Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 26-10-2017 Exécuté par Rouil (administrateur) sur ANDRE8 (31-10-2017 17:28:26) Exécuté depuis C:\Users\Rouil\Desktop Profils chargés: Rouil (Profils disponibles: Rouil) Platform: Windows 10 Home Version 1709 16299.19 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: FF) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe (Emsisoft Ltd) C:\Program Files\Emsisoft Anti-Malware\a2service.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe (AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe (Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Orange SA) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Reason Software Company Inc.) C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe (Reason Software Company Inc.) C:\Program Files\Reason\Security\rsService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe (Reason Software Company Inc.) C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxEM.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Microsoft Corporation) C:\Windows\System32\CastSrv.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (KARPOLAN) C:\Program Files (x86)\Keyboard LEDs\KeyboardLeds.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (the sz development) C:\Users\Rouil\AppData\Local\Howard\Howard.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe (Orange SA) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUIndicator.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (CyberLink) C:\Program Files\Cyberlink\Shared files\RichVideo64.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSGPlusBTServer64.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel Corporation) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2017-08-13] (IvoSoft) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe [63272 2015-12-24] () HKLM-x32\...\Run: [PowerDVD16Agent] => D:\Cyberlink Softwares\PowerDVD16\PowerDVD16Agent.exe [525352 2016-12-29] (CyberLink Corp.) HKLM-x32\...\Run: [CLMLServer_For_P2G11] => D:\Cyberlink Softwares\Power2Go11\CLMLSvc_P2G11.exe [118552 2016-10-13] (CyberLink) HKLM-x32\...\Run: [Nero BackItUp] => C:\Program Files (x86)\Nero\Nero 2018\Nero BackItup\BackItUp.exe [1164664 2017-09-12] (Nero AG) HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [131360 2017-09-18] (Intel) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation) HKLM\...\Policies\Explorer: [MemCheckBoxInRunDlg] 1 HKU\S-1-5-21-506353644-2927332698-4136278142-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7964576 2017-10-19] (SUPERAntiSpyware) HKU\S-1-5-21-506353644-2927332698-4136278142-1001\...\Run: [KeyboardLeds.exe] => C:\Program Files (x86)\Keyboard LEDs\KeyboardLeds.exe [912896 2012-09-06] (KARPOLAN) HKU\S-1-5-21-506353644-2927332698-4136278142-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10021040 2017-10-18] (Piriform Ltd) Startup: C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Howard.lnk [2017-09-28] ShortcutTarget: Howard.lnk -> C:\Users\Rouil\AppData\Local\Howard\Howard.exe (the sz development) Startup: C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 - Capture d’écran et lancement.lnk [2017-03-15] ShortcutTarget: OneNote 2010 - Capture d’écran et lancement.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar172.lnk [2017-10-31] ShortcutTarget: Sidebar172.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\..\Interfaces\{f07720cf-1242-42e8-becd-c85067fad574}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\S-1-5-21-506353644-2927332698-4136278142-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00 SearchScopes: HKU\S-1-5-21-506353644-2927332698-4136278142-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE00 BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-10-02] (Bitdefender) BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2017-08-13] (IvoSoft) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-10-02] (Bitdefender) BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-29] (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-29] (Oracle Corporation) BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2017-08-13] (IvoSoft) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-10-02] (Bitdefender) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2017-08-13] (IvoSoft) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-10-02] (Bitdefender) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2017-08-13] (IvoSoft) Edge: ====== Edge Extension: (PrintFriendly and PDF) -> EdgeExtension_32615PrintFriendlyPDFPrintPDF_mcmatvdanzs2y => C:\Program Files\WindowsApps\32615PrintFriendlyPDF.Print-PDF_2.3.3.0_neutral__mcmatvdanzs2y [2017-10-29] FireFox: ======== FF DefaultProfile: wq7riv5p.default FF ProfilePath: C:\Users\Rouil\AppData\Roaming\Mozilla\Firefox\Profiles\wq7riv5p.default [2017-10-31] FF Homepage: Mozilla\Firefox\Profiles\wq7riv5p.default -> orange.fr/portail FF Extension: (Bloody Vikings!) - C:\Users\Rouil\AppData\Roaming\Mozilla\Firefox\Profiles\wq7riv5p.default\Extensions\bloodyvikings@ffs.bplaced.net.xpi [2017-10-28] FF Extension: (AdBlock) - C:\Users\Rouil\AppData\Roaming\Mozilla\Firefox\Profiles\wq7riv5p.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-10-12] FF Extension: (TAARExperiment) - C:\Users\Rouil\AppData\Roaming\Mozilla\Firefox\Profiles\wq7riv5p.default\Extensions\taarexp@mozilla.com.xpi [2017-10-15] FF Extension: (uBlock Origin) - C:\Users\Rouil\AppData\Roaming\Mozilla\Firefox\Profiles\wq7riv5p.default\Extensions\uBlock0@raymondhill.net.xpi [2017-10-22] FF Extension: (Reader) - C:\Users\Rouil\AppData\Roaming\Mozilla\Firefox\Profiles\wq7riv5p.default\Extensions\{20068ab2-1901-4140-9f3c-81207d4dacc4}.xpi [2017-10-28] FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\\bdwteff [2017-09-14] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2017-01-19] [non signé] FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-25] () FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier] FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Pas de fichier] FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-29] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-29] (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> D:\Program Files\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> D:\Program Files\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-07-31] (Adobe Systems Inc.) ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-31] (SUPERAntiSpyware.com) R2 a2AntiMalware; C:\Program Files\Emsisoft Anti-Malware\a2service.exe [9151744 2017-09-29] (Emsisoft Ltd) S4 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe [75264 2015-12-24] (ASUS Cloud Corporation) [Fichier non signé] R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [122728 2017-09-04] (AOMEI Tech Co., Ltd.) R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2090152 2017-09-14] (Bitdefender) S4 CyberLink PowerDVD 17 Media Server Monitor Service; D:\Cyberlink Softwares\Power DVD 17 Ultra\PowerDVD17\Kernel\DMS\CLMSMonitorServicePDVD17.exe [127768 2017-06-06] (CyberLink) S4 CyberLink PowerDVD 17 Media Server Service; D:\Cyberlink Softwares\Power DVD 17 Ultra\PowerDVD17\Kernel\DMS\CLMSServerPDVD17.exe [375064 2017-06-06] (CyberLink) S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-02-22] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-02-22] (Dropbox, Inc.) S4 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [22816 2017-09-18] (Intel) R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2218552 2017-01-12] (Intel Corporation) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Fichier non signé] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Fichier non signé] R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [17976 2016-09-20] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [974632 2016-02-19] (Intel(R) Corporation) S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Fichier non signé] R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Fichier non signé] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [209184 2016-05-25] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2017-04-10] () S4 NeroBackItUpBackgroundService2018; C:\Program Files (x86)\Nero\Nero 2018\Nero BackItUp\NBService.exe [287096 2017-09-12] (Nero AG) S4 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [417456 2017-08-23] () R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [53176 2017-08-16] (Microsoft) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-09-19] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-09-16] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-09-19] (NVIDIA Corporation) R2 Orange update Core Service; C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe [734432 2017-08-07] (Orange SA) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-09-08] (CyberLink) R2 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [293656 2017-10-27] (Reason Software Company Inc.) R2 rsService; C:\Program Files\Reason\Security\rsService.exe [252184 2017-10-13] (Reason Software Company Inc.) R2 ServiceDevMgmt; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [103072 2017-08-17] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [218416 2017-10-02] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1280816 2017-10-12] (Bitdefender) R2 vsservp; C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe [524872 2016-08-25] (Bitdefender) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3750304 2017-04-10] (Intel® Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2016-12-21] () R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [171952 2016-12-21] () R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [38320 2017-09-01] () R3 AsusSGDrv; C:\WINDOWS\system32\DRIVERS\AsusSGDrv.sys [141304 2015-12-18] (ASUS Corporation) S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [44640 2016-10-11] (The OpenVPN Project) R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1019880 2017-10-02] (BitDefender S.R.L. Bucharest, ROMANIA) R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1763744 2017-10-02] (BitDefender) S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23672 2016-03-14] (Bitdefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [133088 2017-07-31] (BitDefender LLC) R2 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [47856 2017-09-14] (© Bitdefender SRL) R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender) R3 CLVirtualBus01; C:\WINDOWS\System32\drivers\CLVirtualBus01.sys [103176 2014-11-05] (CyberLink) R3 CLVirtualBus02; C:\WINDOWS\System32\drivers\CLVirtualBus02.sys [103176 2017-06-08] (CyberLink) R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [74168 2017-07-07] (Intel Corporation) R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [67976 2017-01-12] (Intel Corporation) S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-08-13] (Disc Soft Ltd) S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-08-13] (Disc Soft Ltd) R1 epp; C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\epp.sys [124552 2016-11-23] (Emsisoft Ltd) R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [355208 2017-01-12] (Intel Corporation) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77440 2017-10-08] () S3 gfiark; C:\WINDOWS\System32\drivers\gfiark.sys [40584 2015-08-27] (ThreatTrack Security) S3 gfiutil; C:\WINDOWS\System32\drivers\gfiutil.sys [32400 2016-03-04] (ThreatTrack Security) R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [187688 2017-09-14] (BitDefender LLC) R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [31120 2016-12-19] (ASUS) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [245768 2017-08-07] (Intel Corporation) R0 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [362664 2017-10-02] (Bitdefender) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [192952 2017-10-08] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [110016 2017-10-31] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [45504 2017-10-31] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [252232 2017-10-31] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [94144 2017-10-31] (Malwarebytes) R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7634952 2017-07-11] (Intel Corporation) R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_be68490c36dd0154\nvlddmkm.sys [15619320 2017-09-18] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-09-19] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-09-19] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57976 2017-09-16] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [984032 2017-06-29] (Realtek ) R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [792544 2017-07-17] (Realsil Semiconductor Corporation) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] () R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [84432 2017-03-27] (The OpenVPN Project) R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [439576 2017-09-14] (BitDefender S.R.L.