02 16:22 - 2017-06-02 16:22 - 00000000 ____D C:\Users\Ainoa\AppData\Local\Aviata 2017-06-02 16:17 - 2017-06-02 16:17 - 00000000 ____D C:\Users\Ainoa\AppData\Local\Publishers 2017-06-02 16:16 - 2017-06-02 16:18 - 00000000 ____D C:\Users\Ainoa\AppData\Local\Comms 2017-06-02 16:15 - 2017-06-02 16:15 - 00000000 ____D C:\Users\Ainoa\AppData\Local\Power2Go8 2017-06-02 16:15 - 2017-06-02 16:15 - 00000000 ____D C:\Users\Ainoa\AppData\Local\Google 2017-06-02 16:12 - 2017-06-02 16:12 - 00000000 __SHD C:\Users\Ainoa\IntelGraphicsProfiles 2017-06-02 16:12 - 2017-06-02 16:12 - 00000000 ____D C:\Users\Ainoa\AppData\Local\TileDataLayer 2017-06-02 16:11 - 2017-06-02 16:11 - 00000638 __RSH C:\Users\Ainoa\ntuser.pol 2017-06-02 16:11 - 2017-06-02 16:11 - 00000020 ___SH C:\Users\Ainoa\ntuser.ini 2017-06-02 15:19 - 2017-06-02 15:19 - 00000000 ___HD C:\$WINDOWS.~BT 2017-06-01 15:23 - 2017-06-07 13:57 - 00000000 ____D C:\Users\Sylvain\Desktop\Fichiers imprimante 3D 2017-05-26 12:38 - 2017-05-26 12:38 - 00000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin 2017-05-26 12:34 - 2017-05-26 12:34 - 40213960 _____ (Intel Corporation) C:\WINDOWS\system32\igdumdim64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 35131648 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd11dxva32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 29110296 _____ (Intel Corporation) C:\WINDOWS\system32\common_clang64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 19870224 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\common_clang32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 15630696 _____ (Intel Corporation) C:\WINDOWS\system32\igc64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 13607808 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igc32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 11750928 _____ (Intel Corporation) C:\WINDOWS\system32\ig75icd64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 08740880 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ig75icd32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 05799386 _____ C:\WINDOWS\system32\igdclbif.bin 2017-05-26 12:34 - 2017-05-26 12:34 - 05697552 _____ (Intel Corporation) C:\WINDOWS\system32\igdmcl64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 05271568 _____ (Intel Corporation) C:\WINDOWS\system32\GfxResources.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 04937240 _____ (Intel Corporation) C:\WINDOWS\system32\igdrcl64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 04372504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdrcl32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 04316136 _____ (Intel Corporation) C:\WINDOWS\system32\igd12umd64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 04284872 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd12umd32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 03980304 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmcl32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 02422512 _____ (Intel Corporation) C:\WINDOWS\system32\igdmd64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 01883368 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdmd32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 01841096 _____ (Intel Corporation) C:\WINDOWS\system32\iglhsip64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 01838400 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhsip32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 01599504 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmjit64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 01187344 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmjit32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 01035768 _____ C:\WINDOWS\system32\igfxSDK.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00976888 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv4_0.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00973296 _____ (Intel Corporation) C:\WINDOWS\system32\Gfxv2_0.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00831685 _____ C:\WINDOWS\system32\DisplayAudiox64.cab 2017-05-26 12:34 - 2017-05-26 12:34 - 00713744 _____ (Intel Corporation) C:\WINDOWS\system32\MetroIntelGenericUIFramework.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00545272 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiUMS64.