Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 26-11-2017 01 Exécuté par Sylvain (administrateur) sur DESKTOP-LFF28KE (27-11-2017 09:15:06) Exécuté depuis C:\Users\Sylvain\Desktop Profils chargés: Sylvain (Profils disponibles: defaultuser0 & Sylvain & sylco & Administrateur) Platform: Windows 10 Pro Version 1709 16299.64 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\atgh4627.inf_amd64_1a9e52b1bbedf409\IntelCpHeciSvc.exe (Microsoft Corporation) C:\Windows\System32\SurfaceService.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (f.lux Software LLC) C:\Users\Sylvain\AppData\Local\FluxSoftware\Flux\flux.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3567928 2017-11-13] (Dropbox, Inc.) HKU\S-1-5-21-21922238-3890776397-1398730977-1001\...\Run: [f.lux] => C:\Users\Sylvain\AppData\Local\FluxSoftware\Flux\flux.exe [1678840 2017-10-10] (f.lux Software LLC) HKU\S-1-5-21-21922238-3890776397-1398730977-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9856176 2017-09-20] (Piriform Ltd) HKU\S-1-5-21-21922238-3890776397-1398730977-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3102496 2017-10-31] (Valve Corporation) HKU\S-1-5-21-21922238-3890776397-1398730977-1001\...\MountPoints2: {9b982581-29a3-11e7-b595-985fd3ec43d5} - "D:\HiSuiteDownLoader.exe" HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe [404016 2017-10-25] (Microsoft Corporation) Startup: C:\Users\sylco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2017-09-30] ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) Startup: C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2017-03-31] ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{b54e6677-d758-473c-8d63-f034dbebc7d2}: [DhcpNameServer] 192.168.43.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-11-18] (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2017-09-20] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-08] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-08] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-08] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-11-08] (Microsoft Corporation) FireFox: ======== FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-10-20] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.) Chrome: ======= CHR StartupUrls: Default -> "hxxps://www.ecosia.org/?ref=icon-search" CHR NewTab: Default -> Not-active:"chrome-extension://eedlgdlajadkbbjoobobefphmfkcchfk/newtab.html" CHR DefaultSearchURL: Default -> hxxps://www.ecosia.org/search?q={searchTerms}&addon=chrome&addonversion=2.0.3 CHR DefaultSearchKeyword: Default -> ecosia CHR DefaultSuggestURL: Default -> hxxps://ac.ecosia.org/?q={searchTerms}&type=list&mkt=fr CHR Profile: C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default [2017-11-27] CHR Extension: (Slides) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13] CHR Extension: (Docs) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13] CHR Extension: (Google Drive) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-24] CHR Extension: (YouTube) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-24] CHR Extension: (Adblock Plus) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-26] CHR Extension: (Ecosia) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2017-10-18] CHR Extension: (Sheets) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13] CHR Extension: (Google Docs hors connexion) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-24] CHR Extension: (Kindle Cloud Reader) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlnambgcbojdeagknjljhiafpjaiacad [2017-10-21] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22] CHR Extension: (Checker Plus for Gmail™) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-11-15] CHR Extension: (Evernote Web Clipper) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2017-10-27] CHR Extension: (Gmail) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-24] CHR Extension: (Chrome Media Router) - C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-16] CHR Profile: C:\Users\Sylvain\AppData\Local\Google\Chrome\User Data\System Profile [2017-11-10] ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8063656 2017-11-02] (Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-05] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-08-05] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51016 2017-11-13] (Dropbox, Inc.