Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16.05.2018 01 Exécuté par THANOS (administrateur) sur THANOS (19-05-2018 22:21:35) Exécuté depuis C:\Users\THANOS\Downloads\Programs Profils chargés: defaultuser0 & THANOS (Profils disponibles: defaultuser0 & THANOS) Platform: Windows 10 Pro Version 1607 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Edge) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avpui.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Connectify) C:\Program Files (x86)\Connectify\Connectify.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Charity Engine) C:\Program Files\BOINC\boinctray.exe (Charity Engine) C:\Program Files\BOINC\charityengine.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (ultracopier.first-world.info) C:\Program Files (x86)\Supercopier\supercopier.exe (SFX TEAM) C:\Users\THANOS\Documents\Setup\SuperCopier2\SuperCopier2.exe (eRmail Company, s. r. o.) C:\Users\THANOS\AppData\Roaming\eRclient\eRclient.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe () C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\MusixmatchStartupLauncher.exe () C:\Windows\SysWOW64\Codecs\TrayMenu.exe () C:\Users\THANOS\AppData\Local\Temp\Rar$EXa4196.30098\Bitradio-qt-v1001.exe (Charity Engine) C:\Program Files\BOINC\boinc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Musixmatch) C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\Musixmatch.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Musixmatch) C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\Musixmatch.exe (Musixmatch) C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\Musixmatch.exe () C:\Users\THANOS\.musixmatch\WMPRemoteStandalone.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-1\MsMpEng.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-1\NisSrv.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DTShellHlp.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1813.286.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-1\MpCmdRun.exe (IObit) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\Pub\PubMonitor.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (AIMP DevTeam) C:\Program Files (x86)\AIMP3\AIMP3.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9226.21595.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.9328.1700.0_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.14393.2182_none_7f2413fa21d78070\TiWorker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe (Space Sciences Laboratory) C:\ProgramData\BOINC\projects\work.charityengine.com\wrapper_26014_windows_intelx86.exe (Node.js) C:\ProgramData\BOINC\slots\0\ce11.exe () C:\Users\THANOS\Downloads\Programs\ZHPDiag3.exe (AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe (Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2538280 2011-01-13] (Synaptics Incorporated) HKLM\...\Run: [Connectify Hotspot] => C:\Program Files (x86)\Connectify\Connectify.exe [3372600 2018-01-29] (Connectify) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corp.) HKLM\...\Run: [boinctray] => C:\Program Files\BOINC\boinctray.exe [69952 2018-01-19] (Charity Engine) HKLM\...\Run: [boincmgr] => C:\Program Files\BOINC\charityengine.exe [8662848 2018-01-19] (Charity Engine) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-03-25] (Apple Inc.) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-07-16] (Microsoft Corporation) HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Codec Settings UAC Manager] => C:\Windows\SysWOW64\Codecs\CodecUACManager.exe [66192 2017-07-07] () HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18334528 2018-04-12] (Piriform Ltd) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [ultracopier] => C:\Program Files (x86)\Supercopier\supercopier.exe [1160192 2016-01-02] (ultracopier.first-world.info) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe" HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [SuperCopier2.exe] => C:\Users\THANOS\Documents\Setup\SuperCopier2\SuperCopier2.exe [955392 2009-08-16] (SFX TEAM) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [eRclient] => C:\Users\THANOS\AppData\Roaming\eRclient\eRclient.exe [1269248 2013-10-31] (eRmail Company, s. r. o.) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4113520 2018-03-30] (Tonec Inc.) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [729704 2018-04-03] (Disc Soft Ltd) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [954560 2018-02-15] (Disc Soft Ltd) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [reWASD Tray Agent] => C:\Program Files\reWASD\Launcher.exe [3317864 2018-05-10] (Disc Soft Ltd) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Run: [GoogleChromeAutoLaunch_24375C529D5A775B339B93C6D8AEC220] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1586008 2018-04-26] (Google Inc.) HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1 HKU\S-1-5-18\...\RunOnce: [AOD] => C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) IFEO\taskmgr.exe: [Debugger] C:\Program Files (x86)\AVG\AVG PC TuneUp\PMLauncher.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2018-04-25] ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\Codecs\TrayMenu.exe () Startup: C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Bitradio.lnk [2018-05-19] ShortcutTarget: Bitradio.lnk -> C:\Users\THANOS\AppData\Local\Temp\Rar$EXa4196.30098\Bitradio-qt-v1001.exe () ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{4389c92c-bd57-4a11-a92b-604c4f57baba}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{d49b32c9-6e1e-4a3e-adf4-a093bddfed36}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION HKU\S-1-5-21-1556881994-629194302-2127039984-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://thebestgamesonlinefree.com SearchScopes: HKU\S-1-5-21-1556881994-629194302-2127039984-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/search?utf8in=1&fr=ietb&q={SearchTerms} BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2017-12-14] (Internet Download Manager, Tonec Inc.) BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2017-12-14] (Internet Download Manager, Tonec Inc.) FireFox: ======== FF HKLM\...\Firefox\Extensions: [light_plugin_A07576A3CEBC4A72A8CF2C925907DB05@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi [2018-05-14] FF HKLM-x32\...\Firefox\Extensions: [light_plugin_A07576A3CEBC4A72A8CF2C925907DB05@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi FF HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\THANOS\AppData\Roaming\IDM\idmmzcc5 FF Extension: (IDM CC) - C:\Users\THANOS\AppData\Roaming\IDM\idmmzcc5 [2018-05-12] [Legacy] [non signé] FF HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] [Legacy] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-04-22] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-04-22] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN) Chrome: ======= CHR HomePage: Default -> funsearchbox.com CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxp://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/","hxxps://www.google.com/" CHR Session Restore: Default -> est activé. CHR Profile: C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default [2018-05-19] CHR Extension: (Slides) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-04-22] CHR Extension: (Flash Video Downloader) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiimdkdngfcipjohbjenkahhlhccpdbc [2018-05-11] CHR Extension: (MoviesFanatic) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\alefelpnhldmoclaijlpdcnjjkegfipj [2018-05-17] CHR Extension: (Safari Books Download) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\anlpljppoinmpaedoilhjibjehpjhcob [2018-04-22] CHR Extension: (Docs) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-04-22] CHR Extension: (Google Drive) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-04-22] CHR Extension: (Turn Off the Lights) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2018-05-16] CHR Extension: (YouTube) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-04-22] CHR Extension: (Express VPN Free) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\caacaagmlhbbmbceggkhnnogbdjmeikd [2018-05-10] CHR Extension: (Hotspot Shield Elite VPN Proxy) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejkaocphofnobjdedneohbbiilggdlbi [2018-05-19] CHR Extension: (Seen On Screen) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\epcflcdkiabfmjgjogiheelllehbpkpg [2018-05-19] CHR Extension: (CryptoTab) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcaacbfglejpnljiiokpcplbmmlbmnbk [2018-04-22] CHR Extension: (Sheets) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-04-22] CHR Extension: (Stay secure with CyberGhost VPN Free Proxy) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbkglfijbcbgblgflchnbphjdllaogb [2018-05-11] CHR Extension: (Alerte Bons Plans eBuyClub) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjjddemkcndmbbeeibicagaobbijjgmm [2018-05-09] CHR Extension: (Quick Javascript Switcher) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\geddoclleiomckbhadiaipdggiiccfje [2018-05-19] CHR Extension: (Google Docs hors connexion) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-04-24] CHR Extension: (Fun Search Box) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghnedomhkmpaampkgmaplpkpfcookigc [2018-05-19] CHR Extension: (AdBlock) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-05-10] CHR Extension: (eBay pour Chrome) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2018-04-22] CHR Extension: (Le Bloqueur de Poper) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiodaajmphnkcajieajajinghpejdjai [2018-04-22] CHR Extension: (Halo 5 Guardians Wallpapers) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkhpmjjhdflclkhegeppbionkhgmnpoj [2018-05-19] CHR Extension: (Kaspersky Protection) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mchjnmdbdlkdbfliogedbnpnanfjnolk [2018-05-14] CHR Extension: (Vérificateur de messages Google) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2018-04-22] CHR Extension: (IDM Integration Module) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2018-05-13] CHR Extension: (Autofill) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmmgnhgdeffjkdckmikfpnddkbbfkkk [2018-05-19] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-22] CHR Extension: (New Tab Beautiful Page) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofmacdiceehcibkfednmgpkhgfhpacgi [2018-05-08] CHR Extension: (CryptoSearch) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\oliajjhpgpfciobcodfdhmgcbgmgkffe [2018-04-22] CHR Extension: (Felica IDm Reader App for RC-S380) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocaofoepnenfidojplahcdelmemhklc [2018-04-22] CHR Extension: (Speedtest by Ookla) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2018-05-11] CHR Extension: (Gmail) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-04-22] CHR Extension: (Chrome Media Router) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-28] CHR Extension: (CrossShopper comparateur de prix collaboratif) - C:\Users\THANOS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmadodlofglhgdbehodningfkgloccgn [2018-04-28] CHR HKLM\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2018-03-30] CHR HKLM-x32\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2018-03-30] ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S4 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-21] (Advanced Micro Devices, Inc.) [Fichier non signé] S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-11-27] (Apple Inc.) S4 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.) R2 AVP18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe [354672 2017-01-24] (AO Kaspersky Lab) S4 Connectify; C:\Program Files (x86)\Connectify\ConnectifyService.exe [468024 2018-01-29] (Connectify) S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3606120 2018-04-03] (Disc Soft Ltd) S4 Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusServiceUltra.exe [6148288 2018-02-15] (Disc Soft Ltd) S4 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2060848 2016-02-05] (Comodo) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [526888 2018-05-11] (EasyAntiCheat Ltd) S4 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-07] (ELAN Microelectronics Corp.) S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [Fichier non signé] S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2018-03-28] (Hi-Rez Studios) [Fichier non signé] S2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [53120 2018-04-10] (AnchorFree Inc.) S4 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [360736 2016-10-28] (IObit) S3 klvssbridge64_18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\vssbridge64.exe [426416 2018-05-14] (AO Kaspersky Lab) S4 KSDE2.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe [354672 2017-01-24] (AO Kaspersky Lab) S4 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6479136 2018-03-27] (Malwarebytes) S3 NcaSvc; C:\Windows\System32\ncasvc.dll [167936 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 NcbService; C:\Windows\System32\ncbservice.dll [339968 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 NcdAutoSetup; C:\Windows\System32\NcdAutoSetup.dll [88576 2016-07-16] (Microsoft Corporation) [Fichier non signé] S4 Netlogon; C:\Windows\system32\netlogon.dll [827392 2016-07-16] (Microsoft Corporation) [Fichier non signé] S4 Netlogon; C:\Windows\SysWOW64\netlogon.dll [670720 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 Netman; C:\Windows\System32\netman.dll [259072 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 netprofm; C:\Windows\System32\netprofmsvc.dll [519168 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 NetSetupSvc; C:\Windows\System32\NetSetupSvc.dll [265216 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 NgcCtnrSvc; C:\Windows\System32\NgcCtnrSvc.dll [326656 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 NgcSvc; C:\Windows\system32\ngcsvc.dll [983040 2016-07-16] (Microsoft Corporation) [Fichier non signé] R2 NlaSvc; C:\Windows\System32\nlasvc.dll [368640 2016-07-16] (Microsoft Corporation) [Fichier non signé] R2 nsi; C:\Windows\system32\nsisvc.dll [30720 2016-07-16] (Microsoft Corporation) [Fichier non signé] R2 osrss; C:\Windows\system32\osrss.dll [108584 2018-01-18] (Microsoft Corporation) S4 reWASDService; C:\Program Files\reWASD\reWASDService.exe [1215080 2018-05-10] (Disc Soft Ltd) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-07-16] (Microsoft Corporation) S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [Fichier non signé] S4 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [5614592 2018-01-22] (AVG Technologies CZ, s.r.o.