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00475640 _____ (Intel Corporation) C:\WINDOWS\system32\GfxUIEx.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00457208 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCpHDCPSvc.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00448016 _____ (Intel Corporation) C:\WINDOWS\system32\igdbcl64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00424984 _____ (Intel Corporation) C:\WINDOWS\system32\IntelOpenCL64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00398864 _____ (Intel Corporation) C:\WINDOWS\system32\igfxOSP.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00397328 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdbcl32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00358896 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWiDiMCComp64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00327184 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelOpenCL32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00323744 _____ (Intel Corporation) C:\WINDOWS\system32\igd10idpp64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00310264 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00308504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10idpp32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00282128 _____ C:\WINDOWS\system32\igfxCPL.cpl 2017-05-26 12:34 - 2017-05-26 12:34 - 00274960 _____ (Intel Corporation) C:\WINDOWS\system32\igdfcl64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00263696 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDTCM.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00253024 _____ (Intel Corporation) C:\WINDOWS\system32\iglhcp64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00245752 _____ (Intel Corporation) C:\WINDOWS\system32\igfxext.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00241144 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyApp.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00240632 _____ (Intel Corporation) C:\WINDOWS\system32\DPTopologyAppv2_0.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00234008 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdfcl32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00233928 _____ (Intel Corporation) C:\WINDOWS\system32\igdde64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00221200 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCoIn_v4531.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00215864 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iglhcp32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00201744 _____ (Intel Corporation) C:\WINDOWS\system32\igdail64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00194336 _____ (Intel Corporation) C:\WINDOWS\system32\igfxcmrt64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00193312 _____ (Intel Corporation) C:\WINDOWS\system32\igfx11cmrt64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00192160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdde32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00183800 _____ (Intel Corporation) C:\WINDOWS\system32\difx64.exe 2017-05-26 12:34 - 2017-05-26 12:34 - 00182800 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdail32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00170376 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxcmrt32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00170376 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfx11cmrt32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00120336 _____ ( ) C:\WINDOWS\system32\igfxSDKLibv2_0.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00112656 _____ (Khronos Group) C:\WINDOWS\SysWOW64\Intel_OpenCL_ICD32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00112144 _____ C:\WINDOWS\system32\igfxCUIServicePS.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00109584 _____ ( ) C:\WINDOWS\system32\igfxSDKLib.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00108560 _____ (Khronos Group) C:\WINDOWS\system32\Intel_OpenCL_ICD64.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00103952 _____ ( ) C:\WINDOWS\system32\igfxDHLibv2_0.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00093200 _____ ( ) C:\WINDOWS\system32\igfxDHLib.