Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 23-12-2017 01 Exécuté par amon (administrateur) sur DESKTOP-AS1JMF5 (24-12-2017 13:12:40) Exécuté depuis C:\Users\amon\Desktop Profils chargés: amon (Profils disponibles: amon) Platform: Windows 10 Pro Version 1703 15063.786 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Media Gobbler, Inc) C:\Program Files (x86)\Media Gobbler, Inc\Downstream Proxy\downstreamproxyservice.exe () C:\Windows\KMS-R@1n.exe (Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (TunnelBear) C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (Windscribe Limited) C:\Program Files (x86)\Windscribe\WindscribeService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Firebird Project) C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files\Intel\STCServ\STCServ.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSGPlusBTServer64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Media Gobbler, Inc) C:\Program Files (x86)\Media Gobbler, Inc\User Agent\GobblerTray.exe (Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe (Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Epic Privacy Browser) C:\Users\amon\AppData\Local\Epic Privacy Browser\Installer\EpicUpdate.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Intel® Corporation) C:\Program Files\Intel\ConnectCenter\bin\CCFManager.exe () C:\Users\amon\AppData\Roaming\bvhost\bvhost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11711.1001.5.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [SGDawNodeService] => C:\WINDOWS\SysWOW64\SGDawNodeService.exe [5586432 2016-09-14] (Waves Audio Ltd.) HKLM\...\Run: [IntelConnectCenter] => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9197568 2017-02-17] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1483264 2017-02-17] (Realtek Semiconductor) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [PCFIXTRAYBEAZJ] => c:\pcfiXtraygdxhd.lnk [2186 2016-05-19] () HKLM-x32\...\Run: [PCFIXTRAYLAOSJ] => c:\pcfiXtrayvljpb.lnk [2186 2016-05-19] () HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2404952 2017-03-27] (Adobe Systems Incorporated) HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-12] (Flexera Software LLC.) HKLM-x32\...\Run: [DNS7reminder] => "C:\Program Files (x86)\Nuance\NaturallySpeaking12\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\NaturallySpeaking12\Ereg.ini" HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime Alternative\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation) HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [700328 2017-01-06] (Autodesk, Inc.) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [] => [X] HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [GobblerTray] => C:\Program Files (x86)\Media Gobbler, Inc\User Agent\GobblerTray.exe [1026600 2016-11-29] (Media Gobbler, Inc) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2068856 2011-10-12] (Flexera Software LLC.) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9856176 2017-09-20] (Piriform Ltd) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [799368 2017-04-12] (Sandboxie Holdings, LLC) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [10601064 2017-05-09] (Windscribe Limited) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [IDM trial reset] => "C:\Users\amon\Desktop\idm_trial_reset.exe" /trial HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4035696 2017-10-03] (Tonec Inc.) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Run: [Epic Privacy Browser Installer] => C:\Users\amon\AppData\Local\Epic Privacy Browser\Installer\EpicUpdate.exe [509096 2017-06-30] (Epic Privacy Browser) HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\MountPoints2: {c781191c-564d-11e7-9c5b-3085a98cdae9} - "E:\Setup.exe" IFEO\OSppSvc.exe: [Debugger] KMS-R@1nHook.exe IFEO\SppExtComObj.exe: [Debugger] KMS-R@1nHook.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-11-20] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\amon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MingC.lnk [2017-11-21] ShortcutTarget: MingC.lnk -> C:\Users\amon\AppData\Roaming\MingC\MingC.vbs () GroupPolicy: Restriction - Chrome <==== ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\..\Interfaces\{35520fb6-7ccb-42e7-a5e5-94aae2ce9e38}: [DhcpNameServer] 89.2.0.1 89.2.0.2 Tcpip\..\Interfaces\{67061479-7bc4-402d-ba88-d57e717dc994}: [DhcpNameServer] 172.18.12.1 Internet Explorer: ================== SearchScopes: HKU\S-1-5-21-2806682115-773826143-903907544-1001 -> {018EDFCA-4DD0-4807-AB9C-8D410DEF9D3C} URL = hxxps://fr.search.yahoo.com/search?p={searchTerms}&intl=fr&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2017-09-22] (Internet Download Manager, Tonec Inc.) BHO: Pas de nom -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> Pas de fichier BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2017-09-22] (Internet Download Manager, Tonec Inc.) BHO-x32: Pas de nom -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> Pas de fichier BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-12-19] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-19] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-19] (Oracle Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-12-19] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: 9joqu1st.default FF ProfilePath: C:\Users\amon\AppData\Roaming\Mozilla\Firefox\Profiles\9joqu1st.default [2017-12-24] FF HKLM-x32\...\Firefox\Extensions: [jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack] - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi FF Extension: (Dragon NaturallySpeaking Rich Internet Application Support) - C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2012-08-14] [Legacy] [non signé] FF HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi FF Extension: (Pas de nom) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2017-10-06] FF HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\amon\AppData\Roaming\IDM\idmmzcc5 FF Extension: (IDM CC) - C:\Users\amon\AppData\Roaming\IDM\idmmzcc5 [2017-12-24] [Legacy] [non signé] FF HKU\S-1-5-21-2806682115-773826143-903907544-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26] [Legacy] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-14] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-12-19] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-03-27] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-14] () FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-19] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-19] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-12-19] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-11-14] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-11-14] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-23] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-12-23] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-03-27] (Adobe