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4297920 2017-09-30] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R3 iactrllogic; C:\WINDOWS\System32\drivers\iactrllogic64.sys [183184 2017-10-11] (Intel(R) Corporation) R1 MpKsl69cafa0f; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{11AAF476-090A-44BA-BCD7-EB2581E3C3E7}\MpKsl69cafa0f.sys [58120 2017-11-26] (Microsoft Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-11-27 09:15 - 2017-11-27 09:15 - 000012530 _____ C:\Users\Sylvain\Desktop\FRST.txt 2017-11-27 09:14 - 2017-11-27 09:15 - 000000000 ____D C:\FRST 2017-11-27 09:11 - 2017-11-27 09:11 - 002391552 _____ (Farbar) C:\Users\Sylvain\Desktop\FRST64.exe 2017-11-27 04:43 - 2017-11-27 04:43 - 000000000 ____D C:\Users\Sylvain\Documents\www 2017-11-26 11:58 - 2017-11-26 11:58 - 000000000 ____D C:\WINDOWS\Panther 2017-11-26 10:23 - 2017-11-26 10:23 - 000002640 _____ C:\Users\Public\Desktop\Skype.lnk 2017-11-26 10:23 - 2017-11-26 10:23 - 000000000 ___RD C:\Program Files (x86)\Skype 2017-11-26 10:23 - 2017-11-26 10:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2017-11-25 06:37 - 2017-11-25 06:42 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\PhotoFiltre 7 2017-11-25 06:37 - 2017-11-25 06:37 - 000001141 _____ C:\Users\Sylvain\Desktop\PhotoFiltre 7.lnk 2017-11-25 06:37 - 2017-11-25 06:37 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 2017-11-25 06:37 - 2017-11-25 06:37 - 000000000 ____D C:\Program Files (x86)\PhotoFiltre 7 2017-11-25 06:36 - 2017-11-25 06:37 - 005202180 _____ C:\Users\Sylvain\Downloads\pf7-setup-fr-7.2.1.exe 2017-11-24 16:26 - 2017-11-24 16:28 - 000000000 ____D C:\Users\Sylvain\AppData\Local\Adobe 2017-11-24 16:26 - 2017-11-24 16:26 - 001917904 _____ (Adobe Systems Incorporated) C:\Users\Sylvain\Downloads\Photoshop_Set-Up.exe 2017-11-24 15:37 - 2017-11-24 15:37 - 000000000 ____D C:\Users\Sylvain\AppData\Local\CrashDumps 2017-11-24 10:52 - 2017-11-24 10:52 - 000139367 _____ C:\Users\Sylvain\Desktop\ZHPDiag.txt 2017-11-24 10:49 - 2017-11-24 10:51 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\ZHP 2017-11-24 10:49 - 2017-11-24 10:50 - 000000000 ____D C:\Users\Sylvain\AppData\Local\ZHP 2017-11-24 10:49 - 2017-11-24 10:49 - 000000877 _____ C:\Users\Sylvain\Desktop\ZHPDiag.lnk 2017-11-24 10:48 - 2017-11-24 10:49 - 002931584 _____ C:\Users\Sylvain\Downloads\ZHPDiag3.exe 2017-11-23 18:07 - 2017-11-23 18:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-21922238-3890776397-1398730977-1001 2017-11-23 08:54 - 2017-11-23 09:00 - 000000000 ____D C:\Users\Sylvain\Documents\Audio séduction 2017-11-20 05:07 - 2017-11-20 05:07 - 000001286 _____ C:\Users\Sylvain\Desktop\FileZilla.lnk 2017-11-20 04:58 - 2017-11-27 07:18 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\FileZilla 2017-11-20 04:58 - 2017-11-27 04:44 - 000000000 ____D C:\Users\Sylvain\AppData\Local\FileZilla 2017-11-20 04:58 - 2017-11-20 04:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2017-11-20 04:58 - 2017-11-20 04:58 - 000000000 ____D C:\Program Files (x86)\FileZilla FTP Client 2017-11-20 04:57 - 2017-11-20 04:57 - 008605464 _____ (Tim Kosse) C:\Users\Sylvain\Downloads\FileZilla_3.29.0_win32-setup_bundled.exe 2017-11-18 11:30 - 2017-11-26 18:00 - 000000000 ____D C:\Program Files (x86)\Steam 2017-11-18 11:30 - 2017-11-18 11:30 - 001446792 _____ C:\Users\Sylvain\Downloads\SteamSetup (1).exe 2017-11-18 11:30 - 2017-11-18 11:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2017-11-16 13:49 - 2017-10-11 07:35 - 000003210 _____ C:\Users\Sylvain\Downloads\wp-config.php 2017-11-16 11:43 - 2017-11-16 11:23 - 000003581 _____ C:\Users\Sylvain\Downloads\wp-config-sample.php 2017-11-16 11:19 - 2017-11-16 11:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberduck 2017-11-16 11:18 - 2017-11-16 11:19 - 000000000 ____D C:\Program Files (x86)\Cyberduck 2017-11-16 11:18 - 2017-11-16 11:18 - 047697824 _____ (iterate GmbH) C:\Users\Sylvain\Downloads\Cyberduck-Installer-6.3.0.27105.exe 2017-11-16 05:34 - 2017-11-16 05:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-11-15 07:40 - 2017-10-25 10:11 - 017083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2017-11-15 07:40 - 2017-10-25 10:11 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll 2017-11-15 07:40 - 2017-10-25 10:09 - 021753344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2017-11-15 07:40 - 2017-10-25 09:57 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe 2017-11-15 07:40 - 2017-10-25 09:57 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2017-11-15 07:40 - 2017-10-25 09:56 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll 2017-11-15 07:40 - 2017-10-25 07:36 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2017-11-15 07:40 - 2017-10-25 05:41 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe 2017-11-15 07:40 - 2017-10-25 05:40 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2017-11-15 07:40 - 2017-10-25 05:40 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-11-15 07:40 - 2017-10-25 05:40 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll 2017-11-15 07:40 - 2017-10-25 05:39 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2017-11-15 07:40 - 2017-10-25 05:39 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll 2017-11-15 07:40 - 2017-10-25 05:39 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-11-15 07:40 - 2017-10-25 05:37 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2017-11-15 07:40 - 2017-10-25 05:37 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-11-15 07:40 - 2017-10-25 