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-1\NisSrv.exe [4632736 2018-05-09] (Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-1\MsMpEng.exe [104680 2018-05-09] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 AFTrafMgr1.4; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_4_64.sys [56840 2018-04-04] (AnchorFree Inc.) R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [110096 2016-04-18] (Advanced Micro Devices) S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [303712 2018-01-16] (Bluestack System Inc. ) R1 cfywlan2; C:\Windows\system32\DRIVERS\cfywlan2.sys [46088 2018-04-30] (Connectify) R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [247008 2016-12-26] (AO Kaspersky Lab) R1 cnnctfy4; C:\Windows\system32\DRIVERS\cnnctfy4.sys [53216 2018-04-30] (Connectify) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2018-05-14] (Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2018-05-14] (Disc Soft Ltd) R3 dtultrascsibus; C:\Windows\System32\drivers\dtultrascsibus.sys [30264 2018-05-14] (Disc Soft Ltd) R3 dtultrausbbus; C:\Windows\System32\drivers\dtultrausbbus.sys [47672 2018-05-14] (Disc Soft Ltd) R0 hidgamemap; C:\Windows\System32\drivers\hidgamemap.sys [150528 2018-05-14] (Disc Soft Ltd) R1 HWiNFO32; C:\Windows\SysWoW64\drivers\HWiNFO64A.SYS [26528 2018-04-22] (REALiX(tm)) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554408 2016-10-01] (AO Kaspersky Lab) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [70880 2017-12-24] (AO Kaspersky Lab) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [120008 2018-05-14] (AO Kaspersky Lab) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29816 2016-10-14] (AO Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [207560 2018-05-14] (AO Kaspersky Lab) R1 KLHK; C:\Windows\System32\drivers\klhk.sys [1191616 2018-05-14] (AO Kaspersky Lab) R3 klids; C:\ProgramData\Kaspersky Lab\AVP18.0.0\Bases\klids.sys [180984 2018-05-17] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1057992 2018-05-15] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [57032 2018-05-14] (AO Kaspersky Lab) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [57056 2016-12-23] (AO Kaspersky Lab) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [58592 2016-12-07] (AO Kaspersky Lab) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [50672 2017-12-24] (AO Kaspersky Lab) S3 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [44768 2017-01-20] (AO Kaspersky Lab) R3 kltap; C:\Windows\System32\drivers\kltap.sys [52152 2016-06-07] (The OpenVPN Project) R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [231312 2018-05-14] (AO Kaspersky Lab) R3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [87584 2018-05-14] (AO Kaspersky Lab) R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [252600 2018-05-14] (AO Kaspersky Lab) R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [107656 2018-05-14] (AO Kaspersky Lab) R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [174664 2018-05-14] (AO Kaspersky Lab) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [93888 2018-05-14] (AO Kaspersky Lab) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [141000 2018-05-14] (AO Kaspersky Lab) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [199392 2017-12-24] (AO Kaspersky Lab) R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-04-25] (Malwarebytes) R3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [533504 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 NdisCap; C:\Windows\System32\drivers\ndiscap.sys [50176 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 NdisImPlatform; C:\Windows\System32\drivers\NdisImPlatform.sys [126464 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [26112 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 Ndisuio; C:\Windows\System32\drivers\ndisuio.sys [63488 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [20480 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 NdisWan; C:\Windows\System32\drivers\ndiswan.sys [189440 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 ndiswanlegacy; C:\Windows\System32\DRIVERS\ndiswan.sys [189440 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 ndproxy; C:\Windows\System32\DRIVERS\NDProxy.sys [60928 2016-07-16] (Microsoft Corporation) [Fichier non signé] R2 Ndu; C:\Windows\System32\drivers\Ndu.sys [125440 2016-07-16] (Microsoft Corporation) [Fichier non signé] S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () [Fichier non signé] R1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [279040 2016-07-16] (Microsoft Corporation) [Fichier non signé] R1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [68608 2016-07-16] (Microsoft Corporation) [Fichier non signé] R1 npsvctrig; C:\Windows\System32\drivers\npsvctrig.sys [26624 2016-07-16] (Microsoft Corporation) [Fichier non signé] R1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [41984 2016-07-16] (Microsoft Corporation) [Fichier non signé] R1 Null; C:\Windows\System32\Drivers\Null.sys [7168 2016-07-16] (Microsoft Corporation) [Fichier non signé] R3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [424384 2018-04-22] (Realsil Semiconductor Corporation) R3 SensorsSimulatorDriver; C:\Windows\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2018-01-22] (AVG Netherlands B.V.) S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46072 2018-05-09] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [313888 2018-05-09] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [61472 2018-05-09] (Microsoft Corporation) S3 cpuz138; \??\C:\Users\THANOS\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [X] <==== ATTENTION S3 cpuz146; \??\C:\Windows\temp\cpuz146\cpuz146_x64.sys [X] S3 iobit_monitor_server; \??\D:\Program Files\IObit\Advanced SystemCare Ultimate\drivers\Monitor_x64.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-05-19 22:38 - 2018-05-19 22:38 - 000000685 _____ C:\Users\Public\Desktop\Burst Wallet.lnk 2018-05-19 22:38 - 2018-05-19 22:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qbundle 2018-05-19 22:20 - 2018-05-19 22:24 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\ZHP 2018-05-19 22:20 - 2018-05-19 22:20 - 000000866 _____ C:\Users\THANOS\Desktop\ZHPDiag.lnk 2018-05-19 22:20 - 2018-05-19 22:20 - 000000000 ____D C:\Users\THANOS\AppData\Local\ZHP 2018-05-19 22:11 - 2018-05-19 22:11 - 000003024 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (THANOS) 2018-05-19 20:30 - 2018-05-19 20:30 - 000001147 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk 2018-05-19 20:29 - 2018-05-19 20:30 - 000000000 ____D C:\Program Files\TAP-Windows 2018-05-19 20:28 - 2018-05-19 20:31 - 000000000 ____D C:\Program Files (x86)\Hotspot Shield 2018-05-19 20:28 - 2018-05-19 20:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield 2018-05-19 20:18 - 2018-05-19 20:30 - 000000000 ____D C:\ProgramData\Hotspot Shield 2018-05-19 20:16 - 2018-05-19 20:17 - 000000000 ____D C:\FRST 2018-05-19 18:20 - 2018-05-19 20:17 - 022571880 _____ (AnchorFree Inc.) C:\Users\THANOS\Downloads\HotspotShield-7.6.4-14937025.exe 2018-05-19 16:35 - 2018-05-19 22:31 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Bitradio 2018-05-19 16:06 - 2018-05-19 16:06 - 000000000 ____D C:\Users\THANOS\AppData\LocalLow\Mozilla 2018-05-19 14:11 - 2010-06-02 03:55 - 000239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2018-05-19 14:11 - 2010-06-02 03:55 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2018-05-19 14:11 - 2010-05-26 10:41 - 001907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2018-05-19 14:11 - 2010-05-26 10:41 - 001868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2018-05-19 14:11 - 2010-05-26 10:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2018-05-19 14:11 - 2010-05-26 10:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2018-05-19 14:11 - 2010-02-04 09:01 - 000530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2018-05-19 14:11 - 2010-02-04 09:01 - 000528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2018-05-19 14:11 - 2010-02-04 09:01 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2018-05-19 14:11 - 2010-02-04 09:01 - 000176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2018-05-19 14:11 - 2010-02-04 09:01 - 000078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2018-05-19 14:11 - 2010-02-04 09:01 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2018-05-19 14:11 - 2009-09-04 16:44 - 000517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2018-05-19 14:11 - 2009-09-04 16:44 - 000515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll 2018-05-19 14:11 - 2009-09-04 16:44 - 000238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2018-05-19 14:11 - 2009-09-04 16:44 - 000176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2018-05-19 14:11 - 2009-09-04 16:44 - 000073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2018-05-19 14:11 - 2009-09-04 16:44 - 000069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 005554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 005501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 002582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 002475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 001974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 000523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 000285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2018-05-19 14:11 - 2009-09-04 16:29 - 000235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2018-05-19 14:11 - 2009-03-16 13:18 - 000521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2018-05-19 14:11 - 2009-03-16 13:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2018-05-19 14:11 - 2009-03-16 13:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2018-05-19 14:11 - 2009-03-16 13:18 - 000174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2018-05-19 14:11 - 2009-03-16 13:18 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2018-05-19 14:11 - 2009-03-16 13:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2018-05-19 14:11 - 2009-03-09 14:27 - 005425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2018-05-19 14:11 - 2009-03-09 14:27 - 004178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2018-05-19 14:11 - 2009-03-09 14:27 - 002430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2018-05-19 14:11 - 2009-03-09 14:27 - 001846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll 2018-05-19 14:11 - 2009-03-09 14:27 - 000520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2018-05-19 14:11 - 2009-03-09 14:27 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll 2018-05-19 14:11 - 2008-10-27 09:04 - 000518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2018-05-19 14:11 - 2008-10-27 09:04 - 000074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2018-05-19 14:11 - 2008-10-10 03:52 - 005631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2018-05-19 14:11 - 2008-10-10 03:52 - 004379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2018-05-19 14:11 - 2008-10-10 03:52 - 002605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2018-05-19 14:11 - 2008-10-10 03:52 - 002036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2018-05-19 14:11 - 2008-10-10 03:52 - 000519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2018-05-19 14:11 - 2008-10-10 03:52 - 000452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2018-05-19 14:10 - 2008-10-27 09:04 - 000514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2018-05-19 14:10 - 2008-10-27 09:04 - 000235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2018-05-19 14:10 - 2008-10-27 09:04 - 000175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2018-05-19 14:10 - 2008-10-27 09:04 - 000070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2018-05-19 14:10 - 2008-10-27 09:04 - 000025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2018-05-19 14:10 - 2008-10-27 09:04 - 000023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2018-05-19 14:10 - 2008-07-31 09:41 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2018-05-19 14:10 - 2008-07-31 09:41 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2018-05-19 14:10 - 2008-07-31 09:41 - 000072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2018-05-19 14:10 - 2008-07-31 09:41 - 000068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2018-05-19 14:10 - 2008-07-31 09:40 - 000513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2018-05-19 14:10 - 2008-07-31 09:40 - 000509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2018-05-19 14:10 - 2008-07-10 10:01 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2018-05-19 14:10 - 2008-07-10 10:00 - 004992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2018-05-19 14:10 - 2008-07-10 10:00 - 003851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2018-05-19 14:10 - 2008-07-10 10:00 - 001942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2018-05-19 14:10 - 2008-07-10 10:00 - 001493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2018-05-19 14:10 - 2008-07-10 10:00 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2018-05-18 20:00 - 2018-05-18 20:00 - 000002246 _____ C:\Users\THANOS\Desktop\Brave.lnk 2018-05-18 19:58 - 2018-05-18 20:01 - 000000000 ____D C:\Users\THANOS\AppData\Local\Brave 2018-05-17 23:34 - 2018-05-18 20:00 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave Software 2018-05-17 20:15 - 2018-05-17 20:15 - 000000000 ____D C:\Windows.old 2018-05-17 19:54 - 2018-05-18 23:50 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\brave 2018-05-17 19:46 - 2018-05-18 20:01 - 000000000 ____D C:\Users\THANOS\AppData\Local\SquirrelTemp 2018-05-17 18:32 - 2018-05-17 18:34 - 000000000 ____D C:\ProgramData\PopCap Games 2018-05-17 18:20 - 2018-05-17 18:20 - 000001558 _____ C:\Users\THANOS\Desktop\Plants vs Zombies 2012 Final Full PC Version.lnk 2018-05-17 18:19 - 2018-05-17 18:19 - 000000000 ____D C:\Program Files (x86)\TheBestGamesOnlineFree.com 2018-05-17 15:40 - 2018-05-17 15:40 - 000003126 _____ C:\Windows\System32\Tasks\MSIAfterburner 2018-05-17 15:18 - 2017-10-04 09:21 - 000029352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll 2018-05-17 15:18 - 2017-10-04 09:21 - 000019088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll 2018-05-17 15:18 - 2017-10-04 04:45 - 000030888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll 2018-05-17 15:18 - 2017-10-04 04:45 - 000019088 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll 2018-05-17 15:18 - 2017-07-13 02:41 - 000690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll 2018-05-17 15:18 - 2017-07-13 02:41 - 000485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll 2018-05-17 15:17 - 2017-07-13 02:41 - 000993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll 2018-05-17 15:17 - 2017-07-13 02:41 - 000987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll 2018-05-17 02:06 - 2018-05-17 02:06 - 000000000 ____D C:\Users\THANOS\Downloads\Tomb Raider 2018-05-16 01:12 - 2018-05-16 01:12 - 000000000 ____D C:\Users\THANOS\Documents\My Games 2018-05-16 01:12 - 2018-05-16 01:12 - 000000000 ____D C:\Users\THANOS\AppData\Local\HirezLauncherUI 2018-05-16 01:11 - 2018-05-16 01:11 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat 2018-05-16 01:07 - 2010-05-26 10:41 - 002526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2018-05-16 01:07 - 2010-05-26 10:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2018-05-16 01:07 - 2010-05-26 10:41 - 002106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2018-05-16 01:07 - 2010-05-26 10:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2018-05-16 01:07 - 2010-05-26 10:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2018-05-16 01:07 - 2010-02-04 09:01 - 000024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2018-05-16 01:07 - 2010-02-04 09:01 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2018-05-16 00:47 - 2018-05-17 23:46 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios 2018-05-16 00:47 - 2018-05-16 00:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2018-05-16 00:47 - 2018-05-16 00:47 - 000000000 ____D C:\ProgramData\Hi-Rez Studios 2018-05-15 02:05 - 2018-05-15 02:06 - 000000000 ____D C:\Users\THANOS\Desktop\ICB2000 2018-05-15 01:55 - 2018-05-15 01:42 - 001057992 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2018-05-15 01:55 - 2018-05-14 22:54 - 000141000 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys 2018-05-15 01:55 - 2018-05-14 21:21 - 000207560 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys 2018-05-15 01:55 - 2018-05-14 21:21 - 000093888 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwfp.sys 2018-05-15 01:55 - 2018-05-14 19:38 - 001191616 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys 2018-05-15 01:55 - 2018-05-14 19:38 - 000057032 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klim6.sys 2018-05-15 01:54 - 2018-05-14 19:38 - 000152352 _____ (AO Kaspersky Lab) C:\Windows\system32\klhkum.dll 2018-05-15 01:54 - 2018-05-14 19:38 - 000120008 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klbackupflt.sys 2018-05-15 01:26 - 2018-05-15 16:36 - 000000000 ____D C:\Windows\system32\MRT 2018-05-15 01:25 - 2018-05-15 01:25 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe 2018-05-15 01:25 - 2018-05-15 01:25 - 141696960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2018-05-15 01:00 - 2016-12-21 08:08 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2018-05-15 01:00 - 2016-12-21 05:44 - 000120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2018-05-14 23:54 - 2018-05-19 14:52 - 000002364 _____ C:\Users\THANOS\Desktop\Nouveau document texte (2).txt 2018-05-14 22:57 - 2018-05-14 22:57 - 000000915 _____ C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk 2018-05-14 22:57 - 2018-05-14 22:57 - 000000867 _____ C:\Users\THANOS\Desktop\Start Tor Browser.lnk 2018-05-14 22:51 - 2018-05-14 22:52 - 000000000 ____D C:\Users\THANOS\Desktop\Tor Browser 2018-05-14 21:47 - 2018-05-14 21:47 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk 2018-05-14 21:47 - 2018-05-14 21:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2018-05-14 21:46 - 2018-05-14 21:46 - 000000000 ____D C:\Program Files\iPod 2018-05-14 21:38 - 2018-05-14 21:47 - 000000000 ____D C:\Program Files\iTunes 2018-05-14 20:26 - 2018-05-14 20:26 - 000002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2018-05-14 20:26 - 2018-05-14 20:26 - 000000000 ____D C:\Windows\System32\Tasks\Apple 2018-05-14 20:26 - 2018-05-14 20:26 - 000000000 ____D C:\Program Files (x86)\Apple Software Update 2018-05-14 18:25 - 2018-05-14 18:25 - 000252600 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys 2018-05-14 18:21 - 2018-05-14 18:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection 2018-05-14 18:21 - 2018-05-14 18:20 - 000001333 _____ C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk 2018-05-14 18:18 - 2018-05-14 18:18 - 000150528 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\hidgamemap.sys 2018-05-14 18:15 - 2018-05-14 18:15 - 000107656 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys 2018-05-14 18:15 - 2018-05-14 18:15 - 000000837 _____ C:\Users\Public\Desktop\reWASD.lnk 2018-05-14 18:15 - 2018-05-14 18:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reWASD 2018-05-14 18:14 - 2018-05-14 18:18 - 000000000 ____D C:\Program Files\reWASD 2018-05-14 18:14 - 2018-05-14 18:14 - 000231312 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_arkmon.sys 2018-05-14 18:14 - 2018-05-14 18:14 - 000174664 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_mark.sys 2018-05-14 18:14 - 2018-05-14 18:14 - 000087584 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_kimul.sys 2018-05-14 18:14 - 2018-05-14 18:14 - 000000000 ____D C:\ProgramData\Disc-Soft 2018-05-14 18:10 - 2018-05-14 18:10 - 000047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtultrausbbus.sys 2018-05-14 18:09 - 2018-05-14 18:20 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\DAEMON Tools Ultra 2018-05-14 18:09 - 2018-05-14 18:09 - 000030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtultrascsibus.sys 2018-05-14 18:09 - 2018-05-14 18:09 - 000001835 _____ C:\Users\Public\Desktop\DAEMON Tools Ultra.lnk 2018-05-14 18:09 - 2018-05-14 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Ultra 2018-05-14 18:08 - 2018-05-14 18:10 - 000000000 ____D C:\Program Files\DAEMON Tools Ultra 2018-05-14 18:07 - 2018-05-19 22:08 - 000002403 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk 2018-05-14 18:07 - 2018-05-14 18:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security 2018-05-14 18:07 - 2018-05-14 18:07 - 000000000 ____D C:\ProgramData\DAEMON Tools Ultra 2018-05-14 18:07 - 2018-05-14 18:00 - 000002232 _____ C:\Users\Public\Desktop\Safe Money.lnk 2018-05-14 18:05 - 2018-05-14 18:15 - 000000000 ____D C:\Program Files\Common Files\AV 2018-05-14 17:58 - 2013-05-06 07:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2018-05-14 17:54 - 2018-05-19 22:22 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2018-05-14 17:54 - 2018-05-14 18:19 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab 2018-05-14 17:08 - 2018-05-14 17:08 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2018-05-14 16:19 - 2018-05-14 19:42 - 000000000 ____D C:\Users\THANOS\AppData\Local\Disc_Soft_Ltd 2018-05-14 16:19 - 2018-05-14 16:19 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images 2018-05-14 16:03 - 2018-05-14 16:03 - 000000000 ____D C:\Users\Public\Documents\Catch! 