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00064560 _____ (Intel Corporation) C:\WINDOWS\system32\igfxexps.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00061456 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igfxexps32.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00041296 _____ C:\WINDOWS\system32\iglhxc64_dev.vp 2017-05-26 12:34 - 2017-05-26 12:34 - 00040931 _____ C:\WINDOWS\system32\iglhxo64_dev.vp 2017-05-26 12:34 - 2017-05-26 12:34 - 00040343 _____ C:\WINDOWS\system32\iglhxo64.vp 2017-05-26 12:34 - 2017-05-26 12:34 - 00040316 _____ C:\WINDOWS\system32\iglhxc64.vp 2017-05-26 12:34 - 2017-05-26 12:34 - 00039798 _____ C:\WINDOWS\system32\iglhxg64_dev.vp 2017-05-26 12:34 - 2017-05-26 12:34 - 00039658 _____ C:\WINDOWS\system32\iglhxg64.vp 2017-05-26 12:34 - 2017-05-26 12:34 - 00037904 _____ ( ) C:\WINDOWS\system32\igfxDILibv2_0.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00037904 _____ ( ) C:\WINDOWS\system32\igfxDILib.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00036368 _____ ( ) C:\WINDOWS\system32\igfxEMLibv2_0.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00036368 _____ ( ) C:\WINDOWS\system32\igfxEMLib.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00031248 _____ ( ) C:\WINDOWS\system32\igfxLHMLibv2_0.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00031248 _____ ( ) C:\WINDOWS\system32\igfxLHMLib.dll 2017-05-26 12:34 - 2017-05-26 12:34 - 00004862 _____ C:\WINDOWS\system32\iglhxs64.vp 2017-05-26 12:34 - 2017-05-26 12:34 - 00001125 _____ C:\WINDOWS\system32\iglhxa64.vp 2017-05-26 11:56 - 2017-05-26 11:56 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2017-05-26 11:49 - 2017-05-26 11:50 - 00000000 ____D C:\Users\Sylvain\Documents\Fichiers Sketchup 2017-05-26 11:38 - 2017-05-26 11:38 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-05-26 11:34 - 2017-05-26 11:46 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\FreeCAD 2017-05-26 11:11 - 2017-05-26 11:11 - 00000245 _____ C:\Users\Sylvain\Documents\pouet.txt 2017-05-26 11:10 - 2017-05-26 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCAD 0.16 2017-05-26 11:07 - 2017-05-26 11:10 - 00000000 ____D C:\Program Files (x86)\FreeCAD 0.16 ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-06-23 13:25 - 2017-04-02 21:43 - 00000000 ____D C:\Users\Sylvain\AppData\LocalLow\Mozilla 2017-06-23 13:22 - 2015-08-24 21:06 - 00000000 __SHD C:\Users\Sylvain\IntelGraphicsProfiles 2017-06-23 13:22 - 2015-08-24 20:13 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-06-23 13:21 - 2017-05-13 00:38 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-06-23 13:21 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-06-23 13:20 - 2017-05-13 00:34 - 00000000 ____D C:\ProgramData\AVAST Software 2017-06-23 13:20 - 2015-07-10 11:05 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2017-06-23 12:13 - 2014-12-27 18:02 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\Skype 2017-06-23 11:35 - 2015-07-10 13:04 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-23 11:35 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-06-23 11:20 - 2015-07-26 14:55 - 00000000 ____D C:\Program Files\Common Files\AV 2017-06-23 11:05 - 2017-04-03 17:42 - 00000000 ____D C:\Program Files (x86)\Google 2017-06-23 11:05 - 2015-04-20 14:55 - 00000000 ____D C:\Sld 2017-06-23 11:05 - 2014-12-27 18:11 - 00000000 ____D C:\Users\Sylvain\AppData\Local\Google 2017-06-23 11:00 - 2017-01-15 18:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-06-23 11:00 - 2014-12-27 16:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-06-23 09:45 - 2015-07-10 13:02 - 00000000 ____D C:\WINDOWS\INF 2017-06-23 09:43 - 2017-04-08 13:24 - 00004176 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B0660C1E-53F3-4AF2-BECA-AAC3E5BDF2BD} 2017-06-22 16:05 - 2017-05-13 00:38 - 00077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-06-22 14:58 - 2017-05-13 00:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-06-22 12:51 - 2017-05-13 00:33 - 00002460 _____ C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-06-22 12:51 - 2017-04-11 18:37 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-06-22 12:51 - 2014-12-23 18:27 - 00000000 __RDO C:\Users\Sylvain\OneDrive 2017-06-22 12:36 - 2014-08-24 23:21 - 00000000 ____D C:\ProgramData\PCDr 2017-06-22 10:30 - 2015-08-24 20:36 - 01832314 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-06-22 10:30 - 2015-07-10 18:24 - 00815512 _____ C:\WINDOWS\system32\perfh00C.dat 2017-06-22 10:30 - 2015-07-10 18:24 - 00151600 _____ C:\WINDOWS\system32\perfc00C.dat 2017-06-20 00:06 - 2015-08-24 20:17 - 00000000 ____D C:\Users\Sylvain 2017-06-19 21:16 - 2017-04-03 17:55 - 00004820 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-06-19 21:16 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-06-19 21:16 - 2015-04-18 20:05 - 00000000 ____D C:\Users\Sylvain\AppData\Local\Adobe 2017-06-19 21:15 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-06-19 14:58 - 2015-05-03 18:37 - 00000000 ____D C:\Users\Sylvain\AppData\Roaming\SketchUp 2017-06-19 14:57 - 2015-05-02 17:52 - 00000000 ____D C:\ProgramData\Reprise 2017-06-19 14:57 - 2015-05-02 17:51 - 00000000 ____D C:\ProgramData\SketchUp 2017-06-19 14:57 - 2015-05-02 17:51 - 00000000 ____D C:\Program Files\SketchUp 2017-06-19 14:56 - 2017-04-10 21:32 - 00000000 ____D C:\ProgramData\Package Cache 2017-06-19 14:30 - 2013-11-27 13:56 - 02369462 _____ C:\Users\Sylvain\Desktop\Fabrication etape par etape.skp 2017-06-18 16:10 - 2017-01-29 15:12 - 00000000 ____D C:\Users\sabys_000\AppData\LocalLow\Mozilla 2017-06-18 14:56 - 2014-12-23 11:17 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-06-15 20:03 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache 2017-06-15 18:47 - 2015-07-10 14:20 - 00359000 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-06-15 18:42 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-06-15 18:42 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-06-15 18:42 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-06-15 18:42 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-06-15 18:42 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files\Windows Defender 2017-06-15 18:42 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-06-15 18:42 - 2015-07-10 13:04 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-06-15 18:42 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-06-15 18:42 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-06-15 18:17 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2017-06-15 18:17 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-06-15 18:17 - 2014-12-27 14:56 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-06-15 18:11 - 2014-12-27 14:56 - 133627792 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-06-14 15:29 - 2017-05-16 15:34 - 00000848 _____ C:\Users\Sylvain\Documents\Aquario.txt 2017-06-10 12:29 - 2017-04-10 21:34 - 00000000 ___RD C:\Program Files (x86)\Skype 2017-06-10 12:29 - 2014-12-27 18:02 - 00000000 ____D C:\ProgramData\Skype 2017-06-08 13:27 - 2017-05-19 13:52 - 00000000 ____D C:\Users\Sylvain\AppData\Local\RepetierHost 2017-06-05 14:58 - 2017-03-25 12:14 - 03413184 ____R C:\Users\sabys_000\Desktop\money compte joint Sauvegarde.mbf 2017-06-05 14:58 - 2017-03-25 12:07 - 03411968 _____ C:\Users\sabys_000\Desktop\money compte joint.mny 2017-06-05 14:58 - 2014-12-27 17:38 - 08962048 _____ C:\Users\sabys_000\Desktop\money.mny 2017-06-05 14:58 - 2014-12-27 17:37 - 08919552 ____R C:\Users\sabys_000\Desktop\Money Sauvegarde240813.mbf 2017-06-05 14:29 - 2015-05-31 18:38 - 00000000 ____D C:\Users\sabys_000\Documents\Impôts 2017-06-03 15:15 - 2015-08-24 20:31 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-06-03 04:42 - 2016-10-16 14:40 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-06-03 04:42 - 2016-10-16 14:40 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-06-02 16:22 - 2015-08-24 20:16 - 00000000 ____D C:\Users\Ainoa 2017-06-02 16:17 - 2014-12-23 18:42 - 00000000 ____D C:\Users\Ainoa\AppData\Local\Packages 2017-06-02 15:20 - 2015-08-24 21:06 - 00000000 ___DC C:\WINDOWS\Panther 2017-05-31 04:47 - 2017-04-06 20:29 - 00000036 _____ C:\WINDOWS\progress.ini 2017-05-31 04:47 - 2017-04-04 17:48 - 00000000 ____D C:\Windows10Upgrade 2017-05-31 04:47 - 2015-08-24 19:33 - 00001890 _____ C:\WINDOWS\diagwrn.xml 2017-05-31 04:47 - 2015-08-24 19:33 - 00001890 _____ C:\WINDOWS\diagerr.xml 2017-05-31 04:41 - 2017-04-04 17:49 - 00000000 ___HD C:\$GetCurrent 2017-05-31 00:37 - 2014-08-24 23:23 - 00000000 ____D C:\Program Files (x86)\Dell Backup and Recovery 2017-05-31 00:19 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-05-31 