05:36 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-11-15 07:40 - 2017-10-25 05:36 - 002400664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2017-11-15 07:40 - 2017-10-25 05:36 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-11-15 07:40 - 2017-10-25 05:34 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-11-15 07:40 - 2017-10-25 05:34 - 000839928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll 2017-11-15 07:40 - 2017-10-25 05:34 - 000710920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2017-11-15 07:40 - 2017-10-25 05:32 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-11-15 07:40 - 2017-10-25 05:32 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2017-11-15 07:40 - 2017-10-25 05:31 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2017-11-15 07:40 - 2017-10-25 05:31 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2017-11-15 07:40 - 2017-10-25 05:30 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-11-15 07:40 - 2017-10-25 05:30 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2017-11-15 07:40 - 2017-10-25 05:29 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2017-11-15 07:40 - 2017-10-25 05:29 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-11-15 07:40 - 2017-10-25 05:29 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2017-11-15 07:40 - 2017-10-25 05:28 - 001170008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-11-15 07:40 - 2017-10-25 05:27 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-11-15 07:40 - 2017-10-25 05:27 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-11-15 07:40 - 2017-10-25 05:27 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-11-15 07:40 - 2017-10-25 05:27 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe 2017-11-15 07:40 - 2017-10-25 05:24 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2017-11-15 07:40 - 2017-10-25 05:20 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-11-15 07:40 - 2017-10-25 04:52 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2017-11-15 07:40 - 2017-10-25 04:50 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2017-11-15 07:40 - 2017-10-25 04:36 - 025246208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-11-15 07:40 - 2017-10-25 04:30 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2017-11-15 07:40 - 2017-10-25 04:30 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll 2017-11-15 07:40 - 2017-10-25 04:28 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-11-15 07:40 - 2017-10-25 04:28 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2017-11-15 07:40 - 2017-10-25 04:28 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-11-15 07:40 - 2017-10-25 04:27 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2017-11-15 07:40 - 2017-10-25 04:27 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-11-15 07:40 - 2017-10-25 04:27 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-11-15 07:40 - 2017-10-25 04:24 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll 2017-11-15 07:40 - 2017-10-25 04:22 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-11-15 07:40 - 2017-10-25 04:22 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-11-15 07:40 - 2017-10-25 04:19 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-11-15 07:40 - 2017-10-25 04:19 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe 2017-11-15 07:40 - 2017-10-25 04:18 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll 2017-11-15 07:40 - 2017-10-25 04:18 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll 2017-11-15 07:40 - 2017-10-25 04:18 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll 2017-11-15 07:40 - 2017-10-25 04:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2017-11-15 07:40 - 2017-10-25 04:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll 2017-11-15 07:40 - 2017-10-25 04:18 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll 2017-11-15 07:40 - 2017-10-25 04:16 - 023658496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-11-15 07:40 - 2017-10-25 04:16 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll 2017-11-15 07:40 - 2017-10-25 04:16 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys 2017-11-15 07:40 - 2017-10-25 04:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-11-15 07:40 - 2017-10-25 04:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-11-15 07:40 - 2017-10-25 04:14 - 000541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2017-11-15 07:40 - 2017-10-25 04:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe 2017-11-15 07:40 - 2017-10-25 04:13 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2017-11-15 07:40 - 2017-10-25 04:13 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2017-11-15 07:40 - 2017-10-25 04:12 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2017-11-15 07:40 - 2017-10-25 04:12 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-11-15 07:40 - 2017-10-25 04:12 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-11-15 