2018-05-14 15:59 - 2018-05-14 15:59 - 000047672 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtliteusbbus.sys 2018-05-14 15:58 - 2018-05-14 16:19 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\DAEMON Tools Lite 2018-05-14 15:58 - 2018-05-14 15:59 - 000000000 ____D C:\Program Files\DAEMON Tools Lite 2018-05-14 15:58 - 2018-05-14 15:58 - 000030264 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys 2018-05-14 15:58 - 2018-05-14 15:58 - 000001824 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2018-05-14 15:58 - 2018-05-14 15:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite 2018-05-14 15:16 - 2018-05-14 15:17 - 000000000 ____D C:\ProgramData\DAEMON Tools Lite 2018-05-13 23:52 - 2018-05-13 23:52 - 000275386 _____ C:\Users\THANOS\Desktop\Pinterest.html 2018-05-13 23:52 - 2018-05-13 23:52 - 000000000 ____D C:\Users\THANOS\Desktop\Pinterest_files 2018-05-13 23:24 - 2018-05-13 23:24 - 004424020 _____ C:\Users\THANOS\Documents\Sup de co Marrakech Maroc Ecole Supérieure de Commerce depuis 1987.pdf 2018-05-13 23:21 - 2018-05-13 23:21 - 001074767 _____ C:\Users\THANOS\Documents\numérisation0014.pdf 2018-05-13 17:10 - 2018-05-13 17:10 - 000000000 ____D C:\Users\THANOS\AppData\Local\ElevatedDiagnostics 2018-05-13 14:44 - 2010-06-02 03:55 - 000527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2018-05-13 14:44 - 2010-06-02 03:55 - 000518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2018-05-13 14:44 - 2010-06-02 03:55 - 000077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2018-05-13 14:44 - 2010-06-02 03:55 - 000074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2018-05-12 15:50 - 2018-05-12 15:50 - 000001094 _____ C:\Users\THANOS\Desktop\Internet Download Manager.lnk 2018-05-12 15:49 - 2018-05-12 15:50 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2018-05-12 15:49 - 2018-05-12 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager 2018-05-12 13:33 - 2018-05-12 13:39 - 000001144 _____ C:\Users\THANOS\Documents\hosts.txt 2018-05-12 01:57 - 2018-05-13 15:42 - 000000000 ____D C:\Users\THANOS\AppData\Local\Warframe 2018-05-12 01:10 - 2018-05-19 22:10 - 000000000 ____D C:\Users\THANOS\.musixmatch 2018-05-11 19:10 - 2018-05-11 19:10 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk 2018-05-11 10:25 - 2018-05-17 23:33 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2018-05-11 10:19 - 2018-05-11 10:19 - 000001144 _____ C:\Users\Public\Desktop\DriverToolkit.lnk 2018-05-11 09:22 - 2018-05-11 09:25 - 000000000 ____D C:\Users\THANOS\AppData\Local\Steam 2018-05-11 08:37 - 2018-05-11 08:51 - 019573336 _____ C:\Users\THANOS\Downloads\TB.Rd.TC.avi.avi.crdownload 2018-05-10 20:21 - 2018-05-10 20:21 - 000000000 ___HD C:\OneDriveTemp 2018-05-10 18:54 - 2018-05-11 08:22 - 013896790 _____ C:\Users\THANOS\Downloads\TB.Rd.TC.avi.crdownload 2018-05-10 12:51 - 1993-07-23 18:31 - 000210944 _____ C:\Windows\SysWOW64\msvcrt10.dll 2018-05-10 09:49 - 2018-05-10 13:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Halo Spartan Strike 2018-05-10 09:04 - 2018-05-14 18:43 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\libraries 2018-05-09 23:21 - 2018-05-09 23:21 - 000000000 ____D C:\Users\THANOS\AppData\Local\Fallout3 2018-05-09 23:10 - 2018-05-16 00:47 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2018-05-09 23:06 - 2018-05-09 23:06 - 000000000 ____D C:\Program Files (x86)\Bethesda Softworks 2018-05-09 23:06 - 2008-05-30 13:19 - 000511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2018-05-09 23:06 - 2008-05-30 13:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2018-05-09 23:06 - 2008-05-30 13:18 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2018-05-09 23:06 - 2008-05-30 13:18 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2018-05-09 23:06 - 2008-05-30 13:17 - 000068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2018-05-09 23:06 - 2008-05-30 13:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2018-05-09 23:06 - 2008-05-30 13:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2018-05-09 23:06 - 2008-05-30 13:16 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2018-05-09 23:06 - 2008-05-30 13:11 - 004991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2018-05-09 23:06 - 2008-05-30 13:11 - 003850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2018-05-09 23:06 - 2008-05-30 13:11 - 001941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2018-05-09 23:06 - 2008-05-30 13:11 - 001491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2018-05-09 23:06 - 2008-05-30 13:11 - 000540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2018-05-09 23:06 - 2008-05-30 13:11 - 000467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2018-05-09 23:05 - 2008-03-05 15:04 - 000489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2018-05-09 23:05 - 2008-03-05 15:03 - 000479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2018-05-09 23:05 - 2008-03-05 15:03 - 000238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2018-05-09 23:05 - 2008-03-05 15:03 - 000177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2018-05-09 23:05 - 2008-03-05 15:00 - 000028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2018-05-09 23:05 - 2008-03-05 15:00 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2018-05-09 23:05 - 2008-03-05 14:56 - 004910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2018-05-09 23:05 - 2008-03-05 14:56 - 003786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2018-05-09 23:05 - 2008-03-05 14:56 - 001860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2018-05-09 23:05 - 2008-03-05 14:56 - 001420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2018-05-09 23:05 - 2008-02-05 22:07 - 000529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2018-05-09 23:05 - 2008-02-05 22:07 - 000462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2018-05-09 23:05 - 2007-10-22 02:40 - 000411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2018-05-09 23:05 - 2007-10-22 02:39 - 000267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2018-05-09 23:05 - 2007-10-22 02:37 - 000021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2018-05-09 23:04 - 2007-10-22 02:37 - 000017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2018-05-09 23:04 - 2007-10-12 14:14 - 005081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2018-05-09 23:04 - 2007-10-12 14:14 - 003734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2018-05-09 23:04 - 2007-10-12 14:14 - 002006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2018-05-09 23:04 - 2007-10-12 14:14 - 001374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2018-05-09 23:04 - 2007-10-02 08:56 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2018-05-09 23:04 - 2007-10-02 08:56 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2018-05-09 23:04 - 2007-07-19 23:57 - 000411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2018-05-09 23:04 - 2007-07-19 23:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2018-05-09 23:04 - 2007-07-19 17:14 - 005073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2018-05-09 23:04 - 2007-07-19 17:14 - 003727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2018-05-09 23:04 - 2007-07-19 17:14 - 001985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2018-05-09 23:04 - 2007-07-19 17:14 - 001358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2018-05-09 23:04 - 2007-07-19 17:14 - 000508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2018-05-09 23:04 - 2007-07-19 17:14 - 000444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2018-05-09 23:04 - 2007-06-20 19:49 - 000409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2018-05-09 23:04 - 2007-06-20 19:46 - 000266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2018-05-09 23:04 - 2007-05-16 15:45 - 001401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2018-05-09 23:04 - 2007-05-16 15:45 - 001124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2018-05-09 23:04 - 2007-05-16 15:45 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2018-05-09 23:04 - 2007-05-16 15:45 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2018-05-09 23:03 - 2007-05-16 15:45 - 004496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2018-05-09 23:03 - 2007-05-16 15:45 - 003497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2018-05-09 23:03 - 2007-04-04 17:55 - 000403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2018-05-09 23:03 - 2007-04-04 17:55 - 000261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2018-05-09 23:03 - 2007-04-04 17:54 - 000107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2018-05-09 23:03 - 2007-03-15 15:57 - 000506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2018-05-09 23:03 - 2007-03-15 15:57 - 000443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2018-05-09 23:03 - 2007-03-12 15:42 - 004494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2018-05-09 23:03 - 2007-03-12 15:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2018-05-09 23:03 - 2007-03-12 15:42 - 001400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2018-05-09 23:03 - 2007-03-12 15:42 - 001123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2018-05-09 23:03 - 2007-03-05 11:42 - 000017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2018-05-09 23:03 - 2007-03-05 11:42 - 000015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2018-05-09 23:03 - 2007-01-24 14:27 - 000393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2018-05-09 23:03 - 2007-01-24 14:27 - 000255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2018-05-09 23:03 - 2006-12-08 11:02 - 000251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2018-05-09 23:03 - 2006-12-08 11:00 - 000390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2018-05-09 23:03 - 2006-11-29 12:06 - 004398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll 2018-05-09 23:03 - 2006-11-29 12:06 - 003426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll 2018-05-09 23:03 - 2006-11-29 12:06 - 000469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2018-05-09 23:03 - 2006-11-29 12:06 - 000440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2018-05-09 23:02 - 2006-09-28 15:05 - 003977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2018-05-09 23:02 - 2006-09-28 15:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2018-05-09 23:02 - 2006-09-28 15:05 - 000237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2018-05-09 23:02 - 2006-09-28 15:04 - 000364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2018-05-09 23:02 - 2006-07-28 08:31 - 000083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2018-05-09 23:02 - 2006-07-28 08:30 - 000363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2018-05-09 23:02 - 2006-07-28 08:30 - 000236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2018-05-09 23:02 - 2006-07-28 08:30 - 000062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2018-05-09 23:02 - 2006-05-31 06:24 - 000230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2018-05-09 23:02 - 2006-05-31 06:22 - 000354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2018-05-09 23:02 - 2006-03-31 11:40 - 000352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2018-05-09 23:02 - 2006-03-31 11:39 - 000229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2018-05-09 23:02 - 2006-03-31 11:39 - 000083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2018-05-09 23:02 - 2006-03-31 11:39 - 000062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2018-05-09 23:01 - 2006-03-31 11:41 - 003927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2018-05-09 23:01 - 2006-03-31 11:40 - 002388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2018-05-09 23:01 - 2006-02-03 07:43 - 003830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2018-05-09 23:01 - 2006-02-03 07:43 - 002332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2018-05-09 23:01 - 2006-02-03 07:42 - 000355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2018-05-09 23:01 - 2006-02-03 07:42 - 000230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2018-05-09 23:01 - 2006-02-03 07:41 - 000016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2018-05-09 23:01 - 2006-02-03 07:41 - 000014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2018-05-09 23:01 - 2005-12-05 17:09 - 003815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2018-05-09 23:01 - 2005-12-05 17:09 - 002323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2018-05-09 23:01 - 2005-07-22 18:59 - 003807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2018-05-09 23:01 - 2005-07-22 18:59 - 002319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2018-05-09 23:01 - 2005-05-26 14:34 - 003767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2018-05-09 23:01 - 2005-05-26 14:34 - 002297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2018-05-09 23:01 - 2005-03-18 16:19 - 003823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2018-05-09 23:01 - 2005-03-18 16:19 - 002337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2018-05-09 23:00 - 2005-02-05 18:45 - 003544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2018-05-09 23:00 - 2005-02-05 18:45 - 002222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2018-05-09 22:48 - 2018-05-09 22:48 - 000000000 ____D C:\Users\THANOS\Documents\Games for Windows - LIVE Demos 2018-05-09 22:08 - 2018-05-09 22:08 - 000003360 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1556881994-629194302-2127039984-1001 2018-05-09 22:05 - 2018-05-09 22:06 - 000002410 _____ C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-05-09 20:18 - 2018-04-28 15:24 - 000548000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2018-05-09 19:58 - 2018-05-09 19:58 - 000000979 _____ C:\Users\THANOS\Desktop\eRclient.lnk 2018-05-09 19:57 - 2018-05-09 19:58 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eRclient 2018-05-09 19:57 - 2018-05-09 19:58 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\eRclient 2018-05-09 19:28 - 2009-09-04 16:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2018-05-09 19:28 - 2009-09-04 16:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll 2018-05-09 19:28 - 2007-04-04 17:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2018-05-09 19:22 - 2018-05-09 19:22 - 000000000 ____D C:\Windows\SysWOW64\xlive 2018-05-09 19:21 - 2018-05-09 19:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE 2018-05-09 19:21 - 2018-05-09 19:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace 2018-05-09 10:22 - 2018-05-09 13:03 - 000000000 ____D C:\Windows\system32\Drivers\wd 2018-05-09 09:39 - 2018-01-18 00:05 - 000108584 _____ (Microsoft Corporation) C:\Windows\system32\osrss.dll 2018-05-09 09:38 - 2018-05-12 17:12 - 000000000 ____D C:\Program Files\rempl 2018-05-09 09:38 - 2018-02-18 12:13 - 002003296 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2018-05-09 09:38 - 2018-02-18 12:13 - 001568600 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2018-05-09 09:38 - 2018-02-18 12:13 - 000749408 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2018-05-09 09:38 - 2018-02-18 12:13 - 000664416 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2018-05-09 09:38 - 2018-02-18 12:13 - 000609120 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2018-05-09 09:38 - 2018-02-18 12:13 - 000389464 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2018-05-09 