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation) R1 ZAM; C:\WINDOWS\System32\drivers\zam64.sys [203680 2017-09-24] (Zemana Ltd.) R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-09-24] (Zemana Ltd.) R2 {41E8078B-96D9-42DC-8789-A1CF102CD880}; D:\Cyberlink Softwares\PowerDVD16\Common\NavFilter\000.fcl [38168 2016-12-19] (CyberLink Corp.) R2 {A14A8EF6-B11D-4356-9ECC-4B937E6CC626}; D:\Cyberlink Softwares\Power DVD 17 Ultra\PowerDVD17\Common\NavFilter\000.fcl [38168 2017-06-08] (CyberLink Corp.) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-10-31 17:28 - 2017-10-31 17:29 - 000026642 _____ C:\Users\Rouil\Desktop\FRST.txt 2017-10-31 16:53 - 2017-10-31 16:53 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-10-31 16:43 - 2017-10-31 17:29 - 000091952 _____ C:\WINDOWS\ZAM.krnl.trace 2017-10-31 16:43 - 2017-10-31 17:29 - 000049047 _____ C:\WINDOWS\ZAM_Guard.krnl.trace 2017-10-31 16:43 - 2017-10-31 16:43 - 000252232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2017-10-31 16:43 - 2017-10-31 16:43 - 000110016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-10-31 16:43 - 2017-10-31 16:43 - 000045504 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-10-31 13:23 - 2017-10-31 13:23 - 000001242 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Reason Core Security.lnk 2017-10-31 11:27 - 2017-10-31 11:27 - 000000008 __RSH C:\ProgramData\ntuser.pol 2017-10-31 11:05 - 2017-10-31 11:05 - 000000000 ____D C:\ProgramData\bdch 2017-10-30 20:32 - 2017-10-30 20:32 - 002403328 _____ (Farbar) C:\Users\Rouil\Desktop\FRST64.exe 2017-10-30 12:35 - 2017-10-30 12:35 - 003061760 _____ (Nicolas Coolman) C:\Users\Rouil\Desktop\ZHPFix.exe 2017-10-30 12:33 - 2017-10-30 12:33 - 002921856 _____ C:\Users\Rouil\Desktop\ZHPDiag3.exe 2017-10-30 11:27 - 2017-10-30 11:27 - 000001228 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Splendid Utility.Lnk 2017-10-29 20:32 - 2017-10-29 20:32 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Softland 2017-10-29 15:10 - 2017-10-29 15:10 - 000000919 _____ C:\Users\Rouil\Desktop\Captvty.exe - Raccourci.lnk 2017-10-29 13:22 - 2017-10-29 13:22 - 000002156 _____ C:\Users\Rouil\Desktop\startscreen.lnk 2017-10-29 13:21 - 2017-10-29 13:21 - 000002172 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Malwarebytes.lnk 2017-10-29 13:21 - 2017-10-29 13:21 - 000002101 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\SUPERAntiSpyware Professional.lnk 2017-10-29 13:21 - 2017-10-29 13:21 - 000001535 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Auslogics Disk Defrag Professional.lnk 2017-10-29 13:21 - 2017-10-29 13:21 - 000001157 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\RogueKiller.lnk 2017-10-29 13:21 - 2017-10-29 13:21 - 000001117 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\CCleaner.lnk 2017-10-29 13:20 - 2017-10-29 13:20 - 000001262 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Emsisoft Anti-Malware.lnk 2017-10-29 13:11 - 2017-10-29 13:11 - 000001251 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Command Prompt.lnk 2017-10-29 13:02 - 2017-10-29 12:28 - 000002156 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk 2017-10-29 12:45 - 2017-10-29 12:45 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\ClassicShell 2017-10-29 12:38 - 2017-10-29 12:38 - 000000000 ____D C:\ProgramData\ClassicShell 2017-10-29 12:34 - 2017-10-29 12:33 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2017-10-29 12:28 - 2017-10-29 12:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell 2017-10-29 12:28 - 2017-10-29 12:28 - 000000000 ____D C:\Program Files\Classic Shell 2017-10-28 23:49 - 2017-10-13 19:08 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-10-28 23:49 - 2017-10-13 19:08 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-10-28 22:26 - 2017-10-28 21:53 - 000000000 ____D C:\Windows.old 2017-10-28 22:22 - 2017-10-28 22:26 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-10-28 22:21 - 2017-10-28 22:22 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2017-10-28 22:21 - 2017-10-28 22:21 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2017-10-28 22:20 - 2017-10-28 22:20 - 025246208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 023664128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 021752832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 019343360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 018913792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 017080832 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 008592280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-10-28 22:20 - 2017-10-28 22:20 - 008097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 006032896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 005906264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 004744192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 003681280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 003672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 003312432 _____ C:\WINDOWS\system32\Windows.Mirage.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 002869248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 002474080 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 002400664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 002106880 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001633744 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001528912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001436432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001200024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-10-28 22:20 - 2017-10-28 22:20 - 001165824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-10-28 22:20 - 2017-10-28 22:20 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-10-28 22:20 - 2017-10-28 22:20 - 000769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-10-28 22:20 - 2017-10-28 22:20 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000559000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000464416 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000232344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000045976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-10-28 22:20 - 2017-10-28 22:20 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2017-10-28 22:20 - 2017-10-28 22:20 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll 2017-10-28 22:19 - 2017-10-28 22:19 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2017-10-28 22:19 - 2017-10-28 22:19 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2017-10-28 