Systems) FF Plugin-x32: nuance.com/DragonRIAPlugin -> C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\npDgnRia.dll [2012-08-15] (Nuance Communications Inc.) FF Plugin HKU\.DEFAULT: @hola.org/FlashPlayer -> C:\Users\amon\AppData\Local\Hola\firefox_hola\app\flash\NPSWF32_18_0_0_232.dll [Pas de fichier] FF Plugin HKU\.DEFAULT: @hola.org/vlc -> C:\Users\amon\AppData\Local\Hola\firefox_hola\app\vlc\npvlc.dll [Pas de fichier] FF Plugin HKU\S-1-5-21-2806682115-773826143-903907544-1001: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=3 -> C:\Users\amon\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [2017-06-30] (Epic Privacy Browser) FF Plugin HKU\S-1-5-21-2806682115-773826143-903907544-1001: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=9 -> C:\Users\amon\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [2017-06-30] (Epic Privacy Browser) Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://www.google.fr/" CHR Profile: C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default [2017-12-24] CHR Extension: (Slides) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-24] CHR Extension: (Docs) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-24] CHR Extension: (Google Drive) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-12-24] CHR Extension: (Check-Weather for Chrome) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apfkjncelobloojfkbmendgmfgnfmbla [2017-12-24] CHR Extension: (Spotiload (former Spotify Vk Downloader)) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\baggnalhgbpeanbhedjlbndhjgmimmhl [2017-12-24] CHR Extension: (YouTube) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-12-24] CHR Extension: (uBlock Origin) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-12-24] CHR Extension: (All-in-One Office - New Tab) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgldcllfgcheelimlbmilnkilnamlhbd [2017-12-24] CHR Extension: (User-Agent Switcher for Chrome) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2017-12-24] CHR Extension: (Sheets) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-24] CHR Extension: (Stylish – Thèmes personnalisés pour sites Web) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2017-12-24] CHR Extension: (EditThisCookie) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-12-24] CHR Extension: (Bureau à distance Google Chrome) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-12-24] CHR Extension: (Google Docs hors connexion) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-12-24] CHR Extension: (Unlimited Free VPN - Hola) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2017-12-24] CHR Extension: (Save to Facebook) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfikkaogpplgnfjmbjdpalkhclendgd [2017-12-24] CHR Extension: (mobile browser emulator) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbofcampnkjmiomohpbaihdcbjhbfepf [2017-12-24] CHR Extension: (Chromie: Window and Tab Tools) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcgjgfcidldkpkanmdmedhpidpiegabg [2017-12-24] CHR Extension: (Extension AllDebrid ) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdjbgnpehbhpibonmjjjbjaoechnlcaf [2017-12-24] CHR Extension: (Ghostery) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-12-24] CHR Extension: (Service proxy et VPN Hotspot Shield gratuit - Déblocage de sites) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbejmccbhkncgokjcmghpfloaajcffj [2017-12-24] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-12-24] CHR Extension: (Buffer) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\noojglkidnpfjbincgijbaiedldjfbhh [2017-12-24] CHR Extension: (VPN SurfEasy - Sécurité, Confidentialité, Débloquage) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\odiddbcijempnhhobijfbggjogofdlgl [2017-12-24] CHR Extension: (Gmail) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-12-24] CHR Extension: (Chrome Media Router) - C:\Users\amon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-24] CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-10-06] Opera: ======= StartMenuInternet: (HKLM) Operadeveloper - C:\Program Files (x86)\Opera developer\Launcher.exe ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1290744 2017-01-06] (Autodesk Inc.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [771672 2017-03-14] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7760552 2017-12-07] (Microsoft Corporation) R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [249320 2017-02-17] (DTS, Inc) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Fichier non signé] R2 FirebirdGuardianDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [153600 2010-09-17] (Firebird Project) [Fichier non signé] R3 FirebirdServerDefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [5624320 2010-09-17] (Firebird Project) [Fichier non signé] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Fichier non signé] R2 gobblerproxy; C:\Program Files (x86)\Media Gobbler, Inc\Downstream Proxy\downstreamproxyservice.exe [15872 2016-11-29] (Media Gobbler, Inc) [Fichier non signé] R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26168 2015-12-20] (Hewlett-Packard Company) R2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [360736 2016-10-28] (IObit) R2 KMS-R@1n; C:\Windows\KMS-R@1n.exe [26112 2017-10-09] () [Fichier non signé] R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé] R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519288 2017-11-16] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-11-14] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [460920 2017-11-16] (NVIDIA Corporation) S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé] R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [197768 2017-04-12] (Sandboxie Holdings, LLC) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [3913064 2017-03-20] (Microsoft Corporation) R2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757040 2017-04-06] (TeamViewer GmbH) R2 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TBear.Maintenance.exe [38272 2016-12-16] (TunnelBear) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-06-20] (Microsoft Corporation) R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [71272 2017-05-09] (Windscribe Limited) S3 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.3.0.5\WsAppService.exe [415232 2016-08-09] (Wondershare) [Fichier non signé] ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R0 asstahci64; C:\WINDOWS\System32\drivers\asstahci64.sys [88936 2017-02-17] (Asmedia Technology) R3 AsusVBus; C:\WINDOWS\System32\drivers\AsusVBus.sys [39704 2016-11-03] (Windows (R) Win 7 DDK provider) R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [84472 2016-11-03] (ASUS Corporation) S3 cmudaxp; C:\WINDOWS\system32\drivers\cmudaxp.sys [1266688 2016-01-15] (C-Media Inc) R3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) R3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-04-16] (Disc Soft Ltd) S3 dtliteusbbus; C:\WINDOWS\system32\DRIVERS\dtliteusbbus.sys [47672 2017-04-16] (Disc Soft Ltd) R3 FocusriteUSB; C:\WINDOWS\System32\drivers\FocusriteUSB.sys [96456 2016-11-30] (Focusrite Audio Engineering Ltd.) R3 FocusriteUSBAudio; C:\WINDOWS\system32\drivers\FocusriteUSBAudio.sys [54472 2016-11-30] (Focusrite Audio Engineering Ltd.) R3 FocusriteUSBMidi; C:\WINDOWS\system32\drivers\FocusriteUSBMidi.sys [43208 2016-11-30] (Focusrite Audio Engineering Ltd.) R3 FocusriteUSBSwRoot; C:\WINDOWS\System32\drivers\FocusriteUSBSwRoot.sys [102088 2016-11-30] (Focusrite Audio Engineering Ltd.) R1 HWiNFO32; C:\WINDOWS\SysWoW64\drivers\HWiNFO64A.SYS [27552 2017-02-01] (REALiX(tm)) R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2017-12-23] (Malwarebytes) R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2016-03-16] (SoftEther Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_c791f781cd94491f\nvlddmkm.sys [16989296 2017-11-15] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30328 2017-11-16] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50808 2017-11-16] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57976 2017-11-14] (NVIDIA Corporation) S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2014-08-08] (The OpenVPN Project) [Fichier non signé] S3 pwdrvio; C:\WINDOWS\system32\pwdrvio.sys [19936 2010-04-09] () S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [13280 2010-04-09] () R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-05-26] (Realtek ) R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [206984 2017-04-12] (Sandboxie Holdings, LLC) S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] () R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2016-03-16] (SoftEther Corporation) S3 SoundGridMIDI; C:\WINDOWS\system32\drivers\SoundGridMidi.sys [41296 2016-09-14] (Waves Audio Ltd.) S3 SoundGridMIDI; C:\Windows\SysWOW64\drivers\SoundGridMidi.sys [21504 2016-09-14] (Waves Audio Ltd.) [Fichier non signé] R2 SoundGridProtocol; C:\WINDOWS\system32\DRIVERS\SoundGridProtocol.sys [112464 2016-09-14] (Waves Audio Ltd.) R2 SoundGridProtocol; C:\Windows\SysWOW64\DRIVERS\SoundGridProtocol.sys [55296 2016-09-14] (Waves Audio Ltd.) [Fichier non signé] S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S3 synusb64; C:\WINDOWS\System32\drivers\synusb64.sys [30352 2011-12-14] (Steinberg Media Technologies GmbH) R3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2016-10-17] (The OpenVPN Project) R3 tap0901_openvpn_accl; C:\WINDOWS\System32\drivers\tap0901_openvpn_accl.sys [37912 2016-04-03] (The OpenVPN Project) S3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2016-02-17] (Anchorfree Inc.) R3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2017-04-21] (The OpenVPN Project) R0 vsock; C:\WINDOWS\system32\DRIVERS\vsock.sys [91712 2017-09-05] (VMware, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) S3 WinRing0_1_2_0; \??\C:\Users\amon\AppData\Local\Temp\tmp6690.tmp [X] <==== ATTENTION ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-12-24 13:12 - 2017-12-24 13:12 - 000031584 _____ C:\Users\amon\Desktop\FRST.txt 2017-12-24 13:10 - 2017-12-24 13:12 - 000000000 ____D C:\FRST 2017-12-24 13:09 - 2017-12-24 13:09 - 002392064 _____ (Farbar) C:\Users\amon\Desktop\FRST64.exe 2017-12-24 12:58 - 2017-12-24 12:58 - 000291462 _____ C:\Users\amon\Desktop\ZHPDiag.txt 2017-12-24 12:44 - 2017-12-24 12:44 - 002955136 _____ C:\Users\amon\Downloads\ZHPDiag3.exe 2017-12-24 12:43 - 2017-12-24 12:54 - 000000871 _____ C:\Users\amon\Desktop\ZHPDiag.lnk 2017-12-24 12:42 - 2017-12-24 12:42 - 000000000 ____D C:\Users\amon\AppData\Local\ZHP 2017-12-24 10:00 - 2017-12-24 10:00 - 000000000 ____D C:\Users\amon\AppData\Roaming\Google 2017-12-24 09:52 - 2017-12-24 09:52 - 000002351 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-12-24 09:52 - 2017-12-24 09:52 - 000002339 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-12-24 09:51 - 2017-12-24 09:51 - 001129816 _____ (Google Inc.) C:\Users\amon\Downloads\ChromeSetup(1).exe 2017-12-23 21:00 - 2017-12-23 21:00 - 000000000 ____D C:\Users\amon\AppData\Local\CrashRpt 2017-12-23 16:55 - 2017-12-23 16:55 - 000004816 _____ C:\Users\amon\Desktop\i,,.txt 2017-12-23 16:43 - 2017-12-23 16:48 - 000003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-12-23 16:43 - 2017-12-23 16:48 - 000003462 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-12-23 16:42 - 2017-12-23 16:42 - 001622528 _____ C:\Users\amon\Downloads\ResetBrowser.exe 2017-12-23 16:37 - 2017-12-23 16:39 - 000000937 _____ C:\DelFix.txt 2017-12-23 16:19 - 2017-12-23 16:19 - 000000000 ____D C:\Users\amon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome 2017-12-23 16:15 - 2017-12-23 16:15 - 001129816 _____ (Google Inc.) C:\Users\amon\Downloads\ChromeSetup.exe 2017-12-23 15:54 - 2017-12-23 15:54 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2017-12-23 15:54 - 2017-12-23 15:54 - 000001927 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-12-23 15:54 - 2017-12-23 15:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-12-23 15:54 - 2017-11-29 09:11 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-12-23 15:52 - 2017-12-23 15:52 - 000000000 ____D C:\ProgramData\MB3CoreBackup 2017-12-23 15:50 - 2017-12-24 11:52 - 000000000 ____D C:\Users\amon\AppData\Roaming\bvhost 2017-12-23 15:38 - 2017-12-23 15:38 - 000571241 _____ ( ) C:\Users\amon\Downloads\SoundCloudAutomator_v3.0.3.0_Cracked.rar.exe 2017-12-23 15:37 - 2017-12-23 15:37 - 000002454 __RSH C:\ProgramData\ntuser.pol 2017-12-23 09:47 - 2017-12-23 09:47 - 000003034 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (amon) 2017-12-21 23:12 - 2017-12-21 23:12 - 000001180 _____ C:\Users\amon\Desktop\MTotalBundle.mlf 2017-12-21 21:42 - 2017-12-21 21:42 - 000000000 ____D C:\Users\amon\Documents\R2R 2017-12-21 21:31 - 2017-12-21 21:31 - 050609424 _____ C:\WINDOWS\MeldaProductionAudioPluginKernelV1164.dll 2017-12-21 21:31 - 2017-12-21 21:31 - 036506896 _____ C:\WINDOWS\MeldaProductionAudioPluginKernelV11.dll 2017-12-21 21:15 - 2017-12-21 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MeldaProduction 2017-12-21 21:15 - 2017-12-21 21:15 - 000000000 ____D C:\Program Files\MeldaProduction 2017-12-21 17:39 - 2017-12-21 21:31 - 000000000 ____D C:\Users\amon\AppData\Roaming\MeldaProduction 2017-12-21 17:39 - 2017-12-21 21:31 - 000000000 ____D C:\ProgramData\MeldaProduction 2017-12-21 17:38 - 2017-12-21 21:47 - 000000000 ____D C:\Users\amon\Desktop\R2R 2017-12-21 17:38 - 2017-11-21 07:28 - 000000000 ____D C:\Users\amon\Desktop\MeldaProduction.MAudioPlugins.v11.09.Incl.Patch.and.Keygen-R2R 2017-12-21 17:38 - 2017-11-21 00:00 - 206378544 _____ C:\Users\amon\Desktop\maudioplugins_11_09_setup.exe 