07:40 - 2017-10-25 04:12 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2017-11-15 07:40 - 2017-10-25 04:11 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll 2017-11-15 07:40 - 2017-10-25 04:10 - 008099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-11-15 07:40 - 2017-10-25 04:10 - 004742144 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-11-15 07:40 - 2017-10-25 04:10 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2017-11-15 07:40 - 2017-10-25 04:09 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2017-11-15 07:40 - 2017-10-25 04:09 - 002106368 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-11-15 07:40 - 2017-10-25 04:09 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2017-11-15 07:40 - 2017-10-25 04:09 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2017-11-15 07:40 - 2017-10-25 04:08 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-11-15 07:40 - 2017-10-25 04:08 - 002781696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-11-15 07:40 - 2017-10-25 04:08 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2017-11-15 07:40 - 2017-10-25 04:08 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll 2017-11-15 07:40 - 2017-10-25 04:08 - 001667584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2017-11-15 07:40 - 2017-10-25 04:08 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2017-11-15 07:40 - 2017-10-25 04:08 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll 2017-11-15 07:40 - 2017-10-25 04:08 - 000465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-11-15 07:40 - 2017-10-25 04:07 - 018914304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-11-15 07:40 - 2017-10-25 04:07 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2017-11-15 07:40 - 2017-10-25 04:07 - 001485824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-11-15 07:40 - 2017-10-25 04:07 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-11-15 07:40 - 2017-10-25 04:07 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll 2017-11-15 07:40 - 2017-10-25 04:07 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll 2017-11-15 07:40 - 2017-10-25 04:06 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-11-15 07:40 - 2017-10-25 04:05 - 019339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-11-15 07:40 - 2017-10-25 04:05 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-11-15 07:40 - 2017-10-25 04:04 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys 2017-11-15 07:40 - 2017-10-25 04:04 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe 2017-11-15 07:40 - 2017-10-25 04:03 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll 2017-11-15 07:40 - 2017-10-25 04:02 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll 2017-11-15 07:40 - 2017-10-25 04:01 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2017-11-15 07:40 - 2017-10-25 04:01 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-11-15 07:40 - 2017-10-25 03:59 - 003679232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-11-15 07:40 - 2017-10-25 03:59 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2017-11-15 07:40 - 2017-10-25 03:58 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2017-11-15 07:40 - 2017-10-25 03:58 - 001322496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2017-11-15 07:40 - 2017-10-25 03:58 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2017-11-15 07:40 - 2017-10-25 03:57 - 006035968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-11-15 07:40 - 2017-10-25 03:55 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2017-11-15 07:40 - 2017-10-21 13:25 - 003313968 _____ C:\WINDOWS\system32\Windows.Mirage.dll 2017-11-15 07:40 - 2017-10-20 15:17 - 002474584 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2017-11-15 07:40 - 2017-10-20 06:08 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2017-11-15 07:39 - 2017-10-25 04:05 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll 2017-11-15 07:39 - 2017-10-25 03:54 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll 2017-11-15 07:14 - 2017-11-15 13:25 - 000000000 ____D C:\WINDOWS\Minidump 2017-11-15 07:12 - 2017-11-15 07:12 - 000000000 ____D C:\Program Files\Bonjour 2017-11-15 07:12 - 2017-11-15 07:12 - 000000000 ____D C:\Program Files (x86)\Bonjour 2017-11-15 07:08 - 2017-11-15 07:08 - 051501552 _____ (iterate GmbH) C:\Users\Sylvain\Downloads\Cyberduck-Installer-5.3.3.23221.exe 2017-11-15 06:02 - 2017-11-20 05:03 - 000000000 ____D C:\Users\Sylvain\Documents\wordpress-4.8.3-fr_FR 2017-11-13 11:26 - 2017-11-13 11:26 - 000051016 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2017-11-13 11:26 - 2017-11-13 11:26 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2017-11-13 11:26 - 2017-11-13 11:26 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2017-11-13 11:26 - 2017-11-13 11:26 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2017-11-09 18:50 - 2017-11-09 18:50 - 000000000 ____D C:\Users\sylco\AppData\Local\Steam 2017-11-09 