22:19 - 2017-10-28 22:19 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2017-10-28 22:19 - 2017-10-28 22:19 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2017-10-28 22:19 - 2017-10-28 22:19 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2017-10-28 22:19 - 2017-10-28 22:19 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2017-10-28 22:19 - 2017-10-28 22:19 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-10-28 22:19 - 2017-10-28 22:19 - 000000000 ____D C:\Program Files\Reference Assemblies 2017-10-28 22:19 - 2017-10-28 22:19 - 000000000 ____D C:\Program Files\MSBuild 2017-10-28 22:19 - 2017-10-28 22:19 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-10-28 22:19 - 2017-10-28 22:19 - 000000000 ____D C:\Program Files (x86)\MSBuild 2017-10-28 21:56 - 2017-10-28 21:56 - 000003358 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-506353644-2927332698-4136278142-1001 2017-10-28 21:55 - 2017-10-28 21:55 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2017-10-28 21:54 - 2017-10-28 21:54 - 000000000 ___HD C:\Users\Rouil\MicrosoftEdgeBackups 2017-10-28 21:53 - 2017-10-28 21:53 - 000000020 ___SH C:\Users\Rouil\ntuser.ini 2017-10-28 21:53 - 2017-10-28 21:53 - 000000000 ___RD C:\Users\Rouil\3D Objects 2017-10-28 21:47 - 2017-10-28 21:47 - 000007623 _____ C:\WINDOWS\diagwrn.xml 2017-10-28 21:47 - 2017-10-28 21:47 - 000007623 _____ C:\WINDOWS\diagerr.xml 2017-10-28 21:46 - 2017-10-31 16:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-10-28 21:46 - 2017-10-28 21:46 - 000003618 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2017-10-28 21:46 - 2017-10-28 21:46 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-10-28 21:46 - 2017-10-28 21:46 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000003118 _____ C:\WINDOWS\System32\Tasks\Intel PTT EK Recertification 2017-10-28 21:46 - 2017-10-28 21:46 - 000003114 _____ C:\WINDOWS\System32\Tasks\klcp_update 2017-10-28 21:46 - 2017-10-28 21:46 - 000003108 _____ C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task ada4b93a-3e62-4d26-94a2-a7a199c2b1db 2017-10-28 21:46 - 2017-10-28 21:46 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000002968 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000002924 _____ C:\WINDOWS\System32\Tasks\ATK Package 36D18D69AFC3 2017-10-28 21:46 - 2017-10-28 21:46 - 000002886 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2017-10-28 21:46 - 2017-10-28 21:46 - 000002862 _____ C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher 2017-10-28 21:46 - 2017-10-28 21:46 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000002772 _____ C:\WINDOWS\System32\Tasks\DivXUpdate 2017-10-28 21:46 - 2017-10-28 21:46 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-10-28 21:46 - 2017-10-28 21:46 - 000002694 _____ C:\WINDOWS\System32\Tasks\doPDF Update 2017-10-28 21:46 - 2017-10-28 21:46 - 000002668 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2017-10-28 21:46 - 2017-10-28 21:46 - 000002588 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask 2017-10-28 21:46 - 2017-10-28 21:46 - 000002552 _____ C:\WINDOWS\System32\Tasks\Gaming Assistant 2017-10-28 21:46 - 2017-10-28 21:46 - 000002548 _____ C:\WINDOWS\System32\Tasks\StartIsBack health check 2017-10-28 21:46 - 2017-10-28 21:46 - 000002528 _____ C:\WINDOWS\System32\Tasks\DeviceDetector7.5 2017-10-28 21:46 - 2017-10-28 21:46 - 000002388 _____ C:\WINDOWS\System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C 2017-10-28 21:46 - 2017-10-28 21:46 - 000002368 _____ C:\WINDOWS\System32\Tasks\Connect 2017-10-28 21:46 - 2017-10-28 21:46 - 000002346 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_ListenToDevice 2017-10-28 21:46 - 2017-10-28 21:46 - 000002340 _____ C:\WINDOWS\System32\Tasks\ASUS USB Charger Plus 2017-10-28 21:46 - 2017-10-28 21:46 - 000002302 _____ C:\WINDOWS\System32\Tasks\RTKCPL 2017-10-28 21:46 - 2017-10-28 21:46 - 000002262 _____ C:\WINDOWS\System32\Tasks\DropboxOEM 2017-10-28 21:46 - 2017-10-28 21:46 - 000002218 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2017-10-28 21:46 - 2017-10-28 21:46 - 000002214 _____ C:\WINDOWS\System32\Tasks\ATK Package A22126881260 2017-10-28 21:46 - 2017-10-28 21:46 - 000002214 _____ C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\OfficeSoftwareProtectionPlatform 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\Nero 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\Lenovo 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\Intel 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\Auslogics 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\ASUS 2017-10-28 21:46 - 2017-10-28 21:46 - 000000000 ____D C:\WINDOWS\System32\Tasks\2BrightSparks 2017-10-28 21:34 - 2017-10-31 16:51 - 002139320 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-10-28 21:32 - 2017-10-28 21:32 - 000000000 ____D C:\ProgramData\USOShared 2017-10-28 21:30 - 2017-10-28 21:30 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-10-28 21:29 - 2017-10-31 11:22 - 000000000 ____D C:\Users\Rouil 2017-10-28 21:29 - 2017-10-28 21:29 - 000000000 _SHDL C:\Users\Rouil\Voisinage réseau 2017-10-28 21:29 - 2017-10-28 21:29 - 000000000 _SHDL C:\Users\Rouil\Voisinage d'impression 2017-10-28 21:29 - 2017-10-28 21:29 - 000000000 _SHDL C:\Users\Rouil\Modèles 2017-10-28 21:29 - 2017-10-28 21:29 - 000000000 _SHDL C:\Users\Rouil\Mes documents 2017-10-28 21:29 - 2017-10-28 21:29 - 000000000 _SHDL C:\Users\Rouil\Menu Démarrer 2017-10-28 21:29 - 2017-10-28 21:29 - 000000000 _SHDL C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-10-28 21:28 - 2017-10-31 17:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-10-28 21:28 - 2017-10-28 21:32 - 000692464 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-10-28 21:28 - 2017-10-28 21:28 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin 2017-10-28 21:28 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-10-28 21:28 - 2016-11-30 07:36 - 000113672 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-10-28 21:28 - 2016-11-30 07:36 - 000104456 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2017-10-28 19:02 - 2017-10-28 19:02 - 000954488 _____ (Akeo Consulting (hxxp://akeo.ie)) C:\Users\Rouil\Desktop\rufus-2.15.exe 2017-10-28 12:50 - 2017-10-28 21:53 - 000000000 ___DC C:\WINDOWS\Panther 2017-10-27 18:11 - 2017-10-28 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Video Suite 17 2017-10-27 18:11 - 2017-10-27 18:11 - 000000795 _____ C:\Users\Public\Desktop\Movavi Video Suite 17.lnk 2017-10-27 18:10 - 