2017-12-21 17:19 - 2017-12-21 17:19 - 189791692 _____ C:\Users\amon\Downloads\M-P WIN.rar 2017-12-20 22:56 - 2017-12-20 22:56 - 000000000 ____D C:\Users\amon\Downloads\Waves.Complete.2017.11.23.WiN 2017-12-20 22:53 - 2017-12-20 22:53 - 000280494 _____ C:\Users\amon\Downloads\Waves.Complete.2017.11.23.WiN.rar (1).torrent 2017-12-20 22:49 - 2017-12-20 22:50 - 000000000 ____D C:\Users\amon\Downloads\Waves.Complete.V9.Nov.14th.2017.MacOSX-iND 2017-12-20 22:49 - 2017-12-20 22:49 - 000016929 _____ C:\Users\amon\Downloads\12fe7b958cbee667bbf626df8efdee2a.torrent 2017-12-20 22:47 - 2017-12-20 22:47 - 000001218 _____ C:\Users\amon\Desktop\GTR 3.5.lnk 2017-12-20 22:46 - 2017-12-20 22:46 - 000001242 _____ C:\Users\amon\Desktop\Element App.lnk 2017-12-20 22:46 - 2017-12-20 22:46 - 000001230 _____ C:\Users\amon\Desktop\CODEX App.lnk 2017-12-20 22:11 - 2017-12-20 22:11 - 000013148 _____ C:\Users\amon\Downloads\0b75928592b99f530bd4e3aaf8868f0c.torrent 2017-12-20 22:09 - 2017-12-20 22:09 - 000178497 _____ C:\Users\amon\Downloads\Waves.Complete.v2016.12.07.Patched.and.Keygen-R2R (1).torrent 2017-12-20 21:59 - 2017-12-20 21:59 - 000000000 ____D C:\Users\amon\AppData\Local\Waves Audio 2017-12-20 21:59 - 2017-12-20 21:59 - 000000000 ____D C:\Users\amon\.Waves Central 2017-12-20 21:58 - 2017-12-20 21:58 - 000001317 _____ C:\Users\Public\Desktop\Waves Central.lnk 2017-12-20 21:58 - 2017-12-20 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves Central 2017-12-20 21:58 - 2017-12-20 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves 2017-12-20 21:58 - 2017-12-20 21:58 - 000000000 ____D C:\Program Files (x86)\Waves Central 2017-12-20 21:58 - 2015-10-24 02:49 - 002189312 _____ (Propellerhead Software AB) C:\WINDOWS\system32\ReWire.dll 2017-12-20 21:40 - 2017-12-20 21:40 - 000280494 _____ C:\Users\amon\Downloads\Waves.Complete.2017.11.23.WiN.rar.torrent 2017-12-20 16:30 - 2017-12-23 03:33 - 000000000 ___SD C:\Program Files (x86)\Waves 2017-12-20 16:21 - 2017-12-20 16:24 - 000000000 ____D C:\Users\amon\Downloads\Waves.Complete.v2016.12.07.Patched.and.Keygen-R2R 2017-12-20 16:21 - 2017-12-20 16:21 - 000178497 _____ C:\Users\amon\Downloads\Waves.Complete.v2016.12.07.Patched.and.Keygen-R2R.torrent 2017-12-19 10:58 - 2017-12-19 10:58 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2017-12-18 12:27 - 2017-12-18 12:27 - 000000000 ____D C:\Program Files\Common Files\Native Instruments 2017-12-18 12:27 - 2017-12-18 12:27 - 000000000 ____D C:\Program Files\Common Files\Digidesign 2017-12-17 21:32 - 2017-12-17 21:32 - 000000000 ____D C:\Users\amon\.QtWebEngineProcess 2017-12-17 21:31 - 2017-12-20 21:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default) 2017-12-15 21:19 - 2017-12-15 21:19 - 000001465 _____ C:\Users\Public\Desktop\Ozone 8 (64-bit).lnk 2017-12-15 21:19 - 2017-12-15 21:19 - 000001465 _____ C:\Users\Public\Desktop\Ozone 8 (32-bit).lnk 2017-12-15 21:15 - 2017-12-15 21:15 - 000000000 ____D C:\Program Files\Steinberg 2017-12-15 21:13 - 2017-12-15 21:13 - 684588478 _____ C:\Users\amon\Downloads\iZOA 8.zip 2017-12-15 19:34 - 2017-12-15 19:34 - 235881285 _____ C:\Users\amon\Downloads\iZ8.00, VST, VST3, AAX, RTAS, EXE x86 x64 (FiX, NO INSTALL, SymLink Installer).rar 2017-12-15 16:32 - 2017-12-15 16:32 - 092731755 _____ C:\Users\amon\Downloads\iZotope VocalSynth v1.00b Incl Emulator-R2R.rar 2017-12-15 16:30 - 2016-08-18 17:11 - 000011775 _____ C:\Users\amon\Desktop\iZotope - VocalSynth 1.00b VST, VST3, AAX x86 x64 (NO INSTALL, NO iLOK).txt 2017-12-15 16:30 - 2016-08-17 17:59 - 000000000 ____D C:\Users\amon\Desktop\C 2017-12-15 16:29 - 2017-12-15 16:29 - 039429446 _____ C:\Users\amon\Downloads\iZVS(NO INSTALL, NO iLOK).rar 2017-12-14 21:44 - 2017-11-30 04:04 - 000395310 __RSH C:\bootmgr 2017-12-14 21:44 - 2017-03-18 21:57 - 000000001 ___SH C:\BOOTNXT 2017-12-14 21:42 - 2017-12-14 21:42 - 000000000 ___SD C:\WINDOWS\UpdateAssistantV2 2017-12-14 13:35 - 2017-12-02 03:25 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-12-14 13:35 - 2017-12-02 03:25 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-12-14 13:29 - 2017-11-30 04:33 - 001144728 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-12-14 13:29 - 2017-11-30 04:33 - 001015704 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-12-14 13:29 - 2017-11-30 04:33 - 000038808 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe 2017-12-14 13:29 - 2017-11-30 04:29 - 008319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-12-14 13:29 - 2017-11-30 04:26 - 002647216 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2017-12-14 13:29 - 2017-11-30 04:24 - 000870896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2017-12-14 13:29 - 2017-11-30 04:23 - 007910960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2017-12-14 13:29 - 2017-11-30 04:23 - 001194248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-12-14 13:29 - 2017-11-30 04:00 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2017-12-14 13:29 - 2017-11-30 03:59 - 023678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-12-14 13:29 - 2017-11-30 03:58 - 006763128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-12-14 13:29 - 2017-11-30 03:58 - 000702032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2017-12-14 13:29 - 2017-11-30 03:57 - 001123968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-12-14 13:29 - 2017-11-30 03:45 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-12-14 13:29 - 2017-11-30 03:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-12-14 13:29 - 2017-11-30 03:44 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-12-14 13:29 - 2017-11-30 03:44 - 019334144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-12-14 13:29 - 2017-11-30 03:44 - 000171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2017-12-14 13:29 - 2017-11-30 03:44 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-12-14 13:29 - 2017-11-30 03:44 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys 2017-12-14 13:29 - 2017-11-30 03:43 - 020511232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-12-14 13:29 - 2017-11-30 03:43 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe 2017-12-14 13:29 - 2017-11-30 03:43 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-12-14 13:29 - 2017-11-30 03:43 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-12-14 13:29 - 2017-11-30 03:42 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-12-14 13:29 - 2017-11-30 03:42 - 000560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll 2017-12-14 13:29 - 2017-11-30 03:42 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2017-12-14 13:29 - 2017-11-30 03:42 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe 2017-12-14 13:29 - 2017-11-30 03:42 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2017-12-14 13:29 - 2017-11-30 03:42 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx 2017-12-14 13:29 - 2017-11-30 03:42 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-12-14 13:29 - 2017-11-30 03:41 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-12-14 13:29 - 2017-11-30 03:41 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2017-12-14 13:29 - 2017-11-30 03:41 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-12-14 13:29 - 2017-11-30 03:41 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll 2017-12-14 13:29 - 2017-11-30 03:41 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe 2017-12-14 13:29 - 2017-11-30 03:40 - 012803072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-12-14 13:29 - 2017-11-30 03:40 - 000585216 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2017-12-14 13:29 - 2017-11-30 03:40 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll 2017-12-14 13:29 - 2017-11-30 03:40 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll 2017-12-14 13:29 - 2017-11-30 03:40 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe 2017-12-14 13:29 - 2017-11-30 03:39 - 011888640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-12-14 13:29 - 2017-11-30 03:39 - 003206656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll 2017-12-14 13:29 - 2017-11-30 03:39 - 002809344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-12-14 13:29 - 2017-11-30 03:39 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2017-12-14 13:29 - 2017-11-30 03:38 - 008195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-12-14 13:29 - 2017-11-30 03:38 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-12-14 13:29 - 2017-11-30 03:38 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-12-14 13:29 - 2017-11-30 03:38 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2017-12-14 13:29 - 2017-11-30 03:38 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2017-12-14 13:29 - 2017-11-30 03:37 - 006252544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-12-14 13:29 - 2017-11-30 03:37 - 003306496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2017-12-14 13:29 - 2017-11-30 03:37 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2017-12-14 13:29 - 2017-11-30 03:37 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 004726784 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 003652096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 001802240 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 001398784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 000755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2017-12-14 13:29 - 2017-11-30 03:36 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2017-12-14 13:29 - 2017-11-30 03:35 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2017-12-14 13:29 - 2017-11-30 03:34 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 002032536 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2017-12-14 13:29 - 2017-11-17 10:46 - 001578904 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000821656 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe 2017-12-14 13:29 - 2017-11-17 10:46 - 000678808 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000613784 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000612248 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000484248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000379288 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000259992 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000190360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000136088 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-12-14 13:29 - 2017-11-17 10:46 - 000067992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2017-12-14 13:29 - 2017-11-17 10:46 - 000034712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-12-14 13:29 - 2017-11-17 10:41 - 000503704 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2017-12-14 13:29 - 2017-11-17 10:39 - 005477088 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2017-12-14 13:29 - 2017-11-17 10:39 - 000643200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-12-14 13:29 - 2017-11-17 10:37 - 021353200 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-12-14 13:29 - 2017-11-17 10:31 - 000223640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2017-12-14 13:29 - 2017-11-17 10:03 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-12-14 13:29 - 2017-11-17 10:00 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-12-14 13:29 - 2017-11-17 09:59 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-12-14 13:29 - 2017-11-17 09:56 - 000757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2017-12-08 11:55 - 2017-12-08 11:55 - 000000000 ____D C:\ProgramData\iZotope 2017-12-08 11:44 - 2017-12-08 11:44 - 000001131 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2017-12-08 11:44 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys 2017-12-07 19:44 - 2017-12-07 19:44 - 000001297 _____ C:\Users\amon\Desktop\Custom Shop.lnk 2017-12-07 19:44 - 2009-08-28 10:54 - 003462320 _____ (Intel Corporation) C:\WINDOWS\system32\mkl_sequential.dll 2017-12-07 19:41 - 2017-12-07 19:41 - 000000000 ____D C:\Program Files\IK Multimedia 2017-12-07 17:23 - 2017-12-07 17:24 - 000000000 ____D C:\Users\amon\Downloads\IK.Multimedia.T-RackS.5.Complete.v5.0.0.R2.Incl.FIXED.Keygen-R2R 2017-12-06 22:34 - 2017-12-06 22:34 - 000000281 _____ C:\Users\amon\Documents\R2R_Cableguys.lic 2017-12-06 22:05 - 2017-12-06 22:05 - 000000000 ____D C:\Users\amon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\112dB 2017-12-05 17:24 - 2017-12-05 17:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Kush 2017-12-04 23:06 - 2017-12-04 23:06 - 000001041 _____ C:\Users\amon\Desktop\WinFlash Basic.lnk 2017-12-04 23:06 - 2017-12-04 23:06 - 000000000 ____D C:\Users\Public\Documents\Shared WinFlash Files 2017-12-04 23:06 - 2017-12-04 23:06 - 000000000 ____D C:\Users\amon\Documents\My WinFlash Files 2017-12-04 23:06 - 2017-12-04 23:06 - 000000000 ____D C:\ProgramData\Open Window Software 2017-12-04 23:06 - 2017-12-04 23:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WFBasic v11.0 2017-12-04 23:06 - 2017-12-04 23:06 - 000000000 ____D C:\Program Files (x86)\WFBasic_110 2017-12-04 14:02 - 2017-12-04 14:02 - 000000048 _____ C:\Users\amon\Documents\mot de pass compte postal.txt 2017-12-04 08:11 - 2015-11-10 20:14 - 160399421 _____ C:\Users\amon\Desktop\FILE0113.MOV 2017-12-04 08:08 - 2015-11-10 22:49 - 066146160 _____ C:\Users\amon\Desktop\FILE0117.MOV 2017-12-03 23:50 - 2017-12-03 23:50 - 000440128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140.dll 2017-12-03 23:50 - 2017-12-03 23:50 - 000263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vccorlib140.dll 2017-12-03 23:50 - 2017-12-03 23:50 - 000242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\concrt140.dll 2017-12-03 23:50 - 2017-12-03 23:50 - 