18:50 - 2017-11-09 18:50 - 000000000 ____D C:\Users\sylco\AppData\Local\CEF 2017-11-09 18:43 - 2017-11-09 18:43 - 000000000 ___HD C:\Users\sylco\MicrosoftEdgeBackups 2017-11-09 18:43 - 2017-11-09 18:43 - 000000000 ____D C:\Users\sylco\AppData\Local\MicrosoftEdge 2017-11-09 18:34 - 2017-11-09 18:35 - 001446792 _____ C:\Users\sylco\Downloads\SteamSetup.exe 2017-11-09 18:22 - 2017-11-09 18:22 - 000000000 ___RD C:\Users\sylco\3D Objects 2017-11-09 18:21 - 2017-11-09 18:21 - 000000020 ___SH C:\Users\sylco\ntuser.ini 2017-11-07 14:21 - 2017-11-07 14:21 - 000000000 ____D C:\WINDOWS\system32\appmgmt 2017-11-03 17:46 - 2017-11-26 10:23 - 000000000 ____D C:\ProgramData\Skype 2017-11-03 17:46 - 2017-11-03 17:46 - 000000000 ____D C:\Users\Sylvain\Tracing 2017-11-03 17:44 - 2017-11-03 17:44 - 001632208 _____ (Skype Technologies S.A.) C:\Users\Sylvain\Downloads\SkypeSetup-7.40.0.103.exe 2017-11-03 17:04 - 2017-11-03 17:07 - 000000000 ____D C:\Users\Sylvain\Documents\Enregistrements audio 2017-11-02 14:53 - 2017-11-02 14:53 - 000000000 ____D C:\ProgramData\USOShared 2017-11-02 14:50 - 2017-11-02 14:50 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2017-11-02 14:49 - 2017-11-02 14:49 - 000000020 ___SH C:\Users\Sylvain\ntuser.ini 2017-11-02 14:49 - 2017-11-02 14:49 - 000000000 ___RD C:\Users\Sylvain\3D Objects 2017-11-02 14:49 - 2017-11-02 14:49 - 000000000 ___HD C:\Users\Sylvain\MicrosoftEdgeBackups 2017-11-02 14:47 - 2017-11-26 12:04 - 001953350 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-11-02 14:46 - 2017-11-26 11:58 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-11-02 14:46 - 2017-11-15 19:41 - 000003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-11-02 14:46 - 2017-11-15 19:41 - 000003462 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-11-02 14:46 - 2017-11-09 18:37 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-21922238-3890776397-1398730977-1002 2017-11-02 14:46 - 2017-11-02 14:52 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-21922238-3890776397-1398730977-1001 2017-11-02 14:46 - 2017-11-02 14:46 - 000019053 _____ C:\WINDOWS\diagwrn.xml 2017-11-02 14:46 - 2017-11-02 14:46 - 000019053 _____ C:\WINDOWS\diagerr.xml 2017-11-02 14:46 - 2017-11-02 14:46 - 000003734 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineUA 2017-11-02 14:46 - 2017-11-02 14:46 - 000003510 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskMachineCore 2017-11-02 14:46 - 2017-11-02 14:46 - 000002848 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-21922238-3890776397-1398730977-500 2017-11-02 14:46 - 2017-11-02 14:46 - 000002216 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2017-11-02 14:41 - 2017-11-02 14:41 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2017-11-02 14:40 - 2017-11-03 02:23 - 000000000 ____D C:\Users\Sylvain\AppData\Local\Packages 2017-11-02 14:40 - 2017-11-02 14:41 - 000000000 ____D C:\Users\Administrateur\AppData\Local\Packages 2017-11-02 14:40 - 2017-11-02 14:40 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages 2017-11-02 14:39 - 2017-11-15 19:45 - 000000000 ____D C:\Users\Sylvain 2017-11-02 14:39 - 2017-11-09 18:43 - 000000000 ____D C:\Users\sylco 2017-11-02 14:39 - 2017-11-09 18:38 - 000000000 ____D C:\Users\sylco\AppData\Local\Packages 2017-11-02 14:39 - 2017-11-02 14:45 - 000000000 ____D C:\Users\defaultuser0 2017-11-02 14:39 - 2017-11-02 14:45 - 000000000 ____D C:\Users\Administrateur 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Voisinage réseau 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Voisinage d'impression 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Modèles 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Mes documents 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Menu Démarrer 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Documents\Mes vidéos 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Documents\Mes images 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\Documents\Ma musique 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Sylvain\AppData\Local\Historique 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Voisinage réseau 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Voisinage d'impression 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Modèles 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Mes documents 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Menu Démarrer 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Documents\Mes vidéos 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Documents\Mes images 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\Documents\Ma musique 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\sylco\AppData\Local\Historique 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Voisinage réseau 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Voisinage d'impression 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Modèles 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Mes