2017-10-27 18:12 - 000000000 ____D C:\ProgramData\Movavi Video Suite 17 2017-10-27 18:10 - 2017-10-27 18:10 - 000005111 _____ C:\ProgramData\nyuhbnxq.dbn 2017-10-27 18:02 - 2017-10-28 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Video Converter 18 2017-10-27 18:02 - 2017-10-27 18:02 - 000001125 _____ C:\Users\Public\Desktop\Movavi Video Converter 18.lnk 2017-10-27 18:00 - 2017-10-27 18:03 - 000000000 ____D C:\ProgramData\Movavi Video Converter 18 2017-10-27 18:00 - 2017-10-27 18:00 - 000004913 _____ C:\ProgramData\vfiakfjk.zeu 2017-10-27 16:25 - 2017-10-27 10:24 - 000457640 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171027-172547.backup 2017-10-27 13:31 - 2017-10-31 13:23 - 000001173 _____ C:\Users\Rouil\Desktop\Reason Core Security.lnk 2017-10-27 13:31 - 2017-10-28 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reason Core Security 2017-10-27 13:30 - 2017-10-27 13:30 - 000000000 ____D C:\Program Files\Reason 2017-10-26 19:35 - 2017-10-26 19:35 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2017-10-26 18:35 - 2017-10-26 18:35 - 000000000 ____D C:\ProgramData\simplitec 2017-10-26 16:18 - 2017-10-26 18:35 - 000000524 _____ C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task ada4b93a-3e62-4d26-94a2-a7a199c2b1db.job 2017-10-26 15:27 - 2017-10-26 15:27 - 003662673 _____ (Alexandre Coelho ) C:\Users\Rouil\Desktop\Windows_Repair_Toolbox_setup.exe 2017-10-26 14:03 - 2017-10-26 14:03 - 000028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys 2017-10-25 19:06 - 2017-10-25 19:06 - 000000907 _____ C:\Users\Public\Desktop\RogueKiller.lnk 2017-10-21 11:49 - 2017-10-21 11:49 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\23406 2017-10-19 23:28 - 2017-10-19 23:28 - 000001265 _____ C:\Users\Public\Desktop\CyberLink ActionDirector 2 (64-bit).lnk 2017-10-19 23:28 - 2017-10-19 23:28 - 000001265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink ActionDirector 2 (64-bit).lnk 2017-10-19 23:16 - 2017-10-19 23:16 - 000001314 _____ C:\Users\Public\Desktop\CyberLink PhotoDirector 9.lnk 2017-10-19 23:16 - 2017-10-19 23:16 - 000001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 9 (64-bit).lnk 2017-10-19 14:45 - 2017-10-19 15:07 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2017-10-18 13:42 - 2017-10-18 13:42 - 000000000 ___HD C:\$Windows.~WS 2017-10-17 16:00 - 2017-10-23 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Orange 2017-10-17 15:59 - 2017-10-31 16:41 - 000000323 _____ C:\WINDOWS\wininit.ini 2017-10-17 15:59 - 2017-10-26 18:08 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orange 2017-10-17 15:58 - 2017-10-17 15:58 - 000000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2017-10-17 15:58 - 2017-10-17 15:58 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2017-10-17 15:58 - 2017-10-17 15:58 - 000000000 ____D C:\ProgramData\Apple 2017-10-17 15:58 - 2017-10-17 15:58 - 000000000 ____D C:\Program Files\WinPcap 2017-10-17 15:09 - 2017-10-26 18:08 - 000000000 ____D C:\Program Files (x86)\Orange 2017-10-17 15:09 - 2017-10-24 09:30 - 000000000 ____D C:\ProgramData\Orange 2017-10-17 15:09 - 2017-10-17 15:09 - 000000000 ____D C:\Users\N1EFE~1.HMI 2017-10-16 16:34 - 2017-10-16 16:34 - 000000839 _____ C:\Users\Public\Desktop\UCheck.lnk 2017-10-16 14:55 - 2017-10-16 14:55 - 000001024 ____H C:\SYSTAG.BIN 2017-10-16 09:49 - 2016-12-21 13:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys 2017-10-15 18:36 - 2017-10-30 18:01 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\ZHP 2017-10-15 18:36 - 2017-10-15 18:35 - 002949504 _____ C:\Users\Rouil\Desktop\ZHPCleaner.exe 2017-10-12 12:35 - 2017-10-11 23:08 - 000457640 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171012-133558.backup 2017-10-12 11:39 - 2017-10-27 18:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-10-12 11:39 - 2017-10-12 11:39 - 000001196 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-10-12 11:39 - 2017-10-12 11:39 - 000001184 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2017-10-12 11:38 - 2017-10-27 18:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-10-11 18:50 - 2017-10-11 18:50 - 000000016 _____ C:\ProgramData\mntemp 2017-10-11 16:40 - 2017-10-11 16:40 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2017-10-10 11:19 - 2017-10-28 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper 2017-10-10 11:18 - 2017-09-01 17:12 - 000038320 _____ C:\WINDOWS\system32\amwrtdrv.sys 2017-10-10 11:18 - 2016-12-21 21:54 - 000051120 _____ C:\WINDOWS\system32\ambakdrv.sys 2017-10-10 11:18 - 2016-12-21 21:52 - 000171952 _____ C:\WINDOWS\system32\ammntdrv.sys 2017-10-10 10:54 - 2017-10-10 10:54 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\21879 2017-10-10 10:00 - 2017-10-10 10:00 - 000000000 ____D C:\Users\Rouil\.QtWebEngineProcess 2017-10-10 09:56 - 2017-10-10 11:42 - 000000358 _____ C:\WINDOWS\Tasks\Connect.job 2017-10-08 23:33 - 2017-10-08 23:33 - 000192952 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2017-10-08 18:08 - 2017-10-08 18:09 - 483470546 _____ C:\sauvegarde.reg 2017-10-08 10:57 - 2017-10-08 10:57 - 000000000 ____D C:\ProgramData\Bitdefender Support Tool 2017-10-07 18:41 - 2017-10-07 18:19 - 000000064 _____ C:\Users\Rouil\a2whitelist.ini.backup 2017-10-07 18:19 - 2017-10-07 18:44 - 000005858 _____ C:\Users\Rouil\a2settings.ini.backup 2017-10-07 18:19 - 2017-10-07 18:19 - 000000064 _____ C:\Users\Rouil\a2whitelist.ini 2017-10-07 18:16 - 2017-10-09 10:24 - 000000000 ____D C:\Users\Rouil\Reports 2017-10-07 18:14 - 2017-10-09 10:24 - 000005858 _____ C:\Users\Rouil\a2settings.ini 2017-10-07 18:14 - 2017-10-09 10:22 - 000000000 ____D C:\Users\Rouil\Quarantine 2017-10-07 18:09 - 2017-10-09 10:22 - 000000000 ____D C:\Users\Rouil\bin64 2017-10-07 18:09 - 2017-10-07 18:17 - 000000000 ____D C:\Users\Rouil\bin32 2017-10-07 18:09 - 2015-12-09 07:23 - 000004314 _____ C:\Users\Rouil\readme.txt 2017-10-07 14:36 - 2017-10-28 22:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-10-07 14:36 - 2017-10-25 17:49 - 000000000 ____D C:\Program Files\CCleaner 2017-10-07 14:36 - 2017-10-07 14:36 - 000000867 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-10-07 12:23 - 2017-10-25 18:49 - 000001221 _____ C:\Users\Rouil\Desktop\Emsisoft Anti-Malware.lnk 2017-10-07 11:22 - 2017-10-07 11:22 - 000000000 ____D C:\SpybotBootCD 2017-10-06 09:49 - 2017-10-16 10:10 - 000001428 _____ C:\Users\Rouil\Desktop\Spybot-S&D Start Center.lnk 2017-10-05 23:40 - 2017-10-29 12:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-10-05 23:39 - 2017-10-29 