000083792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll 2017-12-03 23:38 - 2017-12-03 23:38 - 000641696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140.dll 2017-12-03 23:38 - 2017-12-03 23:38 - 000389296 _____ (Microsoft Corporation) C:\WINDOWS\system32\vccorlib140.dll 2017-12-03 23:38 - 2017-12-03 23:38 - 000331432 _____ (Microsoft Corporation) C:\WINDOWS\system32\concrt140.dll 2017-12-03 23:38 - 2017-12-03 23:38 - 000087728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140.dll 2017-12-02 11:55 - 2017-12-02 11:55 - 000000000 ____D C:\Users\amon\Documents\xgen 2017-12-02 11:52 - 2017-12-02 11:55 - 000000000 ____D C:\Users\amon\AppData\Roaming\Autodesk 2017-12-02 11:52 - 2017-12-02 11:55 - 000000000 ____D C:\Users\amon\AppData\Local\Autodesk 2017-12-02 11:52 - 2017-12-02 11:52 - 000001486 _____ C:\Users\Public\Desktop\Application de bureau Autodesk.lnk 2017-12-02 11:51 - 2017-12-02 11:55 - 000000000 ____D C:\Users\amon\Documents\maya 2017-12-02 11:51 - 2017-12-02 11:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2017-12-02 11:51 - 2017-12-02 11:51 - 000001812 _____ C:\Users\Public\Desktop\Maya 2018.lnk 2017-12-02 11:51 - 2017-12-02 11:51 - 000000000 ____D C:\Users\amon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MtoA 2.0.1 Maya 2018 2017-12-02 11:51 - 2017-12-02 11:51 - 000000000 ____D C:\solidangle 2017-12-02 11:51 - 2017-12-02 11:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Maya 2018 2017-12-02 11:51 - 2017-12-02 11:51 - 000000000 ____D C:\Program Files (x86)\Autodesk 2017-12-02 11:50 - 2017-12-02 11:51 - 000000000 ____D C:\Program Files\Autodesk 2017-12-02 11:48 - 2017-12-02 11:51 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared 2017-12-02 11:48 - 2017-12-02 11:48 - 000000000 ____D C:\Program Files\Common Files\Macrovision Shared 2017-12-02 11:46 - 2017-12-02 11:55 - 000000000 ____D C:\ProgramData\Autodesk 2017-12-02 11:39 - 2017-12-02 11:39 - 000000000 ____D C:\Autodesk 2017-12-02 10:32 - 2015-11-10 18:37 - 226380856 _____ C:\Users\amon\Desktop\neige2.MOV 2017-12-02 10:00 - 2015-11-10 18:34 - 304879851 _____ C:\Users\amon\Desktop\neige.MOV 2017-12-02 06:07 - 2015-11-10 15:20 - 070951913 _____ C:\Users\amon\Desktop\FILE0110.MOV 2017-12-01 22:06 - 2017-12-01 22:06 - 007806838 _____ C:\Users\amon\Downloads\stefano_3.3gp 2017-12-01 22:04 - 2017-12-01 22:04 - 001920025 _____ C:\Users\amon\Downloads\stefano_2.3gp 2017-12-01 22:02 - 2017-12-01 22:03 - 000989264 _____ C:\Users\amon\Downloads\stefano.3gp 2017-12-01 21:33 - 2017-12-01 21:33 - 000000000 ____D C:\Users\amon\Downloads\Autodesk Maya 2018 - Keygen Xforce - Win x64 2017-12-01 21:32 - 2017-12-01 21:32 - 000014985 _____ C:\Users\amon\Downloads\Autodesk Maya 2018 - Keygen Xforce - Win x64.torrent 2017-12-01 20:30 - 2017-12-22 21:02 - 000000000 ____D C:\Users\amon\Downloads\Motown - Acapella 2017-12-01 10:05 - 2017-12-23 16:13 - 000000000 ____D C:\Users\amon\AppData\Roaming\app 2017-11-30 20:42 - 2017-11-30 20:42 - 000003372 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2806682115-773826143-903907544-1001 2017-11-30 20:42 - 2017-11-30 20:42 - 000002411 _____ C:\Users\amon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-11-30 18:37 - 2015-11-09 03:33 - 075669475 _____ C:\Users\amon\Desktop\pilou.MOV 2017-11-30 03:18 - 2017-11-30 03:18 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-11-30 03:06 - 2017-12-23 16:13 - 000000000 ____D C:\Users\amon\AppData\Roaming\Ming 2017-11-28 16:25 - 2017-11-28 16:25 - 000000000 ____D C:\Users\amon\Documents\Virtual Machines 2017-11-28 16:10 - 2017-11-28 16:40 - 000000000 ____D C:\Users\amon\AppData\Roaming\VMware 2017-11-28 16:10 - 2017-11-28 16:40 - 000000000 ____D C:\Users\amon\AppData\Local\VMware 2017-11-28 16:06 - 2017-09-18 06:33 - 001134056 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetlib64.dll 2017-11-28 16:06 - 2017-09-18 06:32 - 000402408 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe 2017-11-28 16:06 - 2017-09-18 06:32 - 000367080 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe 2017-11-28 16:06 - 2017-09-18 06:32 - 000134104 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetinst.dll 2017-11-28 16:06 - 2017-09-18 06:32 - 000043992 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmnetuserif.sys 2017-11-28 16:06 - 2017-09-18 06:21 - 000095704 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmx86.sys 2017-11-28 16:06 - 2017-09-05 04:54 - 000091712 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vsock.sys 2017-11-28 16:06 - 2017-09-05 04:54 - 000069104 _____ (VMware, Inc.) C:\WINDOWS\system32\vsocklib.dll 2017-11-28 16:06 - 2017-09-05 04:54 - 000065016 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vsocklib.dll 2017-11-28 16:06 - 2017-08-31 01:11 - 000083008 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\hcmon.sys 2017-11-28 16:05 - 2017-12-23 21:15 - 000000000 ____D C:\ProgramData\VMware 2017-11-28 16:05 - 2017-11-28 16:05 - 003078488 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2017-11-28 16:05 - 2017-11-28 16:05 - 000001272 _____ C:\Users\Public\Desktop\VMware Workstation 14 Player.lnk 2017-11-28 16:05 - 2017-11-28 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware 2017-11-28 16:05 - 2017-11-28 16:05 - 000000000 ____D C:\Program Files\Common Files\VMware 2017-11-28 16:05 - 2017-11-28 16:05 - 000000000 ____D C:\Program Files (x86)\VMware 2017-11-27 12:39 - 2017-12-21 10:21 - 000000334 _____ C:\siw_debug.txt 2017-11-27 11:04 - 2017-11-14 20:55 - 000136312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-11-27 11:03 - 2017-11-27 11:03 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2017-11-27 11:03 - 2017-09-14 00:20 - 000798008 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-11-27 11:03 - 2017-09-14 00:20 - 000490296 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-11-27 11:03 - 2017-09-14 00:19 - 000927544 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-11-27 11:03 - 2017-09-14 00:19 - 000591160 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-11-27 11:01 - 2017-11-14 23:48 - 040237504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 036239480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 035156600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 029272000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 023264864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 019038976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 013865256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 013255032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 011780376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 010883928 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 004484864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 004201592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 003817584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 003614328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 001989056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6438831.