documents 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Menu Démarrer 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Mes vidéos 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Mes images 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Ma musique 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Local\Historique 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Voisinage réseau 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Voisinage d'impression 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Modèles 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Mes documents 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Menu Démarrer 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Documents\Mes vidéos 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Documents\Mes images 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\Documents\Ma musique 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2017-11-02 14:39 - 2017-11-02 14:39 - 000000000 _SHDL C:\Users\Administrateur\AppData\Local\Historique 2017-11-02 14:39 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-11-02 14:38 - 2017-07-20 19:21 - 000114304 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-11-02 14:37 - 2017-11-27 08:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-11-02 14:37 - 2017-11-16 17:39 - 000572400 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-11-02 14:36 - 2017-11-15 13:15 - 000000000 ____D C:\Windows.old 2017-11-01 10:52 - 2017-11-02 14:36 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate 2017-11-01 10:47 - 2017-11-01 10:52 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2017-11-01 10:44 - 2017-11-01 10:44 - 000262403 _____ C:\Users\Sylvain\Downloads\obpicnyESAW.jpeg 2017-11-01 10:44 - 2017-11-01 10:44 - 000000000 ____D C:\WINDOWS\containers 2017-11-01 10:43 - 2017-11-01 10:43 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2017-11-01 10:43 - 2017-11-01 10:43 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys 2017-11-01 10:43 - 2017-11-01 10:43 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 005906264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 002869248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001436432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 001200024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-11-01 10:42 - 2017-11-01 10:42 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-11-01 10:42 - 2017-11-01 10:42 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-11-01 10:42 - 2017-11-01 10:42 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-11-01 10:42 - 2017-11-01 10:42 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000464416 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000232344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-11-01 10:42 - 2017-11-01 10:42 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll 2017-11-01 10:42 - 2017-11-01 10:42 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll 2017-11-01 08:21 - 2017-11-01 08:21 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2017-11-01 07:02 - 2017-11-01 07:02 - 000000000 ____D C:\WINDOWS\system32\MpEngineStore ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-11-27 07:36 - 2017-10-27 08:45 - 000000000 ____D C:\Users\Sylvain\Documents\My Kindle Content 2017-11-27 04:45 - 2016-08-18 08:13 - 000000000 ____D C:\Users\Sylvain\Documents\Document 2017-11-26 14:50 - 2017-03-24 17:18 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\Skype 2017-11-26 12:06 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization 2017-11-26 12:04 - 2017-09-30 15:39 - 000892788 _____ C:\WINDOWS\system32\perfh00C.dat 2017-11-26 12:04 - 2017-09-30 15:39 - 000177438 _____ C:\WINDOWS\system32\perfc00C.dat 2017-11-26 11:58 - 2017-09-29 09:45 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2017-11-26 11:58 - 2017-04-24 10:35 - 000041448 _____ C:\WINDOWS\system32\OV5693_FRONT.aiqd 2017-11-26 09:12 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps 2017-11-26 09:12 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-11-26 00:27 - 2017-05-03 18:27 - 000000000 ____D C:\Users\Sylvain\AppData\Local\Wunderlist 2017-11-25 11:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2017-11-24 09:44 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF 2017-11-23 18:19 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF 2017-11-22 13:30 - 2017-09-12 16:28 - 000000000 ____D C:\Users\Sylvain\AppData\Local\EvernoteNW 2017-11-21 08:21 - 2017-03-25 19:17 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-11-18 13:43 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache 2017-11-18 08:01 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-11-18 07:59 - 2016-08-11 04:42 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2017-11-16 17:38 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-11-16 17:38 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput 2017-11-16 17:38 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-11-16 17:37 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12 2017-11-16 17:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-11-16 17:37 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser 2017-11-16 17:37 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism 2017-11-16 11:19 - 2016-08-11 04:41 - 000000000 ____D C:\ProgramData\Package Cache 2017-11-16 05:34 - 2017-08-05 18:51 - 000000000 ____D C:\Program Files (x86)\Dropbox 2017-11-15 07:44 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-11-14 05:55 - 2017-03-24 17:47 - 000002280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-11-14 05:55 - 2017-03-24 17:47 - 000002268 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-11-14 05:21 - 2017-10-27 08:45 - 000002312 _____ C:\Users\Sylvain\Desktop\Kindle.lnk 2017-11-10 08:45 - 2017-09-30 14:22 - 000000000 __RDL C:\Users\sylco\OneDrive 2017-11-09 18:38 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\PrintDialog 2017-11-09 18:37 - 2017-09-30 14:22 - 000002417 _____ C:\Users\sylco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-11-09 18:24 - 2017-09-30 14:20 - 000000000 ____D C:\Users\sylco\AppData\Local\ConnectedDevicesPlatform 2017-11-09 18:22 - 2016-08-11 05:11 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-11-04 11:46 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat 2017-11-04 02:25 - 2017-09-29 14:49 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-11-04 02:25 - 2017-09-29 14:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-11-03 17:39 - 2017-03-24 17:32 - 000000000 ____D C:\Users\Sylvain\AppData\Local\Comms 2017-11-03 02:08 - 2017-03-24 17:15 - 000000000 ____D C:\Users\Sylvain\AppData\Local\ConnectedDevicesPlatform 2017-11-02 14:52 - 2017-03-24 17:18 - 000002423 _____ C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-11-02 14:52 - 2017-03-24 17:18 - 000000000 ___RD C:\Users\Sylvain\OneDrive 2017-11-02 14:49 - 2017-03-24 17:15 - 000000000 ____D C:\Users\Sylvain\AppData\Local\TileDataLayer 2017-11-02 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate 2017-11-02 14:48 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt 2017-11-02 14:47 - 2017-09-29 09:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2017-11-02 14:46 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration 2017-11-02 14:46 - 2017-07-28 07:42 - 000023208 _____ C:\WINDOWS\system32\emptyregdb.dat 2017-11-02 14:43 - 2017-05-03 18:27 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wunderlist 2017-11-02 14:43 - 2017-03-25 19:13 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-11-02 14:41 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-11-02 14:40 - 2017-10-27 08:45 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2017-11-02 14:40 - 2017-10-20 06:11 - 000000000 ____D C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackmagic Design 2017-11-02 14:39 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2017-11-02 14:38 - 2017-07-28 07:33 - 000000000 ____D C:\WINDOWS\Firmware 2017-11-02 14:36 - 2017-10-13 06:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-11-02 14:36 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN 2017-11-02 14:36 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\system32\WCN 2017-11-02 14:36 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-11-02 14:36 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2017-11-02 14:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-11-02 14:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool 2017-11-02 14:36 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\IME 2017-11-02 14:36 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2017-11-02 14:36 - 2017-09-26 12:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote 2017-11-02 14:36 - 2017-05-28 13:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2017-11-02 14:36 - 2017-05-28 13:56 - 000000000 ____D C:\WINDOWS\SHELLNEW 2017-11-02 14:36 - 2017-04-13 06:56 - 000000000 ____D C:\Program Files\UNP 2017-11-02 14:36 - 2017-04-04 10:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.3 2017-11-02 14:36 - 2017-04-04 08:19 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3 2017-11-02 14:36 - 2017-03-26 11:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMind 2017-11-02 14:36 - 2017-03-26 09:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016 2017-11-02 14:36 - 2017-03-25 19:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-11-02 14:36 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-11-02 14:35 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup 2017-11-01 11:02 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries 2017-11-01 10:55 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2017-11-01 10:55 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\system32\winrm 2017-11-01 10:55 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\system32\slmgr 2017-11-01 10:55 