12:35 - 000000000 ____D C:\Program Files (x86)\Java 2017-10-05 23:06 - 2017-10-05 22:27 - 000002851 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171006-000610.backup 2017-10-04 18:12 - 2017-10-04 18:12 - 000001399 _____ C:\Users\Rouil\Desktop\Infra Recorder (Portable).lnk 2017-10-04 18:00 - 2017-10-05 23:30 - 000010076 _____ C:\WINDOWS\SysWOW64\bddel.dat 2017-10-03 10:32 - 2017-10-03 10:32 - 004631440 _____ (WiseCleaner.com ) C:\Users\Rouil\Desktop\WDCFree.exe 2017-10-02 13:54 - 2017-10-02 13:54 - 001019880 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys 2017-10-02 13:39 - 2017-10-02 13:39 - 001763744 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys 2017-10-02 13:38 - 2017-10-02 13:39 - 000362664 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys 2017-10-01 11:38 - 2017-10-01 11:38 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\dvdcss 2017-10-01 11:26 - 2017-10-01 11:26 - 000000000 ____D C:\ProgramData\Reason 2017-10-01 11:17 - 2017-10-28 22:26 - 000000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin 2017-10-01 11:17 - 2017-10-28 21:30 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Should I Remove It 2017-10-01 11:17 - 2017-10-14 09:49 - 000001320 _____ C:\Users\Rouil\Desktop\Should I Remove It.lnk 2017-10-01 11:17 - 2017-10-01 11:17 - 000000000 ____D C:\Program Files (x86)\Reason ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-10-31 17:28 - 2017-03-11 19:25 - 000000000 ____D C:\FRST 2017-10-31 17:23 - 2017-03-19 17:43 - 000000165 _____ C:\Users\Rouil\AppData\Roaming\sp_data.sys 2017-10-31 17:23 - 2017-02-23 12:55 - 000000000 ____D C:\Program Files\Bitdefender Agent 2017-10-31 16:59 - 2017-02-23 13:33 - 000000000 ____D C:\Program Files\Emsisoft Anti-Malware 2017-10-31 16:53 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-10-31 16:51 - 2017-09-30 15:40 - 000976628 _____ C:\WINDOWS\system32\perfh00C.dat 2017-10-31 16:51 - 2017-09-30 15:40 - 000199536 _____ C:\WINDOWS\system32\perfc00C.dat 2017-10-31 16:48 - 2017-09-29 09:45 - 000065536 _____ C:\WINDOWS\system32\config\ELAM 2017-10-31 16:44 - 2017-04-07 14:59 - 000000000 ____D C:\ProgramData\NVIDIA 2017-10-31 16:44 - 2017-02-22 17:33 - 000000000 __SHD C:\Users\Rouil\IntelGraphicsProfiles 2017-10-31 16:43 - 2017-09-29 09:45 - 000262144 _____ C:\WINDOWS\system32\config\BBI 2017-10-31 16:43 - 2017-07-05 10:09 - 000000082 _____ C:\WINDOWS\SysWOW64\winsevr.dat 2017-10-31 16:43 - 2017-07-05 10:08 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper 2017-10-31 14:51 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization 2017-10-31 14:50 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps 2017-10-31 11:27 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF 2017-10-31 11:27 - 2017-02-23 13:08 - 000405079 _____ C:\bdlog.txt 2017-10-31 11:26 - 2017-03-03 12:41 - 000000000 ____D C:\Users\Rouil\AppData\LocalLow\Temp 2017-10-31 11:22 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-10-31 11:22 - 2015-10-30 08:24 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-10-29 12:35 - 2017-03-06 13:25 - 000000000 ____D C:\ProgramData\Oracle 2017-10-29 12:10 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat 2017-10-28 23:49 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-10-28 23:35 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files 2017-10-28 23:35 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\Offline Web Pages 2017-10-28 22:27 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-10-28 22:26 - 2017-09-30 19:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver and Support Assistant 2017-10-28 22:26 - 2017-09-30 18:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com 2017-10-28 22:26 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 __SHD C:\Program Files\Windows Sidebar 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help 2017-10-28 22:26 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2017-10-28 22:26 - 2017-09-26 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 8 2017-10-28 22:26 - 2017-09-26 11:31 - 000000000 ____D C:\ProgramData\regid.2008-09.org.wixtoolset 2017-10-28 22:26 - 2017-09-20 14:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2018 2017-10-28 22:26 - 2017-09-20 14:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2017-10-28 22:26 - 2017-09-18 11:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Photo Editor 4 2017-10-28 22:26 - 2017-09-18 10:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Keyboard LEDs 2017-10-28 22:26 - 2017-09-10 10:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordVPN 2017-10-28 22:26 - 2017-09-01 13:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-10-28 22:26 - 2017-08-17 19:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller 2017-10-28 22:26 - 2017-07-20 14:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPlayCity.com 2017-10-28 22:26 - 2017-07-09 18:00 - 000000000 ____D C:\WINDOWS\SysWOW64\PolicyDefinitions 2017-10-28 22:26 - 2017-07-09 18:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot Anti-Beacon 2017-10-28 22:26 - 2017-06-16 10:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SysGauge 2017-10-28 22:26 - 2017-06-16 09:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Chrono 2017-10-28 22:26 - 2017-05-13 17:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 2017-10-28 22:26 - 2017-04-28 16:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2017 2017-10-28 22:26 - 2017-04-19 13:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 10 2017-10-28 22:26 - 2017-04-07 17:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gentibus CD 2017-10-28 22:26 - 2017-04-07 14:59 - 000000000 ____D C:\Program Files\Intel 2017-10-28 22:26 - 2017-04-02 13:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SSD Fresh 2017-10-28 22:26 - 2017-03-28 09:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2017-10-28 22:26 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-10-28 22:26 - 2017-03-16 17:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack 2017-10-28 22:26 - 2017-03-15 13:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2017-10-28 22:26 - 2017-03-13 13:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2017-10-28 22:26 - 2017-03-09 17:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-10-28 22:26 - 2017-03-03 17:15 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2017-10-28 22:26 - 2017-03-03 17:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech 2017-10-28 22:26 - 2017-03-03 14:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-10-28 