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 001673664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6438831.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 001615472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 001135280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 001099712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 001031288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 000980928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 000932288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 000885496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-11-27 11:01 - 2017-11-14 23:48 - 000225208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2017-11-27 11:01 - 2017-11-14 23:48 - 000057976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-11-27 11:01 - 2017-11-14 23:48 - 000048442 _____ C:\WINDOWS\system32\nvinfo.pb 2017-11-27 11:01 - 2017-11-14 23:48 - 000045496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2017-11-27 10:47 - 2017-11-27 10:47 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-27 10:47 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-27 10:47 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-27 10:47 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-27 10:47 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-27 10:47 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-27 10:47 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-27 10:47 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-11-27 10:47 - 2017-11-16 02:38 - 002404984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2017-11-27 10:47 - 2017-11-16 02:38 - 002071160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2017-11-27 10:47 - 2017-11-16 02:38 - 000050808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2017-11-25 20:33 - 2015-09-28 00:33 - 068863691 _____ C:\Users\amon\Desktop\FILE0072.MOV 2017-11-25 16:16 - 2017-11-25 16:16 - 000001059 _____ C:\Users\Public\Desktop\DriversCloud.com - Démarrer la détection.lnk 2017-11-25 16:16 - 2017-11-25 16:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com 2017-11-25 16:16 - 2017-11-25 16:16 - 000000000 ____D C:\Program Files\DriversCloud.com 2017-11-25 16:14 - 2017-11-25 16:14 - 000001052 _____ C:\Users\amon\Desktop\SIW Demo.lnk 2017-11-25 16:14 - 2017-11-25 16:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIW DEMO 2017-11-25 16:14 - 2017-11-25 16:14 - 000000000 ____D C:\Program Files (x86)\SIW DEMO ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-12-24 13:06 - 2017-06-30 16:14 - 000000000 ____D C:\Users\amon\AppData\Local\Epic Privacy Browser 2017-12-24 12:55 - 2016-04-26 17:07 - 000000000 ____D C:\Users\amon\AppData\Roaming\ZHP 2017-12-24 12:25 - 2017-05-16 09:12 - 000000000 ____D C:\ProgramData\NVIDIA 2017-12-24 11:52 - 2017-06-25 07:23 - 000000000 ____D C:\Users\amon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS 2017-12-24 11:52 - 2017-06-24 18:34 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture 2017-12-24 10:19 - 2016-01-15 10:14 - 000000000 ____D C:\Users\amon\AppData\Roaming\Skype 2017-12-24 09:56 - 2017-05-16 09:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2017-12-24 09:52 - 2016-05-29 12:27 - 000000000 ____D C:\Users\amon\AppData\Local\Google 2017-12-24 09:52 - 2016-01-15 11:25 - 000000000 ____D C:\Program Files (x86)\Google 2017-12-24 09:51 - 2017-05-07 19:25 - 000000000 ____D C:\Users\amon\AppData\LocalLow\Mozilla 2017-12-24 08:03 - 2016-01-15 14:41 - 000000000 ____D C:\Users\amon\AppData\Local\Adobe 2017-12-24 08:00 - 2017-06-30 16:14 - 000002466 _____ C:\Users\amon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Epic Privacy Browser.lnk 2017-12-24 08:00 - 2017-06-30 16:14 - 000002458 _____ C:\Users\amon\Desktop\Epic Privacy Browser.lnk 2017-12-24 00:31 - 2016-01-15 14:09 - 000000000 ____D C:\Users\amon\AppData\Roaming\DMCache 2017-12-23 21:21 - 2017-05-16 09:25 - 003231136 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-12-23 21:21 - 2017-03-20 06:10 - 001553792 _____ C:\WINDOWS\system32\perfh00C.dat 2017-12-23 21:21 - 2017-03-20 06:10 - 000375084 _____ C:\WINDOWS\system32\perfc00C.dat 2017-12-23 21:15 - 2017-05-16 09:23 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-12-23 21:14 - 2017-03-18 12:40 - 002097152 _____ C:\WINDOWS\system32\config\BBI 2017-12-23 16:42 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-12-23 16:14 - 2017-05-06 20:48 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-12-23 16:14 - 2016-05-21 06:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-12-23 16:13 - 2017-11-21 20:54 - 000000000 ____D C:\Users\amon\AppData\Roaming\mnaxz 2017-12-23 15:54 - 2016-05-21 06:05 - 000001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-12-23 15:54 - 2016-01-15 11:10 - 000000000 ____D C:\Users\amon\AppData\Roaming\Mozilla 2017-12-23 15:53 - 2016-01-15 11:25 - 000000000 ____D C:\Users\amon\AppData\Local\google.old 2017-12-23 15:48 - 2017-01-31 16:28 - 000000000 ____D C:\Users\amon\AppData\LocalLow\IObit 2017-12-23 15:48 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2017-12-23 11:09 - 2016-02-18 09:26 - 000000000 ___RD C:\Users\amon\Documents\Sans titre Project 2017-12-23 09:45 - 2017-03-18 22:03 - 000000000 ___HD C:\Program Files\WindowsApps 2017-12-23 09:45 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\AppReadiness 2017-12-23 09:42 - 2017-11-21 20:54 - 000000000 ____D C:\Users\amon\AppData\Roaming\MingC 2017-12-23 03:38 - 2017-03-18 22:01 - 000000000 ____D C:\WINDOWS\INF 2017-12-23 03:36 - 2017-01-31 16:28 - 000000000 ____D C:\ProgramData\ProductData 2017-12-21 23:14 - 2016-03-16 14:52 - 000000000 ____D C:\chat.amo 2017-12-21 21:25 - 2016-02-15 11:27 - 000000000 ____D C:\Program Files (x86)\vst plugin 2017-12-21 21:15 - 2017-01-01 16:00 - 000000000 ____D C:\Program Files\VSTPlugins 2017-12-21 21:15 - 2016-02-15 13:04 - 000000000 ____D C:\Program Files\Common Files\VST3 2017-12-21 17:57 - 2016-02-15 11:29 - 000000000 ____D C:\WINDOWS\vst plugin 2017-12-21 11:09 - 2017-04-11 17:20 - 000000000 ____D C:\ProgramData\boost_interprocess 2017-12-21 10:41 - 2016-03-04 12:42 - 000000000 ____D C:\Users\amon\AppData\Local\CrashDumps 2017-12-20 23:08 - 2016-02-29 11:53 - 000000000 ____D C:\Users\amon\AppData\Roaming\BitTorrent 2017-12-20 23:03 - 2016-09-25 15:13 - 000000000 ___SD C:\ProgramData\Waves Audio 2017-12-20 22:51 - 2017-03-07 13:57 - 000000000 ____D C:\Users\amon\Downloads\Compressed 2017-12-20 21:59 - 2017-05-16 09:13 - 000000000 ____D C:\Users\amon 2017-12-20 21:59 - 2016-09-25 15:34 - 000000000 ____D C:\Users\amon\AppData\Roaming\Waves Audio 2017-12-20 16:21 - 2017-09-11 22:05 - 000000000 ____D C:\Users\amon\AppData\LocalLow\BitTorrent 