09:38 - 2018-02-18 12:13 - 000270688 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2018-05-09 09:38 - 2018-02-18 12:13 - 000246112 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2018-05-09 09:38 - 2018-02-18 12:13 - 000138072 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2018-05-09 09:38 - 2018-02-18 12:13 - 000069984 _____ (Microsoft Corporation) C:\Windows\system32\win32appinventorycsp.dll 2018-05-09 09:38 - 2018-02-18 12:12 - 000461664 _____ (Microsoft Corporation) C:\Windows\system32\dcntel.dll 2018-05-09 09:38 - 2018-02-18 12:12 - 000035160 _____ (Microsoft Corporation) C:\Windows\system32\DeviceCensus.exe 2018-05-09 09:38 - 2018-02-18 12:09 - 000199512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aepic.dll 2018-05-09 09:38 - 2018-02-18 12:04 - 000501088 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll 2018-05-09 09:38 - 2018-02-18 11:19 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll 2018-05-09 09:38 - 2018-02-18 11:18 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe 2018-05-09 09:37 - 2018-02-18 12:00 - 000026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2018-05-09 09:37 - 2018-02-18 11:31 - 000023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2018-05-09 09:37 - 2018-02-18 11:26 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2018-05-09 09:37 - 2018-02-18 11:26 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2018-05-09 09:37 - 2018-02-18 11:23 - 000033280 _____ (Microsoft Corporation) C:\Windows\system32\wuautoappupdate.dll 2018-05-09 09:37 - 2018-02-18 11:19 - 000078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll 2018-05-09 09:37 - 2018-02-18 11:16 - 000299008 _____ (Microsoft Corporation) C:\Windows\system32\updatehandlers.dll 2018-05-09 09:37 - 2018-02-18 11:15 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll 2018-05-09 09:37 - 2018-02-18 11:14 - 000558080 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll 2018-05-09 09:37 - 2018-01-01 05:51 - 000052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usoapi.dll 2018-05-09 09:37 - 2018-01-01 05:49 - 000073728 _____ (Microsoft Corporation) C:\Windows\system32\usoapi.dll 2018-05-09 09:37 - 2018-01-01 05:49 - 000053248 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll 2018-05-09 09:37 - 2018-01-01 05:48 - 000310784 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe 2018-05-09 09:37 - 2018-01-01 05:48 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe 2018-05-09 09:37 - 2018-01-01 05:41 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll 2018-05-09 09:37 - 2017-11-01 23:12 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\UsoClient.exe 2018-05-09 09:37 - 2017-08-22 06:08 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2018-05-09 09:37 - 2017-08-22 06:06 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2018-05-09 09:37 - 2017-03-04 07:36 - 000101888 _____ (Microsoft Corporation) C:\Windows\system32\DuCsps.dll 2018-05-09 09:37 - 2016-11-11 10:23 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\EAMProgressHandler.dll 2018-05-09 09:36 - 2018-02-18 11:26 - 000557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll 2018-05-09 09:36 - 2018-02-18 11:26 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe 2018-05-09 09:36 - 2018-02-18 11:24 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe 2018-05-09 09:36 - 2018-02-18 11:22 - 000165376 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2018-05-09 09:36 - 2018-02-18 11:20 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe 2018-05-09 09:36 - 2018-02-18 11:17 - 000711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2018-05-09 09:36 - 2018-02-18 11:16 - 000748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll 2018-05-09 09:36 - 2018-02-18 11:16 - 000260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe 2018-05-09 09:36 - 2018-02-18 11:12 - 000870400 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2018-05-09 09:36 - 2018-02-18 11:11 - 002321920 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2018-05-09 09:36 - 2018-02-18 11:11 - 001224704 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll 2018-05-09 09:36 - 2018-02-18 11:11 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll 2018-05-09 09:36 - 2017-09-18 03:27 - 000326656 _____ (Microsoft Corporation) C:\Windows\system32\domgmt.dll 2018-05-09 09:36 - 2017-06-21 07:50 - 001054208 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll 2018-05-09 01:40 - 2018-05-09 01:40 - 000005771 _____ C:\Users\THANOS\-1.14-windows.xml 2018-05-09 01:38 - 2018-05-19 20:45 - 000000000 ____D C:\Users\THANOS\Downloads\Video 2018-05-09 01:16 - 2018-05-09 01:16 - 000001521 _____ C:\Users\Public\Desktop\BlueStacks.lnk 2018-05-09 01:16 - 2018-05-09 01:16 - 000001521 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk 2018-05-09 01:07 - 2018-05-09 01:14 - 000000000 ____D C:\Program Files (x86)\BlueStacks 2018-05-09 01:06 - 2018-05-09 01:14 - 000000000 ____D C:\ProgramData\BlueStacks 2018-05-09 01:04 - 2018-05-09 01:16 - 000000000 ____D C:\ProgramData\BlueStacksSetup 2018-05-09 01:02 - 2018-05-09 01:13 - 000000000 ____D C:\Users\THANOS\AppData\Local\Bluestacks 2018-05-09 00:53 - 2018-05-09 00:53 - 000001164 _____ C:\Users\THANOS\Desktop\Cheat Engine.lnk 2018-05-09 00:35 - 2018-05-09 00:35 - 001688194 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2018-05-09 00:30 - 2018-05-09 00:30 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer 2018-05-09 00:13 - 2016-05-25 10:03 - 000778936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll 2018-05-09 00:13 - 2016-05-25 10:03 - 000035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2018-05-09 00:12 - 2016-05-25 13:31 - 001166520 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll 2018-05-09 00:12 - 2016-05-25 13:31 - 000124624 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2018-05-09 00:12 - 2016-05-25 13:31 - 000035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2018-05-09 00:12 - 2016-05-25 10:03 - 000103120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2018-05-08 22:53 - 2018-05-08 22:53 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Opera Software 2018-05-08 22:53 - 2018-05-08 22:53 - 000000000 ____D C:\Users\THANOS\AppData\Local\Opera Software 2018-05-08 22:50 - 2018-05-09 10:29 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\BOINC 2018-05-08 22:49 - 2018-05-19 22:32 - 000000000 ____D C:\ProgramData\BOINC 2018-05-08 22:49 - 2018-05-08 22:49 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Charity Engine 2018-05-08 22:49 - 2018-05-08 22:49 - 000000000 ____D C:\Program Files\BOINC 2018-05-08 22:48 - 2018-05-08 22:48 - 000000000 ____D C:\Windows\Downloaded Installations 2018-05-08 22:46 - 2018-05-08 22:47 - 000000000 ____D C:\Users\THANOS\.VirtualBox 2018-05-08 22:42 - 2018-05-08 22:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox 2018-05-08 22:42 - 2018-01-15 14:59 - 000972192 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys 2018-05-08 22:41 - 2018-05-08 22:41 - 000000000 ____D C:\Program Files\Oracle 2018-05-08 22:40 - 2018-05-08 22:40 - 000002807 _____ C:\Users\THANOS\Desktop\Facebook.lnk 2018-05-08 22:40 - 2018-05-08 22:40 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook 2018-05-08 22:40 - 2018-05-08 22:40 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Facebook 2018-05-08 22:33 - 2018-05-08 22:33 - 042742088 _____ (Intel(R) Corporation) C:\Users\THANOS\Downloads\intel-pro-wireless-drivers-7-64.exe 2018-05-08 22:26 - 2018-05-08 22:27 - 000000000 ____D C:\Program Files\ByteFence 2018-05-08 22:23 - 2018-05-14 17:24 - 000000000 ____D C:\ProgramData\McAfee 2018-05-08 19:48 - 2018-05-08 19:48 - 000000000 ____D C:\Program Files\Elantech 2018-05-04 15:38 - 2018-05-19 22:01 - 000000000 ____D C:\Users\THANOS\AppData\LocalLow\BitTorrent 2018-05-02 20:20 - 2015-11-05 16:30 - 001070232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomctl.ocx 2018-05-02 20:20 - 2015-11-05 16:30 - 000617896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx 2018-05-02 20:20 - 2015-03-16 12:58 - 000444840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshflxgd.ocx 2018-05-02 20:20 - 2014-09-10 09:14 - 000163480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000660120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomct2.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000416408 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\comct332.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000279192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatgrd.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000259736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msflxgrd.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000253080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatlst.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000222360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tabctl32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000219288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000218776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dblist32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000212112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mci32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000179352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmask32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000170920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comct232.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000131728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000130712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll 2018-05-02 20:20 - 2013-11-25 05:27 - 000127640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswinsck.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000119960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomm32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000108696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstkprp.dll 2018-05-02 20:20 - 2013-11-25 05:27 - 000104088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\picclp32.ocx 2018-05-02 20:20 - 2013-11-25 05:27 - 000084624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysinfo.ocx 2018-05-02 20:20 - 2011-01-12 12:36 - 001054208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71u.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71deu.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71ita.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71fra.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71esp.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71enu.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71kor.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71jpn.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71cht.dll 2018-05-02 20:20 - 2011-01-12 12:25 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71chs.dll 2018-05-02 20:20 - 2011-01-12 12:19 - 001060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll 2018-05-02 20:20 - 2011-01-12 11:53 - 000090112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl71.dll 2018-05-02 20:20 - 2007-02-01 21:13 - 000503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2018-05-02 20:20 - 2007-02-01 18:11 - 000344064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2018-05-02 20:20 - 2007-01-30 21:04 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll 2018-05-02 20:20 - 2006-08-25 23:28 - 001017344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70u.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70ita.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70fra.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70esp.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70deu.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70enu.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70kor.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70jpn.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70cht.dll 2018-05-02 20:20 - 2006-08-25 23:15 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70chs.dll 2018-05-02 20:20 - 2006-08-25 23:07 - 001024000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc70.dll 2018-05-02 20:20 - 2006-08-25 22:17 - 000086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl70.dll 2018-05-02 20:20 - 2005-01-20 18:25 - 000054784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvci70.dll 2018-05-02 20:20 - 2002-01-05 04:40 - 000487424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp70.dll 2018-05-02 20:20 - 2001-08-22 23:00 - 001355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvbvm50.dll 2018-05-02 20:20 - 1996-01-12 02:00 - 000722192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vb40032.dll 2018-05-02 11:33 - 2018-05-11 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverToolkit 2018-05-02 11:33 - 2018-05-11 10:19 - 000000000 ____D C:\Program Files (x86)\DriverToolkit 2018-05-02 11:33 - 2018-05-02 11:33 - 000000000 ____D C:\Users\THANOS\AppData\Local\DriverToolkit 2018-05-02 11:22 - 2018-05-02 11:22 - 000001639 _____ C:\Users\Public\Desktop\Aiseesoft Blu-ray Player.lnk 2018-05-02 11:22 - 2018-05-02 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aiseesoft 2018-05-02 11:22 - 2018-05-02 11:22 - 000000000 ____D C:\ProgramData\Aiseesoft Studio 2018-05-02 11:22 - 2018-05-02 11:22 - 000000000 ____D C:\Program Files (x86)\Aiseesoft Studio 2018-05-01 10:57 - 2018-05-15 00:11 - 000000000 ____D C:\Users\THANOS\AppData\Local\cypjMERAky 2018-04-30 21:44 - 2018-04-30 21:44 - 000053216 _____ (Connectify) C:\Windows\system32\Drivers\cnnctfy4.sys 2018-04-30 21:44 - 2018-04-30 21:44 - 000046088 _____ (Connectify) C:\Windows\system32\Drivers\cfywlan2.sys 2018-04-30 21:44 - 2018-04-30 21:44 - 000000451 _____ C:\Users\Public\Desktop\Connectify Hotspot 2018.lnk 2018-04-30 21:44 - 2018-04-30 21:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify 2018 2018-04-30 21:44 - 2018-04-30 21:44 - 000000000 ____D C:\Program Files (x86)\Connectify 2018-04-30 21:43 - 2018-04-30 21:45 - 000000000 ____D C:\ProgramData\Connectify 2018-04-30 21:43 - 2018-04-30 21:43 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2018-04-30 21:43 - 2018-04-30 21:43 - 000000000 ____D C:\Program Files\Synaptics 2018-04-30 21:42 - 2011-01-13 19:46 - 001412144 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys 2018-04-30 21:42 - 2011-01-13 19:44 - 000224040 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll 2018-04-30 21:42 - 2011-01-13 19:44 - 000167208 _____ (Synaptics Incorporated) C:\Windows\system32\SynGlwPadShlExt.dll 2018-04-30 21:42 - 2011-01-13 19:44 - 000148776 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo6.dll 2018-04-30 21:42 - 2011-01-13 19:44 - 000107816 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPCOM.dll 2018-04-30 21:42 - 2011-01-13 19:44 - 000066856 _____ C:\Windows\SysWOW64\SynTPEnhPS.dll 2018-04-30 21:42 - 2011-01-13 19:43 - 000405288 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2018-04-30 21:42 - 2011-01-13 19:43 - 000273704 _____ (Synaptics Incorporated) C:\Windows\system32\SynCtrl.dll 2018-04-30 21:42 - 2011-01-13 19:43 - 000218408 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCtrl.dll 2018-04-30 21:42 - 2011-01-13 19:43 - 000173352 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCOM.dll 2018-04-30 21:42 - 2009-08-07 09:49 - 001721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2018-04-30 21:41 - 2018-04-30 21:41 - 000001108 _____ C:\Users\THANOS\Desktop\WinRAR.lnk 2018-04-30 21:40 - 2018-04-30 21:40 - 000001096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk 2018-04-30 21:40 - 2018-04-30 21:40 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2018-04-30 21:40 - 2018-04-30 21:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2018-04-30 21:40 - 2018-04-30 21:40 - 000000000 ____D C:\Program Files (x86)\WinRAR 2018-04-29 19:21 - 2018-05-02 12:29 - 000000000 ____D C:\Users\THANOS\Documents\Projet code blocks 2018-04-28 23:49 - 2018-05-15 00:39 - 000000000 ____D C:\Program Files (x86)\KMSPico 10.2.1 Final 2018-04-28 13:24 - 2018-04-28 13:24 - 000003352 _____ C:\Windows\System32\Tasks\{E7AFD0DE-28BB-44F0-A31A-8745BB3FA604} 2018-04-28 13:20 - 2018-04-28 13:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TrackZapper.com 2018-04-28 13:20 - 2018-04-28 13:20 - 000000000 ____D C:\Program Files (x86)\Connection Booster 2018-04-28 13:20 - 2004-02-05 13:53 - 000389120 _____ () C:\Windows\SysWOW64\actskn43.ocx 2018-04-28 13:20 - 2004-01-09 03:54 - 000188416 _____ (SoftShape Development) C:\Windows\SysWOW64\actsplash.ocx 2018-04-28 13:20 - 2003-09-04 23:17 - 000917504 _____ (Macromedia, Inc.) C:\Windows\SysWOW64\Flash.ocx 2018-04-28 13:20 - 2000-07-14 22:00 - 000101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL 2018-04-28 10:56 - 2018-05-19 22:35 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\AIMP3 2018-04-27 21:38 - 2018-04-27 21:38 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2018-04-27 15:56 - 2018-04-27 15:56 - 000002904 _____ C:\Windows\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance 2018-04-27 01:15 - 2018-04-30 21:41 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\WinRAR 2018-04-27 01:13 - 