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2017-11-01 10:55 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-11-01 10:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-11-01 10:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2017-11-01 10:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-11-01 10:55 - 2017-07-28 08:26 - 000000000 ____D C:\WINDOWS\system32\Intel 2017-11-01 10:55 - 2017-07-28 08:26 - 000000000 ____D C:\WINDOWS\system32\cAVS 2017-11-01 10:52 - 2017-10-20 06:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design 2017-11-01 10:52 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2017-11-01 10:52 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help 2017-11-01 10:52 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2017-11-01 10:52 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\system 2017-11-01 10:52 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-11-01 10:52 - 2017-07-28 07:33 - 000000000 ____D C:\Program Files\Intel 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\zu-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\yo-NG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\xh-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\wo-SN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\vi-VN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ur-PK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ug-CN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\tt-RU 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\tn-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\tk-TM 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ti-ET 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\te-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ta-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\sw-KE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\sq-AL 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\si-LK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\rw-RW 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\quz-PE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\prs-AF 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\pa-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\or-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\nso-ZA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\nn-NO 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ne-NP 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\mt-MT 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\mr-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\mn-MN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ml-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\mk-MK 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\mi-NZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\lo-LA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\lb-LU 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ky-KG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\kok-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\kn-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\km-KH 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\kk-KZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ka-GE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\is-IS 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ig-NG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\id-ID 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\hy-AM 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\gu-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\gd-GB 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ga-IE 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\fil-PH 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\fa-IR 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\cy-GB 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\bn-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\bn-BD 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\be-BY 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\as-IN 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\am-ET 2017-11-01 10:44 - 2017-09-30 15:40 - 000000000 ____D C:\WINDOWS\system32\af-ZA 2017-11-01 10:35 - 2017-09-30 15:41 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2017-11-01 10:35 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm 2017-11-01 10:35 - 2017-09-30 15:39 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr 2017-11-01 10:35 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\dsc 2017-11-01 10:35 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\migwiz 2017-11-01 10:35 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender 2017-11-01 10:35 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2017-11-01 10:35 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\servicing ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-11-23 09:15 ==================== Fin de FRST.txt ============================