2017-12-20 11:55 - 2016-12-08 12:32 - 000000000 ____D C:\Users\amon\AppData\Roaming\Steinberg 2017-12-20 11:54 - 2016-12-08 12:33 - 000000000 ____D C:\Program Files (x86)\Steinberg 2017-12-20 11:42 - 2017-03-08 16:54 - 000000000 ____D C:\Users\amon\AppData\Local\Serato 2017-12-20 11:42 - 2017-03-08 16:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serato 2017-12-20 11:41 - 2016-01-18 13:18 - 000000000 ____D C:\ProgramData\Package Cache 2017-12-19 10:59 - 2017-03-18 22:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-12-19 10:58 - 2017-03-18 22:03 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2017-12-19 10:57 - 2016-12-28 21:15 - 000000000 ____D C:\Program Files\Microsoft Office 2017-12-18 15:36 - 2016-06-20 16:51 - 000000000 ____D C:\Users\amon\AppData\Roaming\A1AUDIO.de 2017-12-17 21:41 - 2016-09-25 15:32 - 000000000 ___SD C:\Users\Public\Waves Audio 2017-12-17 21:30 - 2016-02-15 21:05 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-12-16 22:08 - 2016-02-15 21:23 - 000000000 ____D C:\Users\amon\Documents\iZotope Stutter Edit Presets 2017-12-16 20:44 - 2016-02-15 21:26 - 000000000 ____D C:\Users\amon\AppData\Roaming\iZotope 2017-12-16 20:43 - 2016-08-12 08:26 - 000004608 _____ C:\Users\amon\PaceKeyChain 2017-12-15 21:19 - 2016-02-15 13:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iZotope 2017-12-15 21:18 - 2016-02-15 13:05 - 000000000 ____D C:\Users\amon\Documents\iZotope 2017-12-15 21:18 - 2016-02-15 13:04 - 000000000 ____D C:\Program Files (x86)\iZotope 2017-12-15 16:24 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\rescache 2017-12-14 21:46 - 2016-01-15 08:07 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-12-14 21:43 - 2017-05-16 09:11 - 005239432 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-12-14 21:42 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\oobe 2017-12-14 21:37 - 2017-03-07 13:57 - 000000000 ____D C:\Users\amon\Downloads\Video 2017-12-14 21:36 - 2016-02-14 17:05 - 000000000 ____D C:\Users\amon\AppData\Roaming\vlc 2017-12-14 21:26 - 2017-02-03 21:43 - 000000000 ____D C:\Users\amon\Downloads\Dead Reckoning 6 - Mort entre les Lignes (EC-VF)-NoTag 2017-12-14 19:28 - 2016-01-15 08:07 - 000000000 ____D C:\Users\amon\AppData\Local\Packages 2017-12-14 18:51 - 2017-05-02 20:25 - 000001834 _____ C:\WINDOWS\Sandboxie.ini 2017-12-14 18:33 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-12-14 18:33 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Macromed 2017-12-14 13:35 - 2017-03-18 21:51 - 000000000 ____D C:\WINDOWS\CbsTemp 2017-12-14 13:33 - 2016-01-15 08:27 - 000000000 ____D C:\WINDOWS\system32\MRT 2017-12-14 13:30 - 2017-10-11 12:05 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2017-12-14 13:30 - 2016-01-15 08:27 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-12-08 11:44 - 2016-01-18 11:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2017-12-07 22:54 - 2017-11-03 13:23 - 000000000 ____D C:\WINDOWS\Panther 2017-12-07 22:48 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\Registration 2017-12-07 22:47 - 2017-05-16 09:24 - 000003813 _____ C:\WINDOWS\diagwrn.xml 2017-12-07 22:47 - 2017-05-16 09:24 - 000003813 _____ C:\WINDOWS\diagerr.xml 2017-12-07 22:42 - 2017-09-30 16:03 - 000000000 ___HD C:\$WINDOWS.~BT 2017-12-07 21:20 - 2017-11-07 20:55 - 000000016 _____ C:\Users\amon\AppData\Roaming\msregsvv.dll 2017-12-07 21:20 - 2017-11-07 20:55 - 000000016 _____ C:\ProgramData\autobk.inc 2017-12-07 19:44 - 2017-11-07 20:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IK Multimedia 2017-12-07 18:28 - 2017-11-07 20:55 - 000000000 ____D C:\Users\amon\AppData\Roaming\IK Multimedia 2017-12-07 18:25 - 2017-11-07 20:50 - 000000000 ____D C:\Users\amon\Documents\IK Multimedia 2017-12-06 13:35 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2017-12-05 17:24 - 2017-09-24 11:20 - 000000000 ____D C:\ProgramData\AudioUTOPiA 2017-12-04 23:06 - 2017-06-11 08:13 - 000000000 ____D C:\Users\amon\AppData\Roaming\IDM 2017-12-04 07:32 - 2016-03-10 17:14 - 000000000 ____D C:\Users\amon\AppData\Local\Mixxx 2017-12-03 13:34 - 2017-07-02 20:40 - 000000000 ____D C:\Users\amon\Downloads\The WIRED CD - Rip. Sample. Mash. Share 2017-12-02 11:54 - 2017-02-04 14:03 - 000000000 ____D C:\ProgramData\FLEXnet 2017-12-01 13:42 - 2017-06-24 18:33 - 000000000 ____D C:\Users\amon\AppData\Local\Share Link 2017-11-30 20:42 - 2016-01-15 08:09 - 000000000 ___RD C:\Users\amon\OneDrive 2017-11-30 13:14 - 2017-02-21 16:56 - 000000000 ____D C:\Users\amon\Desktop\mp3 fx 2017-11-30 10:57 - 2017-09-14 09:50 - 000000000 ____D C:\Users\amon\AppData\Roaming\Tokyo Dawn Labs 2017-11-30 10:48 - 2016-01-15 09:20 - 000000000 ____D C:\Users\amon\AppData\Local\NVIDIA 2017-11-30 10:31 - 2016-02-08 09:01 - 000000000 ____D C:\Program Files\CCleaner 2017-11-27 11:04 - 2017-05-16 09:12 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2017-11-27 11:04 - 2016-03-02 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-11-27 11:04 - 2016-02-08 05:19 - 000000000 ____D C:\Temp 2017-11-27 11:03 - 2016-02-14 15:03 - 000000000 ____D C:\Users\amon\AppData\Roaming\NVIDIA 2017-11-27 10:47 - 2017-05-16 09:12 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-11-27 10:47 - 2017-05-16 09:12 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-11-27 10:47 - 2017-02-02 20:29 - 000001492 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2017-11-27 10:47 - 2016-05-19 13:21 - 000000000 ____D C:\Users\amon\AppData\Local\NVIDIA Corporation 2017-11-25 16:16 - 2016-09-13 19:58 - 000000000 ____D C:\ProgramData\DriversCloud.com 2017-11-25 14:43 - 2017-05-16 09:12 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM ==================== Fichiers à la racine de certains dossiers ======= 2016-04-26 17:07 - 2016-04-26 17:07 - 002248704 _____ () C:\Users\amon\ZHPCleaner.exe 2017-01-01 16:02 - 2017-01-01 16:02 - 000000033 _____ () C:\Users\amon\AppData\Roaming\.pgbiasfx 2017-02-09 21:03 - 2017-02-10 00:24 - 000000099 _____ () C:\Users\amon\AppData\Roaming\dwmq.exe.tmp 2017-11-07 20:55 - 2017-12-07 21:20 - 000000016 _____ () C:\Users\amon\AppData\Roaming\msregsvv.dll 2017-10-16 20:00 - 2017-10-23 19:12 - 000001456 _____ () C:\Users\amon\AppData\Local\Adobe Enregistrer pour le Web 12.0 Prefs 2017-07-28 15:00 - 2017-07-28 15:00 - 000000017 _____ () C:\Users\amon\AppData\Local\resmon.resmoncfg 2017-04-21 12:18 - 2017-04-21 12:18 - 000000552 _____ () C:\Users\amon\AppData\Local\TroubleshooterConfig.json Certains fichiers dans TEMP: ==================== 2017-12-15 16:13 - 2015-01-22 16:01 - 000032768 _____ () C:\Users\amon\AppData\Local\Temp\shutdown1513350836.exe 2017-12-08 11:44 - 2017-12-08 11:44 - 012052552 _____ (VS Revo Group ) C:\Users\amon\AppData\Local\Temp\VSUSetup.exe ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-12-22 15:47 ==================== Fin de FRST.txt ============================