2018-05-08 21:06 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\MPC-HC 2018-04-27 00:06 - 2018-05-11 09:59 - 000000000 ____D C:\Users\THANOS\Documents\Fichiers divers(Page internet) 2018-04-26 22:28 - 2018-05-08 21:05 - 000000000 ____D C:\Windows\Minidump 2018-04-26 21:54 - 2018-04-26 21:54 - 000000359 _____ C:\Users\THANOS\Desktop\Corbeille.lnk 2018-04-25 22:08 - 2018-04-25 22:09 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks 2018-04-25 22:08 - 2018-04-25 22:09 - 000000000 ____D C:\Program Files (x86)\CodeBlocks 2018-04-25 21:36 - 2018-04-26 11:38 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\DRPSu 2018-04-25 21:33 - 2018-04-25 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2018-04-25 21:33 - 2018-04-25 21:33 - 000000000 ____D C:\Program Files\CPUID 2018-04-25 21:26 - 2018-04-25 21:28 - 000000000 ____D C:\Windows\SysWOW64\Codecs 2018-04-25 21:26 - 2018-04-25 21:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack 2018-04-25 21:24 - 2018-04-25 21:24 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Babylon 2018-04-25 21:24 - 2018-04-25 21:24 - 000000000 ____D C:\Users\THANOS\AppData\Local\Babylon 2018-04-25 21:24 - 2018-04-25 21:24 - 000000000 ____D C:\ProgramData\Babylon 2018-04-25 21:21 - 2018-04-25 21:21 - 000000000 ____D C:\Users\THANOS\AppData\Local\Mail.Ru 2018-04-25 21:15 - 2018-04-25 21:15 - 000002200 _____ C:\Windows\diagerr.xml 2018-04-25 21:15 - 2018-04-25 21:15 - 000001908 _____ C:\Windows\diagwrn.xml 2018-04-25 15:20 - 2018-04-25 17:11 - 000000000 ____D C:\Users\THANOS\Documents\WPA Files 2018-04-25 15:14 - 2018-04-25 15:14 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2018-04-25 02:01 - 2018-04-25 02:01 - 000000974 _____ C:\Users\THANOS\Desktop\AIMP3.lnk 2018-04-25 02:01 - 2018-04-25 02:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 2018-04-25 02:00 - 2018-04-25 02:01 - 000000000 ____D C:\Program Files (x86)\AIMP3 2018-04-25 01:58 - 2018-05-08 11:19 - 000000000 ____D C:\Users\THANOS\AppData\LocalLow\KMPlayer 2018-04-25 01:58 - 2018-04-28 17:06 - 000000000 ____D C:\Program Files (x86)\Comodo 2018-04-25 01:58 - 2018-04-25 01:58 - 000001189 _____ C:\Users\THANOS\Desktop\Comodo Dragon.lnk 2018-04-25 01:58 - 2018-04-25 01:58 - 000000000 ____D C:\Users\THANOS\AppData\Local\Comodo 2018-04-25 01:58 - 2018-04-25 01:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The KMPlayer 2018-04-25 01:58 - 2018-04-25 01:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo 2018-04-25 01:58 - 2018-04-25 01:58 - 000000000 ____D C:\Program Files (x86)\KMPlayer 2018-04-25 00:50 - 2018-04-25 00:50 - 000001920 _____ C:\Users\THANOS\Desktop\Malwarebytes.lnk 2018-04-25 00:50 - 2018-04-25 00:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2018-04-25 00:50 - 2018-04-25 00:50 - 000000000 ____D C:\ProgramData\Malwarebytes 2018-04-25 00:50 - 2018-04-25 00:50 - 000000000 ____D C:\Program Files\Malwarebytes 2018-04-25 00:50 - 2018-03-19 11:57 - 000076192 _____ C:\Windows\system32\Drivers\mbae64.sys 2018-04-24 16:51 - 2018-04-24 16:51 - 000000000 ____D C:\ProgramData\dbg 2018-04-24 09:43 - 2018-04-24 09:43 - 000000000 ____D C:\Users\THANOS\AppData\LocalLow\Temp 2018-04-23 20:53 - 2018-04-25 22:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks 2018-04-23 20:42 - 2018-04-23 20:42 - 000000000 ____D C:\Users\THANOS\AppData\Local\NetworkTiles 2018-04-23 20:04 - 2018-05-02 11:21 - 000000000 ____D C:\Users\THANOS\Downloads\Compressed - copie 2018-04-23 17:24 - 2018-05-16 17:29 - 000000000 ____D C:\Users\THANOS\Documents\Visual Studio 2012 2018-04-23 17:17 - 2018-04-23 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2018-04-23 17:16 - 2018-04-23 17:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK - Français 2018-04-23 17:16 - 2018-04-23 17:16 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2018-04-23 17:15 - 2018-04-23 17:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 4 SDK - Français 2018-04-23 17:10 - 2018-04-23 17:11 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition 2018-04-23 17:10 - 2018-04-23 17:10 - 000000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition 2018-04-23 17:09 - 2018-04-23 17:09 - 000000000 ____D C:\Program Files\Application Verifier 2018-04-23 17:09 - 2018-04-23 17:09 - 000000000 ____D C:\Program Files (x86)\Application Verifier 2018-04-23 17:08 - 2018-04-23 17:08 - 000000000 ____D C:\ProgramData\Windows App Certification Kit 2018-04-23 17:07 - 2018-04-23 17:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits 2018-04-23 17:05 - 2018-04-23 17:05 - 000000000 ____D C:\ProgramData\PreEmptive Solutions 2018-04-23 17:04 - 2018-05-09 00:30 - 000000000 ____D C:\Program Files\MSBuild 2018-04-23 17:04 - 2018-04-23 17:04 - 000000000 ____D C:\Program Files\Reference Assemblies 2018-04-23 16:58 - 2018-04-23 17:01 - 000000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2018-04-23 16:54 - 2018-04-23 16:56 - 000000000 ____D C:\Program Files (x86)\Microsoft Web Tools 2018-04-23 16:54 - 2018-04-23 16:54 - 000002203 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Web Platform Installer.lnk 2018-04-23 16:52 - 2018-04-23 16:52 - 000000000 ____D C:\Program Files\IIS Express 2018-04-23 16:52 - 2018-04-23 16:52 - 000000000 ____D C:\Program Files (x86)\IIS Express 2018-04-23 16:46 - 2018-04-23 16:46 - 000000000 ____D C:\Program Files (x86)\NuGet 2018-04-23 16:45 - 2018-04-23 16:45 - 000000000 ____D C:\Program Files (x86)\Microsoft WCF Data Services 2018-04-23 16:44 - 2010-05-26 10:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2018-04-23 16:42 - 2018-04-23 16:42 - 000000000 ____D C:\Program Files (x86)\Windows Kits 2018-04-23 16:32 - 2018-04-23 16:32 - 000000000 ____D C:\Program Files (x86)\Microsoft Help Viewer 2018-04-23 16:32 - 2018-04-23 16:32 - 000000000 ____D C:\Program Files (x86)\HTML Help Workshop 2018-04-23 16:30 - 2018-04-23 16:41 - 000000000 ____D C:\Windows\SysWOW64\1036 2018-04-23 16:30 - 2018-04-23 16:30 - 000000000 ____D C:\Windows\SysWOW64\1033 2018-04-23 16:30 - 2018-04-23 16:30 - 000000000 ____D C:\Windows\system32\1033 2018-04-23 16:29 - 2018-04-23 17:12 - 000000000 ____D C:\Program Files\Microsoft SQL Server 2018-04-23 16:29 - 2018-04-23 17:12 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2018-04-23 16:28 - 2018-04-23 16:28 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2018-04-23 16:20 - 2018-04-23 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012 2018-04-23 16:19 - 2018-04-23 17:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0 2018-04-23 16:19 - 2018-04-23 16:32 - 000000000 ____D C:\Program Files (x86)\MSBuild 2018-04-23 16:19 - 2018-04-23 16:30 - 000000000 ____D C:\Windows\system32\1036 2018-04-23 16:18 - 2018-04-23 17:18 - 000000000 ____D C:\Program Files (x86)\Microsoft SDKs 2018-04-23 16:18 - 2018-04-23 16:18 - 000000000 ____D C:\Windows\symbols 2018-04-23 16:18 - 2018-04-23 16:18 - 000000000 ____D C:\Program Files\Microsoft Visual Studio 11.0 2018-04-23 15:59 - 2018-05-02 11:01 - 000000000 ____D C:\Users\THANOS\Documents\VS_2012 2018-04-23 00:25 - 2018-04-23 00:25 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server 2018-04-23 00:24 - 2018-05-17 15:40 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server 2018-04-23 00:17 - 2018-05-17 23:44 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner 2018-04-22 23:37 - 2018-04-23 00:30 - 000000000 ____D C:\Users\THANOS\AppData\Local\”Ž“”ŠŠ•ˆŽŽ•’‰•‘’‰ŽŒ’‹‰ 2018-04-22 23:19 - 2018-05-13 16:53 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\vlc 2018-04-22 23:13 - 2018-04-22 23:13 - 000000000 ____D C:\Users\THANOS\ultracopier 2018-04-22 23:12 - 2018-05-14 13:49 - 000000000 ____D C:\Program Files\Recuva 2018-04-22 23:12 - 2018-04-25 15:19 - 000000000 ____D C:\Program Files (x86)\SpeedFan 2018-04-22 23:12 - 2018-04-22 23:12 - 000000045 _____ C:\Windows\SysWOW64\initdebug.nfo 2018-04-22 23:12 - 2018-04-22 23:12 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supercopier 2018-04-22 23:12 - 2018-04-22 23:12 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan 2018-04-22 23:12 - 2018-04-22 23:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva 2018-04-22 23:12 - 2018-04-22 23:12 - 000000000 ____D C:\Program Files (x86)\Supercopier 2018-04-22 23:08 - 2018-04-22 23:08 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z 2018-04-22 23:08 - 2018-04-22 23:08 - 000000000 ____D C:\Program Files (x86)\GPU-Z 2018-04-22 23:06 - 2018-05-19 14:11 - 000000000 ____D C:\Windows\SysWOW64\directx 2018-04-22 23:06 - 2018-04-24 23:42 - 000000000 ____D C:\Program Files (x86)\OCCTPT 2018-04-22 23:03 - 2018-05-19 22:13 - 000004210 _____ C:\Windows\System32\Tasks\CCleaner Update 2018-04-22 23:03 - 2018-05-08 09:46 - 000002218 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2018-04-22 23:02 - 2018-04-22 23:03 - 000000000 ____D C:\Program Files\CCleaner 2018-04-22 23:02 - 2018-04-22 23:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2018-04-22 22:53 - 2018-05-19 22:02 - 112984064 _____ C:\Windows\system32\config\SOFTWARE 2018-04-22 22:53 - 2018-05-19 22:02 - 004456448 _____ C:\Windows\system32\config\DEFAULT 2018-04-22 22:53 - 2018-05-19 22:02 - 000036864 _____ C:\Windows\system32\config\SECURITY 2018-04-22 22:53 - 2018-05-09 11:25 - 000081920 _____ C:\Windows\system32\config\SAM 2018-04-22 22:53 - 2018-04-22 22:53 - 067837952 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak 2018-04-22 22:53 - 2018-04-22 22:53 - 000192512 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak 2018-04-22 22:53 - 2018-04-22 22:53 - 000081920 _____ C:\Windows\system32\config\SAM.iodefrag.bak 2018-04-22 22:53 - 2018-04-22 22:53 - 000036864 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak 2018-04-22 21:56 - 2018-05-09 14:44 - 000001139 _____ C:\Users\Public\Desktop\VLC media player.lnk 2018-04-22 21:56 - 2018-05-09 00:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.7 2018-04-22 21:56 - 2018-04-22 21:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2018-04-22 21:55 - 2018-05-09 00:53 - 000000000 ____D C:\Program Files (x86)\Cheat Engine 6.7 2018-04-22 21:55 - 2018-05-02 11:04 - 000000000 ____D C:\Users\THANOS\Documents\My Cheat Tables 2018-04-22 21:55 - 2018-04-22 21:55 - 000000000 ____D C:\Program Files (x86)\VideoLAN 2018-04-22 21:54 - 2018-05-09 01:13 - 000000000 ____D C:\Users\THANOS\AppData\Local\AMD 2018-04-22 21:53 - 2018-04-22 21:53 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\ATI 2018-04-22 21:53 - 2018-04-22 21:53 - 000000000 ____D C:\Users\THANOS\AppData\Local\ATI 2018-04-22 21:53 - 2018-04-22 21:53 - 000000000 ____D C:\ProgramData\ATI 2018-04-22 21:48 - 2018-04-22 21:48 - 000000000 ____D C:\ProgramData\AMD 2018-04-22 21:48 - 2018-04-03 01:27 - 000835064 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2018-04-22 21:48 - 2018-04-03 01:27 - 000179704 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2018-04-22 21:06 - 2018-04-22 21:06 - 000000038 _____ C:\Users\THANOS\Downloads\zip_password (1).txt 2018-04-22 21:03 - 2018-05-19 20:40 - 000004178 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{47A9301F-2053-41D7-9BBC-C4DA249C04D3} 2018-04-22 20:59 - 2018-04-22 20:59 - 000000088 _____ C:\Users\THANOS\Downloads\zip_password.txt 2018-04-22 20:32 - 2018-04-22 20:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2018-04-22 20:32 - 2018-04-22 20:32 - 000000000 ____D C:\Program Files\ATI Technologies 2018-04-22 20:30 - 2018-05-19 20:19 - 000000000 ____D C:\ProgramData\Package Cache 2018-04-22 20:30 - 2018-04-22 20:32 - 000000000 ____D C:\Program Files (x86)\ATI Technologies 2018-04-22 20:29 - 2018-04-22 20:29 - 000000000 _____ C:\Windows\ativpsrm.bin 2018-04-22 20:28 - 2018-04-22 20:29 - 000000000 ____D C:\Program Files\AMD 2018-04-22 20:15 - 2018-04-22 20:15 - 000000919 _____ C:\Users\THANOS\Desktop\BitTorrent.lnk 2018-04-22 20:15 - 2018-04-22 20:15 - 000000899 _____ C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk 2018-04-22 20:04 - 2018-04-22 20:04 - 000002592 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG PC TuneUp.lnk 2018-04-22 20:04 - 2018-04-22 20:04 - 000002580 _____ C:\Users\Public\Desktop\AVG PC TuneUp.lnk 2018-04-22 20:04 - 2018-01-22 13:52 - 000045568 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\TURegOpt.exe 2018-04-22 19:46 - 2018-05-14 17:37 - 000003668 _____ C:\Windows\System32\Tasks\AVG EUpdate Task 2018-04-22 19:45 - 2018-04-22 20:03 - 000000000 ____D C:\Program Files (x86)\AVG 2018-04-22 19:45 - 2018-04-22 19:45 - 000000000 ____D C:\Users\THANOS\AppData\Local\CEF 2018-04-22 19:39 - 2018-04-22 19:39 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome 2018-04-22 19:28 - 2018-04-22 19:28 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Google 2018-04-22 19:22 - 2018-05-07 15:40 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-04-22 19:22 - 2018-04-22 19:22 - 000002332 _____ C:\Users\THANOS\Desktop\Google Chrome.lnk 2018-04-22 19:21 - 2018-04-22 19:21 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Coolmuster 2018-04-22 19:21 - 2018-04-22 19:21 - 000000000 ____D C:\Users\THANOS\.android 2018-04-22 19:20 - 2018-04-22 19:20 - 000001593 _____ C:\Users\THANOS\Desktop\Coolmuster Android Assistant.lnk 2018-04-22 19:20 - 2018-04-22 19:20 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Coolmuster 2018-04-22 19:20 - 2018-04-22 19:20 - 000000000 ____D C:\Program Files (x86)\Coolmuster 2018-04-22 19:18 - 2018-05-19 22:36 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\IDM 2018-04-22 19:18 - 2018-05-19 22:01 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\DMCache 2018-04-22 19:18 - 2018-05-12 15:59 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager 2018-04-22 19:18 - 2018-05-10 15:24 - 000000000 ____D C:\Users\THANOS\Downloads\Compressed 2018-04-22 19:18 - 2018-04-22 19:18 - 000000000 ____D C:\ProgramData\IDM 2018-04-22 19:15 - 2018-05-09 18:43 - 000003574 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2018-04-22 19:15 - 2018-05-09 18:43 - 000003350 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2018-04-22 19:15 - 2018-04-28 17:23 - 000000000 ____D C:\Users\THANOS\AppData\Local\Google 2018-04-22 19:15 - 2018-04-22 19:22 - 000000000 ____D C:\Program Files (x86)\Google 2018-04-22 19:13 - 2018-04-22 19:13 - 009891328 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll 2018-04-22 19:13 - 2018-04-22 19:13 - 000424384 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsUer.sys 2018-04-22 19:13 - 2018-04-22 19:13 - 000093240 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_sata.sys 2018-04-22 19:13 - 2018-04-22 19:13 - 000033336 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amd_xata.sys 2018-04-22 19:12 - 2018-04-22 19:12 - 011761928 _____ (Broadcom Corp) C:\Windows\system32\Drivers\bcmwl63a.sys 2018-04-22 19:12 - 2018-04-22 19:12 - 004151840 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll 2018-04-22 19:12 - 2018-04-22 19:12 - 003796008 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll 2018-04-22 19:12 - 2018-04-22 19:12 - 000161864 _____ (Qualcomm Atheros, Inc.) C:\Windows\system32\Drivers\L1C63x64.sys 2018-04-22 19:06 - 2018-05-08 09:46 - 000002566 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler 2018-04-22 19:06 - 2018-04-22 19:06 - 000000000 ____D C:\Windows\IObit 2018-04-22 19:06 - 2018-04-22 19:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5 2018-04-22 19:04 - 2018-04-22 19:07 - 000000000 ____D C:\Users\THANOS\AppData\Local\MicrosoftEdge 2018-04-22 14:42 - 2018-04-22 14:42 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Apple Computer 2018-04-22 14:42 - 2018-04-22 14:42 - 000000000 ____D C:\Users\THANOS\AppData\Local\Apple Computer 2018-04-22 14:41 - 2018-04-22 14:41 - 000000000 ____D C:\ProgramData\Apple Computer 2018-04-22 14:40 - 2018-04-22 14:40 - 000000000 ____D C:\Users\THANOS\AppData\Local\Apple 2018-04-22 14:40 - 2018-04-22 14:40 - 000000000 ____D C:\Program Files\Common Files\Apple 2018-04-22 14:40 - 2018-04-22 14:40 - 000000000 ____D C:\Program Files\Bonjour 2018-04-22 14:40 - 2018-04-22 14:40 - 000000000 ____D C:\Program Files (x86)\Bonjour 2018-04-22 14:39 - 2018-04-22 14:40 - 000000000 ____D C:\ProgramData\Apple 2018-04-22 14:37 - 2018-04-22 14:37 - 060755968 _____ C:\Windows\system32\config\SOFTWARE.iobit 2018-04-22 14:37 - 2018-04-22 14:37 - 005058560 _____ C:\Windows\system32\config\DRIVERS.iobit 2018-04-22 14:37 - 2018-04-22 14:37 - 000192512 _____ C:\Windows\system32\config\DEFAULT.iobit 2018-04-22 14:37 - 2018-04-22 14:37 - 000081920 _____ C:\Windows\system32\config\SAM.iobit 2018-04-22 14:37 - 2018-04-22 14:37 - 000036864 _____ C:\Windows\system32\config\SECURITY.iobit 2018-04-22 14:37 - 2018-04-22 14:37 - 000000000 ____D C:\Users\THANOS\AppData\Local\PeerDistRepub 2018-04-22 14:30 - 2018-05-08 19:25 - 000000312 _____ C:\Windows\Tasks\Uninstaller_SkipUac_THANOS.job 2018-04-22 14:30 - 2018-05-08 09:46 - 000002246 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_THANOS 2018-04-22 14:30 - 2018-04-22 14:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller 2018-04-22 14:15 - 2018-05-19 22:01 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\BitTorrent 2018-04-22 14:15 - 2018-05-03 19:58 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\CodeBlocks 2018-04-22 14:14 - 2018-05-17 