22:26 - 2017-03-02 18:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UCheck 2017-10-28 22:26 - 2017-02-24 12:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-10-28 22:26 - 2017-02-23 18:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack 2017-10-28 22:26 - 2017-02-23 17:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware 2017-10-28 22:26 - 2017-02-23 16:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download 2017-10-28 22:26 - 2017-02-23 13:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware 2017-10-28 22:26 - 2017-02-23 13:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2017-10-28 22:26 - 2017-02-23 13:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2017-10-28 22:26 - 2017-01-16 16:05 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles 2017-10-28 22:26 - 2016-03-24 13:05 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-10-28 22:26 - 2015-10-30 19:19 - 000000000 ____D C:\WINDOWS\ShellNew 2017-10-28 22:22 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\OCR 2017-10-28 22:22 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB 2017-10-28 22:22 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-10-28 22:22 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\en-GB 2017-10-28 22:22 - 2017-08-18 08:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics 2017-10-28 22:22 - 2017-05-09 12:19 - 000000000 ____D C:\WINDOWS\system32\Intel 2017-10-28 22:22 - 2017-04-29 11:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com 2017-10-28 22:22 - 2017-04-12 19:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX 2017-10-28 22:22 - 2017-04-07 14:59 - 000000000 ____D C:\Program Files\Realtek 2017-10-28 22:22 - 2017-03-19 12:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS 2017-10-28 22:22 - 2017-02-28 19:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits 2017-10-28 22:22 - 2017-02-28 16:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue 2017-10-28 22:22 - 2017-01-16 16:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICEpower 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\zu-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\yo-NG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\xh-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\wo-SN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\vi-VN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ur-PK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ug-CN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tt-RU 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tn-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tk-TM 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ti-ET 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\te-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ta-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sw-KE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sq-AL 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\si-LK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\rw-RW 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\quz-PE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\prs-AF 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\pa-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\or-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\nso-ZA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\nn-NO 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ne-NP 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mt-MT 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mr-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mn-MN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ml-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mk-MK 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\mi-NZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\lo-LA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\lb-LU 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ky-KG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\kok-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\kn-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\km-KH 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\kk-KZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ka-GE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\is-IS 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ig-NG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\id-ID 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\hy-AM 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\gu-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\gd-GB 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ga-IE 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\fil-PH 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\fa-IR 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\cy-GB 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\bn-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\bn-BD 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\be-BY 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\as-IN 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\am-ET 2017-10-28 22:20 - 2017-09-30 15:41 - 000000000 ____D C:\WINDOWS\system32\af-ZA 2017-10-28 22:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser 2017-10-28 22:19 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-10-28 22:19 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\MUI 2017-10-28 21:56 - 2017-09-22 09:18 - 000002447 _____ C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-10-28 21:56 - 2017-02-22 17:35 - 000000000 ___RD C:\Users\Rouil\OneDrive 2017-10-28 21:53 - 2017-01-16 15:55 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-10-28 21:48 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt 2017-10-28 21:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration 2017-10-28 21:46 - 2017-02-22 18:24 - 000023208 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-10-28 21:46 - 2017-01-16 16:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek 2017-10-28 21:34 - 2017-03-03 17:15 - 001896264 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2017-10-28 21:32 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate 2017-10-28 21:31 - 2017-03-20 13:23 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2017-10-28 21:31 - 2017-03-08 15:49 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2017-10-28 21:30 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-10-28 21:30 - 2017-09-25 11:38 