00:19 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-05-31 00:19 - 2015-07-10 11:07 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ___RD C:\WINDOWS\DevicesFlow 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\setup 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Provisioning 2017-05-31 00:18 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-05-31 00:18 - 2015-07-10 11:07 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2017-05-31 00:18 - 2015-07-10 11:05 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-05-30 22:45 - 2016-03-26 17:49 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-05-28 04:25 - 2017-05-13 00:39 - 00093624 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-05-26 12:38 - 2015-08-24 20:13 - 00000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat 2017-05-26 12:37 - 2017-04-02 18:44 - 00007604 _____ C:\Users\Sylvain\AppData\Local\Resmon.ResmonCfg 2017-05-26 12:34 - 2015-08-24 20:13 - 00112656 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-05-26 12:34 - 2015-08-24 20:13 - 00108560 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-05-26 12:34 - 2015-07-18 00:36 - 07974904 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\igdkmd64.sys 2017-05-26 12:34 - 2015-07-18 00:35 - 00410616 _____ C:\WINDOWS\system32\igfxTray.exe 2017-05-26 12:34 - 2015-07-18 00:35 - 00382456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxCUIService.exe 2017-05-26 12:34 - 2015-07-18 00:35 - 00363512 _____ (Intel Corporation) C:\WINDOWS\system32\igfxEM.exe 2017-05-26 12:34 - 2015-07-18 00:35 - 00277496 _____ (Intel Corporation) C:\WINDOWS\system32\igfxHK.exe 2017-05-26 12:34 - 2015-07-18 00:34 - 39246776 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumdim32.dll 2017-05-26 12:34 - 2015-07-18 00:34 - 33775616 _____ (Intel Corporation) C:\WINDOWS\system32\igd11dxva64.dll 2017-05-26 12:34 - 2015-07-18 00:34 - 15982784 _____ (Intel Corporation) C:\WINDOWS\system32\igd10iumd64.dll 2017-05-26 12:34 - 2015-07-18 00:34 - 12798456 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10iumd32.dll 2017-05-26 12:34 - 2015-07-18 00:34 - 06763136 _____ (Intel Corporation) C:\WINDOWS\system32\igdusc64.dll 2017-05-26 12:34 - 2015-07-18 00:34 - 05193384 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdusc32.dll 2017-05-26 12:34 - 2015-07-18 00:28 - 02150936 _____ (Intel Corporation) C:\WINDOWS\system32\igfxLHM.dll 2017-05-26 12:34 - 2015-07-18 00:28 - 00765456 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDH.dll 2017-05-26 12:34 - 2015-07-18 00:28 - 00407568 _____ (Intel Corporation) C:\WINDOWS\system32\igfxDI.dll 2017-05-26 12:29 - 2015-07-10 18:28 - 00000000 ____D C:\WINDOWS\ShellNew 2017-05-26 12:13 - 2017-05-13 00:39 - 00113592 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-05-26 12:13 - 2017-05-13 00:39 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-05-26 11:57 - 2015-08-27 21:38 - 00000000 ____D C:\Users\Sylvain\AppData\Local\Ubisoft Game Launcher 2017-05-26 11:52 - 2015-04-25 18:03 - 00000000 ____D C:\Users\Sylvain\AppData\Local\Ankama ==================== Fichiers à la racine de certains dossiers ======= 2017-06-19 12:34 - 2017-06-19 12:34 - 0000023 _____ () C:\Users\Sylvain\AppData\Roaming\brand.ini 2015-04-25 22:03 - 2015-05-18 22:43 - 0000117 _____ () C:\Users\Sylvain\AppData\Roaming\D2Info0 2015-04-25 22:03 - 2015-05-18 22:50 - 0000008 _____ () C:\Users\Sylvain\AppData\Roaming\DofusAppId0_1 2017-04-02 18:44 - 2017-05-26 12:37 - 0007604 _____ () C:\Users\Sylvain\AppData\Local\Resmon.ResmonCfg 2015-08-24 20:12 - 2015-08-24 20:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-08-24 23:14 - 2014-08-24 23:14 - 0000121 _____ () C:\ProgramData\{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}.log 2014-08-24 23:10 - 2014-08-24 23:11 - 0000106 _____ () C:\ProgramData\{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}.log 2014-08-24 23:11 - 2014-08-24 23:13 - 0000111 _____ () C:\ProgramData\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}.log 2014-08-24 23:13 - 2014-08-24 23:14 - 0000108 _____ () C:\ProgramData\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}.log 2014-08-24 23:09 - 2014-08-24 23:10 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-06-15 18:58 ==================== Fin de FRST.txt ============================