20:25 - 000000000 ____D C:\Windows\Panther 2018-04-22 14:13 - 2018-05-11 09:57 - 000000000 ____D C:\Users\THANOS\Documents\Setup 2018-04-22 13:50 - 2018-05-09 10:30 - 000000000 ____D C:\ProgramData\ProductData 2018-04-22 13:50 - 2018-04-22 13:50 - 000026528 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS 2018-04-22 13:49 - 2018-04-22 14:30 - 000000000 ____D C:\Program Files (x86)\IObit 2018-04-22 13:48 - 2018-04-22 13:48 - 000000000 ____D C:\Windows\Tasks\ImCleanDisabled 2018-04-22 13:47 - 2018-05-12 14:29 - 000000000 ____D C:\ProgramData\IObit 2018-04-22 13:47 - 2018-04-22 14:30 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\IObit 2018-04-22 13:47 - 2018-04-22 13:51 - 000000000 ____D C:\Users\THANOS\AppData\LocalLow\IObit 2018-04-22 13:46 - 2018-04-22 19:10 - 000000000 ____D C:\Users\THANOS\AppData\Local\Comms 2018-04-22 13:44 - 2018-04-22 20:03 - 000000000 ____D C:\Users\THANOS\AppData\Local\AvgSetupLog 2018-04-22 13:44 - 2018-04-22 19:52 - 000000000 ____D C:\ProgramData\Avg 2018-04-22 13:43 - 2018-04-22 13:43 - 000000000 ____D C:\Users\THANOS\AppData\Local\Avg 2018-04-22 13:31 - 2018-05-19 22:18 - 000000000 ___RD C:\Users\THANOS\OneDrive 2018-04-22 13:30 - 2018-04-22 13:30 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2018-04-22 13:29 - 2018-05-18 00:13 - 000000000 ____D C:\Users\THANOS\AppData\Local\Publishers 2018-04-22 13:28 - 2018-05-18 22:44 - 000000000 ____D C:\Users\THANOS\AppData\Local\Packages 2018-04-22 13:28 - 2018-04-28 13:23 - 000000000 ____D C:\Users\THANOS\AppData\Local\VirtualStore 2018-04-22 13:28 - 2018-04-22 19:03 - 000000000 ____D C:\Users\THANOS\AppData\Local\ConnectedDevicesPlatform 2018-04-22 13:28 - 2018-04-22 14:03 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-04-22 13:28 - 2018-04-22 13:28 - 000000000 ____D C:\Users\THANOS\AppData\Roaming\Adobe 2018-04-22 13:28 - 2018-04-22 13:28 - 000000000 ____D C:\Users\THANOS\AppData\Local\TileDataLayer 2018-04-22 13:27 - 2018-05-19 22:14 - 000000000 ____D C:\Users\THANOS 2018-04-22 13:27 - 2018-05-19 22:12 - 001844290 _____ C:\Windows\system32\PerfStringBackup.INI 2018-04-22 13:27 - 2018-04-22 13:27 - 000000020 ___SH C:\Users\THANOS\ntuser.ini 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Voisinage réseau 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Voisinage d'impression 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Modèles 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Mes documents 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Menu Démarrer 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Documents\Mes vidéos 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Documents\Mes images 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\Documents\Ma musique 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2018-04-22 13:27 - 2018-04-22 13:27 - 000000000 _SHDL C:\Users\THANOS\AppData\Local\Historique 2018-04-22 13:25 - 2018-04-22 13:26 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\Packages 2018-04-22 13:25 - 2018-04-22 13:25 - 000000000 ____D C:\Windows\CSC 2018-04-22 13:25 - 2018-04-22 13:25 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\VirtualStore 2018-04-22 13:25 - 2016-07-16 12:41 - 002716672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll 2018-04-22 13:24 - 2018-04-22 13:24 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\TileDataLayer 2018-04-22 13:24 - 2018-04-22 13:24 - 000000000 ____D C:\Users\defaultuser0\AppData\Local\ConnectedDevicesPlatform 2018-04-22 13:23 - 2018-05-08 19:53 - 000000000 ____D C:\Users\defaultuser0 2018-04-22 13:23 - 2018-04-22 13:23 - 000000020 ___SH C:\Users\defaultuser0\ntuser.ini 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Public\Documents\Mes vidéos 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Public\Documents\Mes images 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Public\Documents\Ma musique 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Voisinage réseau 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Voisinage d'impression 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Modèles 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Mes documents 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Menu Démarrer 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Mes vidéos 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Mes images 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\Documents\Ma musique 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\defaultuser0\AppData\Local\Historique 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Voisinage réseau 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Voisinage d'impression 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Modèles 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Mes documents 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Menu Démarrer 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Documents\Mes vidéos 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Documents\Mes images 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\Documents\Ma musique 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historique 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default User\Documents\Mes vidéos 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default User\Documents\Mes images 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default User\Documents\Ma musique 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Users\Default User\AppData\Local\Historique 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\ProgramData\Modèles 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmes 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\ProgramData\Menu Démarrer 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\ProgramData\Bureau 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Program Files\Fichiers communs 2018-04-22 13:23 - 2018-04-22 13:23 - 000000000 _SHDL C:\Documents and Settings 2018-04-22 13:16 - 2018-04-22 13:16 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2018-04-22 13:16 - 2018-04-22 13:16 - 000000000 ____D C:\ProgramData\USOShared 2018-04-22 13:15 - 2018-05-19 22:04 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2018-04-22 13:15 - 2018-05-19 22:04 - 000000000 ____D C:\Windows\system32\SleepStudy 2018-04-22 13:15 - 2018-05-09 10:20 - 000197832 _____ C:\Windows\system32\FNTCACHE.DAT 2018-04-22 13:15 - 2018-04-22 13:15 - 000000000 ____D C:\Windows\ServiceProfiles ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-05-19 22:28 - 2016-07-16 12:45 - 000000000 ____D C:\Windows\INF 2018-05-19 22:17 - 2016-07-16 12:36 - 000000000 ____D C:\Windows\CbsTemp 2018-05-19 22:12 - 2016-07-16 23:40 - 000685894 _____ C:\Windows\system32\perfh00C.dat 2018-05-19 22:12 - 2016-07-16 23:40 - 000141452 _____ C:\Windows\system32\perfc00C.dat 2018-05-19 22:02 - 2016-07-16 07:04 - 000786432 _____ C:\Windows\system32\config\BBI 2018-05-19 20:25 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\AppReadiness 2018-05-19 20:00 - 2016-07-16 12:47 - 000000000 ___HD C:\Program Files\WindowsApps 2018-05-17 20:32 - 2017-12-14 03:53 - 000000000 ___HD C:\$WINDOWS.~BT 2018-05-14 17:54 - 2016-07-16 12:47 - 000000000 ___HD C:\Windows\ELAMBKUP 2018-05-11 09:21 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\LiveKernelReports 2018-05-09 10:20 - 2016-07-16 12:47 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2018-05-09 10:20 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\system32\appraiser 2018-05-09 10:20 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\PolicyDefinitions 2018-05-09 01:36 - 2016-07-16 12:47 - 000000000 ____D C:\Program Files\Windows Defender 2018-05-09 00:30 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\SysWOW64\MUI 2018-05-09 00:30 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\system32\MUI 2018-05-09 00:21 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\system32\NDF 2018-04-27 16:09 - 2018-01-08 11:28 - 000000000 ____D C:\Users\THANOS\Documents\Downloads PDF 2018-04-25 21:27 - 2016-07-16 12:47 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2018-04-25 15:54 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\rescache 2018-04-23 20:41 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\appcompat 2018-04-23 16:16 - 2016-07-16 12:47 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-04-22 14:14 - 2016-07-16 12:47 - 000028672 _____ C:\Windows\system32\config\BCD-Template 2018-04-22 13:27 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\system32\WinBioDatabase 2018-04-22 13:25 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\system32\spool 2018-04-22 13:25 - 2016-07-16 12:47 - 000000000 ____D C:\Windows\system32\FxsTmp 2018-04-22 13:23 - 2016-07-16 12:47 - 000000000 ____D C:\Program Files\Windows NT 2018-04-22 13:19 - 2016-07-16 07:04 - 000000000 ____D C:\Windows\system32\Sysprep 2018-04-22 13:17 - 2016-07-16 12:47 - 000000000 ___RD C:\Windows\PrintDialog 2018-04-22 13:17 - 2016-07-16 12:47 - 000000000 ___RD C:\Windows\MiracastView 2018-04-22 13:16 - 2016-07-16 12:47 - 000000000 ____D C:\ProgramData\USOPrivate 2018-04-22 13:16 - 2016-07-16 07:04 - 000032768 _____ C:\Windows\system32\config\ELAM Fichiers à déplacer ou supprimer: ==================== Certains fichiers dans TEMP: ==================== 2018-05-19 14:11 - 2018-05-19 14:11 - 007850088 _____ (Microsoft Corporation) C:\Users\THANOS\AppData\Local\Temp\BingBarSetup-Partner.exe ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2018-05-15 17:25 ==================== Fin de FRST.txt ============================ Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01 Exécuté par THANOS (19-05-2018 22:40:39) Exécuté depuis C:\Users\THANOS\Downloads\Programs Windows 10 Pro Version 1607 (X64) (2018-04-22 12:24:07) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-1556881994-629194302-2127039984-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1556881994-629194302-2127039984-503 - Limited - Disabled) defaultuser0 (S-1-5-21-1556881994-629194302-2127039984-1000 - Limited - Disabled) => C:\Users\defaultuser0 Invité (S-1-5-21-1556881994-629194302-2127039984-501 - Limited - Disabled) THANOS (S-1-5-21-1556881994-629194302-2127039984-1001 - Administrator - Enabled) => C:\Users\THANOS ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Kaspersky Total Security (Disabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98} AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Kaspersky Total Security (Disabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Total Security (Disabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.20.1165, 21.12.2012 - AIMP DevTeam) Aiseesoft Blu-ray Player 6.5.8 (HKLM-x32\...\{3E1A13C3-E458-4995-BEA6-4B9BE279D502}_is1) (Version: 6.5.8 - Aiseesoft Studio) Apple Application Support (32 bits) (HKLM-x32\...\{543F829B-4591-4B2F-AF63-6E6E6AE59EB2}) (Version: 6.4 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{0ECA3BB5-4410-414B-B226-241FF1C12CD0}) (Version: 6.4 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BD6778C5-6FA5-492A-ADD6-E706339C2A7B}) (Version: 11.0.2.4 - Apple Inc.) Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.) AVG PC TuneUp (HKLM-x32\...\{9C775BB6-1453-45EB-8C78-A5CC5199113D}) (Version: 16.77.3 - AVG Technologies) Hidden AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.77.3.23060 - AVG Technologies) BitTorrent (HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\BitTorrent) (Version: 7.10.3.44397 - BitTorrent Inc.) Blend for Visual Studio 2012 (HKLM-x32\...\{57F20F04-014D-453F-B6A3-AE9485C4DFAB}) (Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 FRA resources (HKLM-x32\...\{C0AD26D9-8705-42E7-BD41-BE7E95A7DC31}) (Version: 5.0.30709.0 - Microsoft Corporation) Hidden BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 4.0.1.98 - BlueStack Systems, Inc.) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Brave (HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Brave) (Version: 0.22.714 - Brave Software) ByteFence Anti-Malware (HKLM-x32\...\ByteFence) (Version: 3.19.0.0 - Byte Technologies LLC) <==== ATTENTION CCleaner (HKLM\...\CCleaner) (Version: 5.42 - Piriform) Charity Engine (HKLM\...\{A7D31CBC-80AF-4E68-83D7-20D01917C034}) (Version: 7.6.33 - Charity Engine) Cheat Engine 6.7 (HKLM-x32\...\Cheat Engine 6.7_is1) (Version: - Cheat Engine) CodeBlocks (HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\CodeBlocks) (Version: 17.12 - The Code::Blocks Team) Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 45.9.12.393 - Comodo) Composants requis pour SSDT (HKLM-x32\...\{ACFCFF42-CA92-499C-8549-CC7A05CBEC34}) (Version: 11.0.2100.60 - Microsoft Corporation) Connectify 2018 (HKLM\...\Connectify) (Version: 2018.2.1.38980 - Connectify) Connection Booster 4.0.0.0 (HKLM-x32\...\Connection Booster_is1) (Version: 4.0.0.0 - TRACKZAPPER.COM) Coolmuster Android Assistant (HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\Coolmuster Android Assistant) (Version: 4.0.46 - Coolmuster) CPUID CPU-Z 1.84 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.84 - CPUID, Inc.) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.8.0.0410 - Disc Soft Ltd) DAEMON Tools Ultra (HKLM\...\DAEMON Tools Ultra) (Version: 5.3.0.0717 - Disc Soft Ltd) Dotfuscator and Analytics Community Edition (HKLM-x32\...\{372D17F6-A54E-4A01-B264-1314890FFE61}) (Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Driver Booster 5 (HKLM-x32\...\Driver Booster_is1) (Version: 5.2.0 - IObit) DriverToolkit version 8.5.1.0 (HKLM-x32\...\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1) (Version: 8.5.1.0 - Megaify Software) ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.) Entity Framework Designer pour Visual Studio 2012 - FRA (HKLM-x32\...\{7A1D7D34-8463-4261-8B97-425385649EF3}) (Version: 11.1.20702.00 - Microsoft Corporation) eRclient 2.0.10.210 (HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\{5CBD4386-2DE5-43A2-AED7-E690BF9B0F04}_is1) (Version: 2.0.10.210 - eRmail Company Ltd.) Facebook (HKLM-x32\...\Facebook) (Version: - ) Fallout 3 (HKLM-x32\...\{974C4B12-4D02-4879-85E0-61C95CC63E9E}) (Version: 1.00.0000 - Bethesda Softworks) FMW 1 (HKLM\...\{DC2A8E3D-D5E1-4837-A2E0-C308100AC412}) (Version: 1.143.3 - AVG Technologies) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 66.0.3359.139 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Halo Spartan Strike (HKLM-x32\...\Halo Spartan Strike_is1) (Version: - ) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Hotspot Shield 7.6.4 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925C187EDD1}) (Version: 7.6.4.10926 - AnchorFree Inc.) Hidden Hotspot Shield 7.6.4 (HKLM-x32\...\{cf9b6026-00eb-468c-a903-1f509496b033}) (Version: 7.6.4.10926 - AnchorFree Inc.) Hotspot Shield 7.6.4 (HKLM-x32\...\HotspotShield) (Version: 7.6.4 - AnchorFree Inc.) Hidden ICB2000 (HKLM-x32\...\ICB2000) (Version: - ) IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - ) Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 6.1.0.418 - IObit) iTunes (HKLM\...\{D9F2859F-0703-4B9A-B52D-2B2D49B8E5F0}) (Version: 12.7.4.76 - Apple Inc.) Kaspersky Secure Connection (HKLM-x32\...\{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab) Hidden Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F33C0717-8E04-4EB5-90C8-47221287DB4F}) (Version: 18.0.0.405 - Kaspersky Lab) Kaspersky Total Security (HKLM-x32\...\{5AAE61FF-858E-453E-B8F3-944618149975}) (Version: 18.0.0.405 - Kaspersky Lab) Hidden Kaspersky Total Security (HKLM-x32\...\InstallWIX_{5AAE61FF-858E-453E-B8F3-944618149975}) (Version: 18.0.0.405 - Kaspersky Lab) LocalESPC (HKLM-x32\...\{BDBE5D2A-AAB7-77BD-7A0E-5006665CE7C6}) (Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for fr-fr (HKLM-x32\...\{19237788-1FD2-E24E-8B1F-AED171DC45D1}) (Version: 8.59.25584 - Microsoft) Hidden Malwarebytes version 3.4.5.2467 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.4.5.2467 - Malwarebytes) Media Player Codec Pack 4.4.5 (HKLM-x32\...\Media Player - Codec Pack) (Version: 4.4.5 - Media Player Codec Pack) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK - Module linguistique FRA (HKLM-x32\...\{4FAE80E1-52F1-4935-A6E8-8DE86015405E}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft ASP.NET MVC 3 - FRA (HKLM-x32\...\{5089FF2D-0F04-419B-AFC2-480D6FC7F432}) (Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET MVC 3 (HKLM-x32\...\{DCDEC776-BADD-48B9-8F9A-DFF513C3D7FA}) (Version: 3.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages - FRA (HKLM-x32\...\{388504F3-64E3-47DC-9F31-C77E44422C53}) (Version: 1.0.20105.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\OneDriveSetup.exe) (Version: 18.065.0329.0002 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK - Français (HKLM-x32\...\{C7954680-C2B0-4DA7-B0D6-3E2F69D663D7}) (Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK - FRA (HKLM-x32\...\{80125E8C-304D-4637-974A-2547049B0E24}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 FRA (HKLM\...\{0D4447E0-A261-43A4-AEBC-F76E983901F0}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - FRA (11.1.20627.00) (HKLM-x32\...\{355E0B27-5793-4EA0-BA60-FF5063F5D548}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - FRA (11.1.20627.00) (HKLM-x32\...