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Howard 2017-10-28 21:30 - 2017-05-13 17:44 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 2017-10-28 21:30 - 2017-05-13 17:41 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\m4ng_v5 2017-10-28 21:30 - 2017-04-19 13:34 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DVDFab 10 2017-10-28 21:30 - 2017-03-09 17:31 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-10-28 21:30 - 2017-02-25 09:38 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS 2017-10-28 21:29 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2017-10-28 21:29 - 2017-04-07 14:59 - 000000000 ____D C:\WINDOWS\SysWOW64\sda 2017-10-28 21:29 - 2017-04-07 14:59 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-10-28 21:29 - 2017-04-07 14:59 - 000000000 ____D C:\WINDOWS\system32\DAX3 2017-10-28 21:29 - 2017-04-07 14:59 - 000000000 ____D C:\WINDOWS\system32\DAX2 2017-10-28 21:29 - 2017-04-07 14:59 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-10-28 20:03 - 2017-02-22 17:34 - 000000000 ____D C:\Windows10Upgrade 2017-10-27 18:04 - 2017-04-17 19:06 - 000000000 ____D C:\Users\Rouil\.fontconfig 2017-10-26 11:24 - 2017-03-01 13:26 - 000000000 ____D C:\AdwCleaner 2017-10-26 11:13 - 2017-02-23 17:29 - 000002032 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk 2017-10-25 19:06 - 2017-08-17 19:44 - 000000000 ____D C:\Program Files\RogueKiller 2017-10-23 18:02 - 2016-03-24 13:04 - 000000000 ____D C:\Program Files (x86)\ASUS 2017-10-22 19:54 - 2017-08-17 19:44 - 000000000 ____D C:\ProgramData\RogueKiller 2017-10-22 19:54 - 2017-03-16 17:19 - 000000000 ____D C:\Program Files (x86)\K-Lite Codec Pack 2017-10-22 19:54 - 2017-02-27 20:21 - 000000000 ____D C:\ProgramData\SUPPORTDIR 2017-10-22 19:54 - 2017-02-23 17:29 - 000000000 ____D C:\Program Files\SUPERAntiSpyware 2017-10-21 11:50 - 2017-04-19 13:34 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\DVDFab10 2017-10-21 11:34 - 2017-04-19 13:34 - 000001953 _____ C:\Users\Rouil\Desktop\DVDFab 10.lnk 2017-10-19 23:29 - 2017-02-28 12:40 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Cyberlink 2017-10-19 23:28 - 2017-03-03 18:59 - 000000000 ____D C:\Program Files (x86)\NSIS Uninstall Information 2017-10-19 23:28 - 2017-02-27 20:21 - 000000000 ____D C:\ProgramData\CyberLink 2017-10-19 23:28 - 2017-01-16 16:02 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-10-19 23:26 - 2017-02-28 16:23 - 000000000 ____D C:\Program Files\Cyberlink 2017-10-19 23:25 - 2017-02-27 20:21 - 000000000 ____D C:\ProgramData\install_clap 2017-10-19 23:25 - 2017-02-27 20:21 - 000000000 ____D C:\ProgramData\install_backup 2017-10-18 13:43 - 2017-06-25 12:23 - 000000000 __RHD C:\ESD 2017-10-17 15:58 - 2017-02-23 13:31 - 000000000 ____D C:\ProgramData\Adobe 2017-10-17 15:58 - 2017-02-23 13:31 - 000000000 ____D C:\Program Files (x86)\Adobe 2017-10-17 15:58 - 2017-02-22 17:33 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Adobe 2017-10-16 16:34 - 2017-03-02 18:23 - 000000000 ____D C:\Program Files\UCheck 2017-10-16 10:11 - 2017-04-07 18:04 - 000001113 _____ C:\Users\Rouil\Desktop\Gentibus CD.lnk 2017-10-15 13:22 - 2017-03-08 15:49 - 000000000 ____D C:\Program Files\Unlocker 2017-10-14 19:07 - 2017-09-30 18:55 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant 2017-10-12 11:43 - 2017-02-23 12:47 - 000000000 ____D C:\Users\Rouil\AppData\LocalLow\Mozilla 2017-10-12 11:39 - 2017-02-23 12:46 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Mozilla 2017-10-11 16:45 - 2017-02-23 12:32 - 000000000 ____D C:\WINDOWS\system32\MRT 2017-10-11 16:40 - 2017-02-23 12:32 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-10-11 10:28 - 2017-07-05 10:09 - 000000000 ____D C:\ProgramData\AomeiBR 2017-10-10 10:58 - 2017-05-13 18:37 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\m4ng 2017-10-10 10:56 - 2017-04-19 13:34 - 000000000 ____D C:\Program Files (x86)\DVDFab 10 2017-10-08 23:33 - 2017-09-01 13:05 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-10-08 10:44 - 2017-03-03 17:08 - 000000000 ____D C:\ProgramData\Logishrd 2017-10-08 10:44 - 2017-03-03 17:08 - 000000000 ____D C:\Program Files\Logitech 2017-10-07 12:57 - 2017-04-18 10:41 - 000000000 ____D C:\ProgramData\Dumps 2017-10-07 12:56 - 2017-02-23 13:01 - 000000000 ____D C:\ProgramData\Bitdefender 2017-10-05 23:40 - 2017-03-06 13:25 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\Sun 2017-10-05 23:40 - 2017-03-06 13:25 - 000000000 ____D C:\Users\Rouil\AppData\LocalLow\Sun 2017-10-05 18:49 - 2017-02-23 12:50 - 000544424 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-10-05 14:47 - 2017-06-24 19:49 - 000006239 _____ C:\WINDOWS\system32\Drivers\etc\hosts_bak_148 2017-10-05 08:46 - 2017-02-23 13:20 - 000001305 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2017-10-04 19:36 - 2017-09-24 09:31 - 000000000 ____D C:\ProgramData\WRData 2017-10-01 11:38 - 2017-03-13 13:02 - 000000000 ____D C:\Users\Rouil\AppData\Roaming\vlc ==================== Fichiers à la racine de certains dossiers ======= 2017-04-19 13:34 - 2017-04-19 13:34 - 000000087 _____ () C:\Users\Rouil\AppData\Roaming\1de0de73-de3e-46c6-81b0-f6455f081644 2017-03-19 17:43 - 2017-10-31 17:23 - 000000165 _____ () C:\Users\Rouil\AppData\Roaming\sp_data.sys 2017-02-23 12:55 - 2017-02-23 12:55 - 000045980 _____ () C:\ProgramData\agent.1487850951.bdinstall.bin 2017-02-23 13:04 - 2017-02-23 13:04 - 000028753 _____ () C:\ProgramData\agent.1487851493.bdinstall.bin 2017-06-07 07:14 - 2017-06-07 07:14 - 000030967 _____ () C:\ProgramData\agent.update.1496816044.bdinstall.bin 2017-04-22 13:49 - 2017-04-22 13:49 - 000005085 _____ () C:\ProgramData\cgbpfizu.hkv 2017-02-23 13:04 - 2017-02-23 13:04 - 000382586 _____ () C:\ProgramData\cl.1487851301.bdinstall.bin 2017-02-23 13:04 - 2017-02-23 13:04 - 000056820 _____ () C:\ProgramData\dm.1487851453.bdinstall.bin 2017-09-18 12:20 - 2017-09-18 12:20 - 000043983 _____ () C:\ProgramData\dm.update.1505733568.bdinstall.bin 2017-04-07 14:59 - 2017-04-07 14:59 - 000000000 _____ () C:\ProgramData\DP45977C.lfl 2017-04-17 10:15 - 2017-04-17 10:15 - 000005051 _____ () C:\ProgramData\kjiixkes.ghp 2017-10-11 18:50 - 2017-10-11 18:50 - 000000016 _____ () C:\ProgramData\mntemp 2017-10-27 18:10 - 2017-10-27 18:10 - 000005111 _____ () C:\ProgramData\nyuhbnxq.dbn 2017-10-27 18:00 - 2017-10-27 18:00 - 000004913 _____ () C:\ProgramData\vfiakfjk.zeu ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-10-28 21:28 ==================== Fin de FRST.txt ============================