\{6B113D3D-9A56-4512-99A9-E4E162A42600}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{BA8F11CD-E097-41EA-978B-8AA92C9257DF}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{219B85B1-DC23-4688-9A74-CA0B04CF8E06}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{7ED75AD8-67AD-45FC-BE11-DE363DA14F71}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{BECA0B13-6542-4D6B-AB50-C06AD0E3C7A9}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{8E644828-091F-46AF-A2A0-350962A5C585}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{9AE5C049-78D8-49C9-99AD-21AEA2E66940}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{72A76BA4-FB83-4204-A322-AA1ED7E09856}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{67F01854-264E-44E4-9434-1107741573AA}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft System CLR Types pour SQL Server 2012 (x64) (HKLM\...\{D83F1047-B5E4-49DE-B8CF-3AC6121B27C2}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable - x64 8.0.61000 (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Microsoft Visual C++ 2017 x64 Additional Runtime - 14.12.25711 (HKLM\...\{7D02C46E-2953-3EB1-A5D5-7943C9D7684F}) (Version: 14.12.25711 - Microsoft Corporation) Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.12.25711 (HKLM\...\{043D5787-5988-3DE2-928D-3B6A75E2126E}) (Version: 14.12.25711 - Microsoft Corporation) Microsoft Visual C++ 2017 x86 Additional Runtime - 14.12.25711 (HKLM-x32\...\{8FDCF95F-4756-34F4-9DA2-D708E7FAC504}) (Version: 14.12.25711 - Microsoft Corporation) Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.12.25711 (HKLM-x32\...\{6E894015-A182-3C1E-A7D2-3032CB2E1D43}) (Version: 14.12.25711 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{FD9D64F4-CAF5-3D23-845A-B843C78CC1A5}) (Version: 10.0.60830 - Microsoft Corporation) Microsoft Visual Studio Professional 2012 (HKLM-x32\...\{088bb946-f103-40c4-bb9a-8520059af2e3}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - FRA (HKLM-x32\...\{C76D761C-FF45-442C-A3BA-601C4E1167FD}) (Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Platform Installer 4.0 (HKLM\...\{E2B8249D-895C-4685-8C83-00F3B1A13028}) (Version: 4.0.1622 - Microsoft Corporation) Module linguistique de Dotfuscator and Analytics Community Edition (HKLM-x32\...\{4B9F673F-EBCA-4E5B-ADD7-FB1138862C44}) (Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA (HKLM-x32\...\{8E2132F6-071A-3768-8691-B7D12FD7531D}) (Version: 2.0.50727 - Microsoft Corporation) Hidden Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA (HKLM-x32\...\Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA) (Version: 2.0.50727 - Microsoft Corporation) Module linguistique de Microsoft Visual Studio Team Foundation Server 2012 Team Explorer - FRA (HKLM-x32\...\{87DB5F90-741F-3099-9EE5-F9EE09DAF8EB}) (Version: 11.0.50727 - Microsoft Corporation) Hidden Module linguistique des outils de développement SharePoint de Microsoft Visual Studio 2012 - FRA (HKLM-x32\...\{42753F92-8D95-38AE-99FE-28059C0E75A1}) (Version: 11.0.50727 - Microsoft Corporation) Hidden Module linguistique du modèle objet Microsoft Visual Studio Team Foundation Server 2012 - FRA (HKLM\...\{4BA559C6-2B30-3583-B9B9-D51DAD6D2D8C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.31125 - Microsoft Corporation) Module Microsoft Report Viewer pour Visual Studio 2012 (HKLM-x32\...\{BAD4734F-5B17-49A5-AE47-DB474B0D224F}) (Version: 11.1.2802.16 - Microsoft Corporation) Hidden Oracle VM VirtualBox 5.2.6 (HKLM\...\{E4157798-7F79-4E27-84A0-A6BF96607F47}) (Version: 5.2.6 - Oracle Corporation) osrss (HKLM-x32\...\{1BA1133B-1C7A-41A0-8CBF-9B993E63D296}) (Version: 1.0.0 - Microsoft Corporation) Hidden Plants vs Zombies 2012 Final Full PC Version (HKLM-x32\...\Plants vs Zombies 2012 Final Full PC Version) (Version: Full PC Version - TheBestGamesOnlineFree.com) PreEmptive Analytics Client French Language Pack (HKLM-x32\...\{A9514D8B-004D-4685-A1CF-ACFD30EBD238}) (Version: 1.0.2180.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (HKLM-x32\...\{2C76E3DA-BA76-4FAD-B1B1-72B46D639028}) (Version: 1.0.2180.1 - PreEmptive Solutions) Hidden Qbundle (HKLM\...\{0540EC0F-A81A-45AC-81F8-90A049F44D5A}) (Version: 2.0.2 - Quibus) Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform) Ressources de Microsoft Visual Studio 2012 Shell (minimum) (HKLM-x32\...\{86D21009-57A1-422B-9BE2-14C1A2800C54}) (Version: 11.0.50727 - Microsoft Corporation) Hidden Ressources Devenv de Microsoft Visual Studio 2012 (HKLM-x32\...\{95CA275D-B868-4053-9FDC-AED819C49B11}) (Version: 11.0.50727 - Microsoft Corporation) Hidden reWASD (HKLM\...\reWASD) (Version: 3.0.0.0418 - Disc Soft Ltd) RivaTuner Statistics Server 7.0.2 (HKLM-x32\...\RTSS) (Version: 7.0.2 - Unwinder) Service de langage T-SQL Microsoft SQL Server 2012 (HKLM-x32\...\{ED52EFE2-8820-41FD-B66A-FD14C2DEAE0D}) (Version: 11.0.2100.60 - Microsoft Corporation) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Supercopier 1.2.3.6 (HKLM-x32\...\Supercopier) (Version: 1.2.3.6 - Supercopier) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.9.0 - Synaptics Incorporated) TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - ) TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp) The KMPlayer 3.5.0.81 with LAV Filters (HKLM-x32\...\{ACBA5A14-2D62-4820-8206-D768C74C1E10}_is1) (Version: - ©7sh3. (Сборка от 08.03.2013)) Types CLR du système Microsoft pour SQL Server 2012 (HKLM-x32\...\{7927D9E5-963C-4AE1-8419-544D0D454435}) (Version: 11.0.2100.60 - Microsoft Corporation) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{DA171DF3-18B3-446E-BCA6-C08069850FD2}) (Version: 2.36.0.0 - Microsoft Corporation) Utilitaires ligne de comm. Microsoft SQL Server 2012 (HKLM\...\{9DD91EA7-B148-4059-8152-BD4605EECBC6}) (Version: 11.0.2100.60 - Microsoft Corporation) Version préparatoire de Microsoft Visual Studio 2012 (HKLM-x32\...\{793BCA3C-36EE-4FCD-90C8-4E6B4B48443B}) (Version: 11.0.50727 - Microsoft Corporation) Hidden Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.2 - VideoLAN) WCF Data Services 5.0 (for OData v3) FRA Language Pack (HKLM-x32\...\{BF9DC8DC-0891-405A-9AFC-21F1D10FBDB0}) (Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services 5.0 (for OData v3) Primary Components (HKLM-x32\...\{0BCC836F-0B28-4090-B58A-64883BAA3B2F}) (Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (HKLM-x32\...\{148878BD-A2A5-4CF1-A103-2BA632F41953}) (Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Visual Studio 11 FRA Language Pack (HKLM-x32\...\{73105938-42A2-457F-9E9D-DB9514BE89E2}) (Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation) Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - ) WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-1556881994-629194302-2127039984-1001_Classes\CLSID\{68D44A27-FFB6-4B89-A3E5-7B0E50A7AB33}\InprocServer32 -> C:\Program Files (x86)\Supercopier\PluginLoader\catchcopy-v0002\catchcopy32.dll () CustomCLSID: HKU\S-1-5-21-1556881994-629194302-2127039984-1001_Classes\CLSID\{68FF37C4-51BC-4C2A-A992-7E39BC0E706F}\InprocServer32 -> C:\Program Files (x86)\Supercopier\PluginLoader\catchcopy-v0002\catchcopy64.dll () ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2018-03-30] (Tonec Inc.) ContextMenuHandlers1: [AVG Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\AVG\AVG PC TuneUp\SDShelEx-x64.dll [2018-01-22] (AVG Technologies CZ, s.r.o.) ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2016-05-23] (IObit) ContextMenuHandlers1: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\ShellEx.dll [2018-05-14] (AO Kaspersky Lab) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-04-03] (Disc Soft Ltd) ContextMenuHandlers2: [DaemonShellExtDriveUltra] -> {F0E53CA3-02F8-40AE-9470-309F0309036F} => C:\Program Files\DAEMON Tools Ultra\DTShl64.dll [2018-02-15] (Disc Soft Ltd) ContextMenuHandlers2: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\ShellEx.dll [2018-05-14] (AO Kaspersky Lab) ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-04-03] (Disc Soft Ltd) ContextMenuHandlers3: [DaemonShellExtImageUltra] -> {B5EBA666-2B94-4C7A-9CAA-A4539F329646} => C:\Program Files\DAEMON Tools Ultra\DTShl64.dll [2018-02-15] (Disc Soft Ltd) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes) ContextMenuHandlers4: [AVG Disk Space Explorer Shell Extension] -> {4838CD50-7E5D-4811-9B17-C47A85539F28} => C:\Program Files (x86)\AVG\AVG PC TuneUp\DseShExt-x64.dll [2018-01-22] (AVG Technologies CZ, s.r.o.) ContextMenuHandlers4: [AVG Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\AVG\AVG PC TuneUp\SDShelEx-x64.dll [2018-01-22] (AVG Technologies CZ, s.r.o.) ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2016-05-23] (IObit) ContextMenuHandlers4: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\ShellEx.dll [2018-05-14] (AO Kaspersky Lab) ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2015-08-21] (Advanced Micro Devices, Inc.) ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2016-05-23] (IObit) ContextMenuHandlers6: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\ShellEx.dll [2018-05-14] (AO Kaspersky Lab) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-03-27] (Malwarebytes) ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0DB0751D-5652-4B54-B9CF-0E07E7E66D49} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-1\MpCmdRun.exe [2018-05-09] (Microsoft Corporation) Task: {1175B5D3-DD63-4658-BE8A-CAAD0913D211} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe Task: {1C8C7F34-9E1A-4314-B3D8-7B11A9C465DB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-04-22] (Google Inc.) Task: {3705A28A-2B6F-4B29-A9BD-D942C7CB9725} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-03-06] (Piriform Ltd) Task: {51A60E13-C3A4-4516-8A49-C4BEC51CE69E} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\Scheduler.exe [2017-12-11] (IObit) Task: {5FA88D36-F866-4BC1-8226-D2BA9CB177F6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-1\MpCmdRun.exe [2018-05-09] (Microsoft Corporation) Task: {60CE962A-8B56-43BD-AF50-7DD38653100C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-1\MpCmdRun.exe [2018-05-09] (Microsoft Corporation) Task: {6B974FC3-22FD-4D2E-9B60-CB7852F9481D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2018-01-08] (Apple Inc.) Task: {8678C1C1-B20D-439F-A547-81090445F589} - System32\Tasks\Uninstaller_SkipUac_THANOS => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2016-11-04] (IObit) Task: {91442B7C-1A4F-4FF7-95E2-0C06C8CD3A59} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-04-12] (Piriform Ltd) Task: {A1EF1D65-E595-4B45-8C27-5E9F9C50024E} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2018-01-22] (AVG Technologies CZ, s.r.o.) Task: {A8203F89-CFA6-4F67-9BBF-CC686D4095AB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-04-22] (Google Inc.) Task: {A9AAEE2D-D7B6-43BE-A231-2201400A6EC3} - System32\Tasks\Driver Booster SkipUAC (THANOS) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe [2018-01-11] (IObit) Task: {C2FFEF00-80E1-47C0-9AF0-34AAF4280EF6} - System32\Tasks\{E7AFD0DE-28BB-44F0-A31A-8745BB3FA604} => C:\Windows\system32\pcalua.exe -a C:\Users\THANOS\Downloads\Compressed\icb2000\ICB2000.exe -d C:\Users\THANOS\Downloads\Compressed\icb2000 Task: {D27A908D-B7D6-4F8C-971E-C35A56D65E84} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe Task: {FCEB7AAC-60F2-4BAC-A897-1D45996FA195} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.14.17639.18041-1\MpCmdRun.exe [2018-05-09] (Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\Windows\Tasks\Uninstaller_SkipUac_THANOS.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\THANOS\Desktop\Facebook.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxps://www.facebook.com/campaign/landing.php?campaign_id=572665646222743&placement=Model 1-16&creative=OIB&keyword=9LdrLcKbTla25j8owO4%2BVMWdPSinrWtkvOw%2FIbnuOiC57DwisOo2JbHtKX%2FnuGpivJhuc%2BS8YH%2FqgVh1479%2FYKe9fXOy7DIjsug2KbjtPCSz%2FlEAAACB3g8Q&e ShortcutWithArgument: C:\Users\THANOS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook\Facebook.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxps://www.facebook.com/campaign/landing.php?campaign_id=572665646222743&placement=Model 1-16&creative=OIB&keyword=9LdrLcKbTla25j8owO4%2BVMWdPSinrWtkvOw%2FIbnuOiC57DwisOo2JbHtKX%2FnuGpivJhuc%2BS8YH%2FqgVh1479%2FYKe9fXOy7DIjsug2KbjtPCSz%2FlEAAACB3g8Q&e ==================== Modules chargés (Avec liste blanche) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 000231424 _____ () C:\Windows\SYSTEM32\ism32k.dll 2016-07-16 12:42 - 2016-07-16 12:42 - 002681200 _____ () C:\Windows\system32\CoreUIComponents.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 004046848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Signals.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 002438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 001400320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 009761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2018-03-28 16:05 - 2018-03-28 16:05 - 000088888 _____ () C:\Program Files\iTunes\zlib1.dll 2018-03-28 16:05 - 2018-03-28 16:05 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll 2018-05-12 00:51 - 2018-05-12 01:03 - 000012336 _____ () C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\MusixmatchStartupLauncher.exe 2017-01-26 21:56 - 2017-01-26 21:56 - 000894416 _____ () C:\Windows\SysWOW64\Codecs\TrayMenu.exe 2016-12-10 23:24 - 2017-08-19 11:51 - 028425728 ____N () C:\Users\THANOS\AppData\Local\Temp\Rar$EXa4196.30098\Bitradio-qt-v1001.exe 2018-01-10 17:11 - 2018-01-10 17:11 - 000106496 _____ () C:\Program Files\BOINC\zlib1.dll 2018-04-12 21:15 - 2018-04-12 21:15 - 000096248 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll 2018-05-07 15:40 - 2018-04-26 04:14 - 004443992 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.139\libglesv2.dll 2018-05-07 15:40 - 2018-04-26 04:14 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.139\libegl.dll 2015-08-21 21:09 - 2015-08-21 21:09 - 000102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2018-05-19 22:10 - 2018-05-19 22:10 - 000025648 _____ () C:\Users\THANOS\.musixmatch\WMPRemoteStandalone.exe 2016-07-16 12:42 - 2016-07-16 12:42 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2016-07-16 12:43 - 2016-07-16 12:43 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2016-07-16 12:43 - 2016-07-16 12:43 - 000693248 _____ () C:\Windows\ShellExperiences\MtcUvc.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 001033728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2018-05-16 22:07 - 2018-05-16 22:08 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1813.286.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-05-16 22:07 - 2018-05-16 22:08 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1813.286.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 001475584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.IntentExtraction.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 000114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 000115712 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\DeviceSideServicesActionUriHandler.dll 2016-07-16 12:43 - 2016-07-16 23:45 - 000522752 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.NodeWinrtWrap.dll 2016-07-16 12:43 - 2016-07-16 23:46 - 000040448 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\winrt-projections\bin\Winrt_Projections.node 2016-07-16 12:43 - 2016-07-16 23:45 - 000813056 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http\bin\NodeRT_Windows_Web_Http.node 2016-07-16 12:43 - 2016-07-16 23:45 - 000963584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.headers\bin\NodeRT_Windows_Web_Http_Headers.node 2016-07-16 12:43 - 2016-07-16 23:45 - 000249344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.filters\bin\NodeRT_Windows_Web_Http_Filters.node 2016-07-16 12:43 - 2016-07-16 23:45 - 000572416 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.storage.streams\bin\NodeRT_Windows_Storage_Streams.node 2016-07-16 12:43 - 2016-07-16 23:46 - 000403968 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.foundation\bin\NodeRT_Windows_Foundation.node 2016-07-16 12:43 - 2016-07-16 23:46 - 003378528 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentDeliveryManager.Background.dll 2016-07-16 12:43 - 2016-07-16 23:46 - 002263904 _____ () C:\Windows\SystemApps\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\ContentManagementSDK.dll 2018-05-16 20:10 - 2018-05-16 20:10 - 003099520 _____ () C:\Users\THANOS\Downloads\Programs\ZHPDiag3.exe 2018-05-14 17:57 - 2018-05-14 17:57 - 000836968 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\kpcengine.2.3.dll 2018-04-30 21:44 - 2018-01-29 18:50 - 000915512 _____ () C:\Program Files (x86)\Connectify\log4cplus.dll 2016-01-02 00:00 - 2016-01-02 00:00 - 001026574 _____ () C:\Program Files (x86)\Supercopier\libstdc++-6.dll 2016-01-02 00:00 - 2016-01-02 00:00 - 000119822 _____ () C:\Program Files (x86)\Supercopier\libgcc_s_dw2-1.dll 2018-04-22 19:45 - 2018-04-22 19:44 - 048920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll 2018-05-12 00:51 - 2018-05-12 01:03 - 001875968 _____ () C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\ffmpeg.dll 2018-05-12 00:51 - 2018-05-12 01:03 - 000100352 _____ () \\?\C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\resources\app.asar.unpacked\node_modules\@manual\edge\build\Release\edge_nativeclr.node 2018-05-12 00:51 - 2018-05-12 01:03 - 001922048 _____ () C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\libglesv2.dll 2018-05-12 00:51 - 2018-05-12 01:03 - 000079872 _____ () C:\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\libegl.dll 2018-04-25 02:00 - 2018-04-25 02:00 - 000475136 _____ () C:\Program Files (x86)\AIMP3\Sqlite3.dll 2018-04-25 02:00 - 2018-04-25 02:00 - 000220672 _____ () C:\Program Files (x86)\AIMP3\Modules\MACDll.dll 2018-04-25 02:00 - 2018-04-25 02:00 - 000155648 _____ () C:\Program Files (x86)\AIMP3\Modules\libFLAC.dll 2018-04-25 02:00 - 2018-04-25 02:00 - 001733120 _____ () C:\Program Files (x86)\AIMP3\Modules\aimp_libvorbis.dll 2013-09-16 22:34 - 2013-09-17 01:46 - 000602474 _____ () C:\Users\THANOS\AppData\Local\Temp\Rar$EXa10816.8117\cintrepair\CIntRep.exe 2018-04-25 01:58 - 2013-03-08 17:00 - 007833552 _____ () C:\Program Files (x86)\KMPlayer\avcodec-lav-54.dll 2018-04-25 01:58 - 2013-03-08 17:00 - 000247920 _____ () C:\Program Files (x86)\KMPlayer\avutil-lav-52.dll 2018-04-25 01:58 - 2013-03-08 17:00 - 000169888 _____ () C:\Program Files (x86)\KMPlayer\avfilter-lav-3.dll 2018-04-25 01:58 - 2013-03-08 17:00 - 000384472 _____ () C:\Program Files (x86)\KMPlayer\swscale-lav-2.dll 2018-04-25 01:58 - 2013-03-08 17:00 - 004548096 _____ () C:\Program Files (x86)\KMPlayer\libcodec.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2016-07-16 12:47 - 2016-07-16 12:45 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-1556881994-629194302-2127039984-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-21-1556881994-629194302-2127039984-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\THANOS\Desktop\Pinterest_files\1e9e394947bfe0823a3d20a03cb57045.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\Services: AMD External Events Utility => 2 MSCONFIG\Services: AMD FUEL Service => 2 MSCONFIG\Services: Apple Mobile Device Service => 2 MSCONFIG\Services: avgsvc => 2 MSCONFIG\Services: Bonjour Service => 3 MSCONFIG\Services: Connectify => 2 MSCONFIG\Services: Disc Soft Lite Bus Service => 3 MSCONFIG\Services: Disc Soft Ultra Bus Service => 3 MSCONFIG\Services: DragonUpdater => 2 MSCONFIG\Services: ETDService => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: IObitUnSvr => 2 MSCONFIG\Services: iPod Service => 3 MSCONFIG\Services: KSDE2.0.0 => 2 MSCONFIG\Services: MBAMService => 2 MSCONFIG\Services: reWASDService => 2 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\Services: TuneUp.UtilitiesSvc => 2 HKLM\...\StartupApproved\Run: => "WindowsDefender" HKU\S-1-5-21-1556881994-629194302-2127039984-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_24375C529D5A775B339B93C6D8AEC220" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [TCP Query User{9B95BCB3-623B-4FE1-AD23-25DE8A04D325}D:\users\aziz\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) D:\users\aziz\appdata\roaming\bittorrent\bittorrent.exe FirewallRules: [UDP Query User{8426B3FC-C2E5-4FBA-B100-46401994EA43}D:\users\aziz\appdata\roaming\bittorrent\bittorrent.exe] => (Allow) D:\users\aziz\appdata\roaming\bittorrent\bittorrent.exe FirewallRules: [{A7FACF81-AE45-443B-B138-DF75A4B85CD5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{62E5C910-F700-4FF2-B254-C6035CBF5105}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{502E15CE-FCFB-4539-8759-E5D6CCE5D8D5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{8A4025FB-B5C7-4278-9A5C-9758FFB6F5F8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{B212E56E-6DE1-402C-ADFB-CAB3C3B95B2E}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe FirewallRules: [{D05106E7-4759-4DCE-A0C2-64B0E9584D30}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe FirewallRules: [{021798FB-383F-4EB1-A17A-856CD483F5AB}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DBDownloader.exe FirewallRules: [{74A1092F-FCFE-4F33-988C-30DDF5E10754}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DBDownloader.exe FirewallRules: [{73027930-72B7-40F1-B5BD-E5BA34C16042}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\AutoUpdate.exe FirewallRules: [{638B0244-AD40-4145-9E93-7C22E737C0C1}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.2.0\AutoUpdate.exe FirewallRules: [{10E85658-A73E-486E-8767-BB76DC927513}] => (Allow) C:\Users\THANOS\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{E73371AC-EC86-492C-8263-AA46619740E4}] => (Allow) C:\Users\THANOS\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{F0C2E40A-FB25-4C76-B42E-F5C1B8525464}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe FirewallRules: [{62143417-5962-4460-AAB3-D4D63854EA66}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe FirewallRules: [TCP Query User{774D44BE-59E6-485E-9FF2-23F0B0CC2989}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [UDP Query User{588D8696-3456-4968-8FA1-C23242BCBD97}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [{D5661EBA-617E-45A8-8F7E-17766DD6A83D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{4F9C1801-749D-4F71-9C59-52893FD925FB}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe FirewallRules: [{1CCF45B9-1F56-4BC5-9196-D085AF69CB9D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6B6529A7-54E9-4859-B1C3-0F3ED1055423}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{25B362CE-4E85-45A5-BA8E-2C7ECBCC9E7D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{0B29AC58-A2E7-4597-9BB5-90F4CBCBF086}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{74C12F91-34BA-4DF8-901C-866A6ECE7856}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{C4BBD733-7C76-4AC1-ADFE-2E7478D26185}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{84BB631C-3BD2-45E9-9858-52292B38D61E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{D054F4B3-9057-45DF-A81B-6070CE64EDE9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{70170E68-A188-410E-B26A-F1A342ED356C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{7CD616C0-6105-46DD-8212-5FEC00DFDB93}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{507B64F8-59E8-400C-8550-2C4414DD177A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{6C20902E-4C12-4AAF-8B5A-AF1494E6EF91}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{BB0CD380-2ED2-4530-A9D9-5C5B06645119}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{6FDCBFF7-5D94-4743-AAC0-13556635918C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{D9D2B984-58CE-4DC1-BA0E-154AF383F4ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{D538F7B8-0B0D-4CB3-9984-BC717160335C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{5696FC43-729C-448C-BAC3-343A593E842B}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe FirewallRules: [{5CDA66F7-14D5-4508-A8C2-00540105B744}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [{61D60469-45A4-4233-AE46-978EF5062EA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PlanetSide 2\LaunchPad.exe FirewallRules: [{A14F28DC-8FBD-4844-944E-25D47BEFD030}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [TCP Query User{51ED8456-65C8-43E1-B33C-6AF73F198B03}C:\users\thanos\appdata\local\temp\rar$exa4196.30098\bitradio-qt-v1001.exe] => (Allow) C:\users\thanos\appdata\local\temp\rar$exa4196.30098\bitradio-qt-v1001.exe FirewallRules: [UDP Query User{31E7C1B6-88C6-4760-82B6-231EFDB315E1}C:\users\thanos\appdata\local\temp\rar$exa4196.30098\bitradio-qt-v1001.exe] => (Allow) C:\users\thanos\appdata\local\temp\rar$exa4196.30098\bitradio-qt-v1001.exe ==================== Points de restauration ========================= ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (05/19/2018 10:45:18 PM) (Source: VSS) (EventID: 12292) (User: ) Description: Erreur du service de cliché instantané des volumes : erreur lors de la création de la classe COM du fournisseur de cliché instantané avec CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070422, Le service ne peut pas être démarré parce qu’il est désactivé ou qu’aucun périphérique activé ne lui est associé. ]. Opération : Obtenir une interface pouvant être appelée pour ce fournisseur Afficher la liste des interfaces pour tous les fournisseurs prenant en charge ce contexte Interroger des clichés instantanés Contexte : ID du fournisseur: {b5946137-7b9f-4925-af80-51abd60b20d5} ID de classe: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} Contexte de l’instantané: 13 Contexte de l’instantané: 13 Contexte d’exécution: Coordinator Error: (05/19/2018 10:45:18 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} et de nom SW_PROV. [0x80070422, Le service ne peut pas être démarré parce qu’il est désactivé ou qu’aucun périphérique activé ne lui est associé. ] Opération : Obtenir une interface pouvant être appelée pour ce fournisseur Afficher la liste des interfaces pour tous les fournisseurs prenant en charge ce contexte Interroger des clichés instantanés Contexte : ID du fournisseur: {b5946137-7b9f-4925-af80-51abd60b20d5} ID de classe: {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} Contexte de l’instantané: 13 Contexte de l’instantané: 13 Contexte d’exécution: Coordinator Error: (05/19/2018 10:44:22 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code d’état. Error: (05/19/2018 10:44:20 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « MSDTC » dans la DLL « C:\Windows\system32\msdtcuiu.DLL ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Error: (05/19/2018 10:44:12 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « Lsa » dans la DLL « C:\Windows\System32\Secur32.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Error: (05/19/2018 10:44:12 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « ESENT » dans la DLL « C:\Windows\system32\esentprf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Error: (05/19/2018 10:44:12 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Error: (05/19/2018 10:44:12 PM) (Source: Perflib) (EventID: 1018) (User: ) Description: La collecte des données des compteurs de performance a été désactivée pour cette session à partir du service « ASP.NET_64_2.0.50727 » car la bibliothèque de compteurs de performance pour ce service a généré une ou plusieurs erreurs. Les erreurs à l’origine de cette action ont été écrites dans le journal des événements des applications. Erreurs système: ============= Error: (05/19/2018 10:30:34 PM) (Source: DCOM) (EventID: 10029) (User: AUTORITE NT) Description: L’activation du CLSID {E60687F7-01A1-40AA-86AC-DB1CBF673334} a dépassé le délai imparti en attendant l’arrêt du service wuauserv. Error: (05/19/2018 10:14:40 PM) (Source: DCOM) (EventID: 10010) (User: THANOS) Description: Le serveur App ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/19/2018 10:08:02 PM) (Source: DCOM) (EventID: 10010) (User: THANOS) Description: Le serveur {21F282D1-A881-49E1-9A3A-26E44E39B86C} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/19/2018 10:06:55 PM) (Source: DCOM) (EventID: 10010) (User: THANOS) Description: Le serveur App ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/19/2018 10:05:56 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} et l’APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (05/19/2018 10:05:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service hshld n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (05/19/2018 10:05:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service hshld. Error: (05/19/2018 10:05:11 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service HiPatchService. Windows Defender: =================================== Date: 2018-05-09 00:50:47.214 Description: Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : http://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDropper:Win32/Kaymundler.C&threatid=2147709830&enterprise=0 Nom : TrojanDropper:Win32/Kaymundler.C ID : 2147709830 Gravité : Grave Catégorie : Programme malveillant de diffusion de chevaux de Troie Chemin : file:_C:\Users\THANOS\Documents\Setup\KMSPico 10.2.1\KMSPico 10.2.1.exe Origine de la détection : Ordinateur local Type de détection : Chemin rapide Source de détection : Système Utilisateur : AUTORITE NT\Système Nom du processus : C:\Windows\explorer.exe Version de la signature : AV: 1.267.523.0, AS: 1.267.523.0, NIS: 119.0.0.0 Version du moteur : AM: 1.1.14800.3, NIS: 2.1.14600.4 Date: 2018-05-09 00:27:45.011 Description: Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : http://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDropper:Win32/Kaymundler.C&threatid=2147709830&enterprise=0 Nom : TrojanDropper:Win32/Kaymundler.C ID : 2147709830 Gravité : Grave Catégorie : Programme malveillant de diffusion de chevaux de Troie Chemin : file:_C:\Users\THANOS\Documents\Setup\KMSPico 10.2.1\KMSPico 10.2.1.exe Origine de la détection : Ordinateur local Type de détection : Chemin rapide Source de détection : Système Utilisateur : AUTORITE NT\Système Nom du processus : Unknown Version de la signature : AV: 1.267.523.0, AS: 1.267.523.0, NIS: 119.0.0.0 Version du moteur : AM: 1.1.14800.3, NIS: 2.1.14600.4 Date: 2018-05-09 00:08:54.291 Description: Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : http://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDropper:Win32/Kaymundler.B&threatid=2147709422&enterprise=0 Nom : TrojanDropper:Win32/Kaymundler.B ID : 2147709422 Gravité : Grave Catégorie : Programme malveillant de diffusion de chevaux de Troie Chemin : file:_C:\Program Files (x86)\KMSPico 10.2.1 Final\KMSPICO_SETUP.BAT Origine de la détection : Ordinateur local Type de détection : Concret Source de détection : Protection en temps réel Utilisateur : THANOS\THANOS Nom du processus : C:\Users\THANOS\Documents\Setup\KMSPico 10.2.1\KMSPico 10.2.1.exe Version de la signature : AV: 1.267.523.0, AS: 1.267.523.0, NIS: 119.0.0.0 Version du moteur : AM: 1.1.14800.3, NIS: 2.1.14600.4 Date: 2018-05-08 10:22:50.196 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {6B920A64-854B-41A2-96F2-34FCBBBEAE5B} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-05-01 10:55:15.696 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {9595D6E5-4135-4EDE-9B2D-D7FD22753034} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : THANOS\THANOS Date: 2018-05-18 20:02:05.118 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.267.1524.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14800.3 Code d’erreur : 0x80240016 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2018-05-18 20:02:05.113 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.267.1524.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14800.3 Code d’erreur : 0x80240016 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2018-05-18 20:02:05.109 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.267.1524.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14800.3 Code d’erreur : 0x80240016 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2018-05-14 15:54:55.382 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.267.1238.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de signature : Logiciel anti-espion Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.14800.3 Code d’erreur : 0x800705b4 Description de l’erreur : Cette opération s’est terminée car le délai d’attente a expiré. Date: 2018-05-14 15:54:55.381 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.267.1238.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.14800.3 Code d’erreur : 0x800705b4 Description de l’erreur : Cette opération s’est terminée car le délai d’attente a expiré. CodeIntegrity: =================================== Date: 2018-05-19 21:45:27.310 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-05-19 21:45:26.938 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-05-19 13:47:40.280 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\WindowsApps\Musixmatch.Lyrics_2.19.6.0_x86__7gejyv32yt3te\app\Musixmatch.exe) attempted to load \Device\HarddiskVolume3\Users\THANOS\.musixmatch\WMPRemoteStandalone.exe that did not meet the Store signing level requirements. Date: 2018-05-19 13:41:18.497 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-05-19 13:41:18.495 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-05-18 19:50:04.967 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-05-18 19:50:04.964 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2018-05-18 00:30:31.061 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. ==================== Infos Mémoire =========================== Processeur: AMD A4-3300M APU with Radeon(tm) HD Graphics Pourcentage de mémoire utilisée: 63% Mémoire physique - RAM - totale: 7658.9 MB Mémoire physique - RAM - disponible: 2802.28 MB Mémoire virtuelle totale: 17362.9 MB Mémoire virtuelle disponible: 12108.93 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:221.62 GB) (Free:75.91 GB) NTFS Drive d: () (Fixed) (Total:244.04 GB) (Free:58.91 GB) NTFS \\?\Volume{2b008c26-0000-0000-0000-100000000000}\ (Réservé au système) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 2B008C26) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=244 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=221.6 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt ============================