Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 13-05-2020 01 Exécuté par Simon (administrateur) sur PC-SIMON (ASUSTeK COMPUTER INC. X555LJ) (13-05-2020 15:00:24) Exécuté depuis C:\Users\dominique\Downloads Profils chargés: Simon Platform: Windows 10 Home Version 1903 18362.778 (X64) Langue: Français (France) Navigateur par défaut: Edge Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Tous(tes)) ================= (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2> (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe (ASUS Cloud Corporation) [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe (Disc Soft Ltd -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Users\dominique\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\WirelessKB850NotificationService.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19111.24110.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20041.85.0_x64__8wekyb3d8bbwe\YourPhone.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20022.11011.0_x64__8wekyb3d8bbwe\Video.UI.exe (Microsoft Windows -> ) C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\explorer.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\ApplicationFrameHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\audiodg.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompPkgSrv.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\conhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\ctfmon.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dasHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dwm.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\fontdrvhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe <10> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\RuntimeBroker.exe <10> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthSystray.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\sihost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\spoolsv.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\taskhostw.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\VSSVC.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\winlogon.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WUDFHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpCmdRun.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\NisSrv.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\csrss.exe <2> (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\lsass.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\SecurityHealthService.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\services.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\SgrmBroker.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\smss.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\svchost.exe <80> (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\wininit.exe (Mozilla Corporation -> Mozilla Corporation) C:\Users\dominique\AppData\Local\Temp\7zS84A77418\setup.exe (Mozilla Corporation -> Mozilla) C:\Users\dominique\AppData\Local\Temp\nsc8153.tmp\download.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeApp.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe (Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe ==================== Registre (Tous(tes)) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\WINDOWS\system32\SecurityHealthSystray.exe [84992 2020-02-13] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation -> NVIDIA Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5314096 2020-03-06] (Adobe Inc. -> Adobe Systems Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-12] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [] => [X] HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe [33792 2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [27648 2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [4622280 2020-03-12] (Microsoft Windows -> Microsoft Corporation) HKLM-x32\...\Winlogon: [Shell] C:\Windows\SysWOW64\explorer.exe [3971808 2020-03-12] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Policies\Explorer: [ForceActiveDesktopOn] 0 HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 HKLM\...\Policies\Explorer: [NoRecentDocsHistory] 0 HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [28832864 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185417065\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [28832864 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [28832864 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185418815\...\Run: [OneDriveSetup] => C:\Windows\SysWOW64\OneDriveSetup.exe [28832864 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [OneDrive] => C:\Users\dominique\AppData\Local\Microsoft\OneDrive\OneDrive.exe [1582952 2020-05-12] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd -> Disc Soft Ltd) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [5557296 2020-03-06] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19554936 2018-11-28] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [Chromium Update] => C:\Users\dominique\AppData\Local\Chromium\Update\1.3.99.0\ChromiumUpdateCore.exe <==== ATTENTION HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\Run: [Chromium] => "c:\users\dominique\appdata\local\chromium\application\chrome.exe" --profile-directory="Default" --auto-launch-at-startup --restore-last-session HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\dominique\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\dominique\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\RunOnce: [Uninstall 19.232.1124.0012\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dominique\AppData\Local\Microsoft\OneDrive\19.232.1124.0012\amd64" HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\RunOnce: [Uninstall 19.232.1124.0012] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dominique\AppData\Local\Microsoft\OneDrive\19.232.1124.0012" HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\MountPoints2: {118469ee-421d-11ea-8324-acb57dad8b3f} - "L:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1921901940-906816708-456716430-1001\...\MountPoints2: {4e19ab3f-00fd-11e8-82b6-acb57dad8b3f} - "I:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [OneDrive] => C:\Users\dominique\AppData\Local\Microsoft\OneDrive\OneDrive.exe [1582952 2020-05-12] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd -> Disc Soft Ltd) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [5557296 2020-03-06] (Adobe Inc. -> Adobe Systems Incorporated) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-01-17] (Apple Inc. -> Apple Inc.) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19554936 2018-11-28] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [Chromium Update] => C:\Users\dominique\AppData\Local\Chromium\Update\1.3.99.0\ChromiumUpdateCore.exe <==== ATTENTION HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\Run: [Chromium] => "c:\users\dominique\appdata\local\chromium\application\chrome.exe" --profile-directory="Default" --auto-launch-at-startup --restore-last-session HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\MountPoints2: {118469ee-421d-11ea-8324-acb57dad8b3f} - "L:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\...\MountPoints2: {4e19ab3f-00fd-11e8-82b6-acb57dad8b3f} - "I:\HiSuiteDownLoader.exe" HKLM\...\Providers\Internet Print Provider: C:\WINDOWS\system32\inetpp.dll [177664 2019-08-05] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Providers\LanMan Print Services: C:\WINDOWS\system32\win32spl.dll [863232 2020-03-12] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\WINDOWS\system32\unregmp2.exe [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] -> C:\WINDOWS\system32\themeui.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] -> C:\WINDOWS\system32\unregmp2.exe [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{89820200-ECBD-11cf-8B85-00AA005B4340}] -> C:\WINDOWS\system32\shell32.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{89820200-ECBD-11cf-8B85-00AA005B4383}] -> C:\Windows\System32\ie4uinit.exe [2020-02-13] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\mscories.dll [2019-03-19] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\Installer\chrmstp.exe [2020-05-12] (Google LLC -> Google LLC) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\WINDOWS\SysWOW64\unregmp2.exe [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] -> C:\WINDOWS\SysWOW64\unregmp2.exe [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\mscories.dll [2019-03-19] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{01A30791-40AE-4653-AB2E-FD210019AE88}] -> C:\WINDOWS\system32\mgmtrefreshcredprov.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{1b283861-754f-4022-ad47-a5eaaa618894}] -> C:\WINDOWS\system32\SmartcardCredentialProvider.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{1ee7337f-85ac-45e2-a23c-37c753209769}] -> C:\WINDOWS\system32\SmartcardCredentialProvider.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{2135f72a-90b5-4ed3-a7f1-8bb705ac276a}] -> C:\WINDOWS\system32\credprovslegacy.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{25CBB996-92ED-457e-B28C-4774084BD562}] -> C:\WINDOWS\system32\credprovs.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{27FBDB57-B613-4AF2-9D7E-4FA7A66C21AD}] -> C:\WINDOWS\system32\TrustedSignalCredProv.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{2D8B3101-E025-480D-917C-835522C7F628}] -> HKLM\Software\...\Authentication\Credential Providers: [{3dd6bec0-8193-4ffe-ae25-e08e39ea4063}] -> C:\WINDOWS\system32\credprovs.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{48B4E58D-2791-456C-9091-D524C6C706F2}] -> C:\Windows\System32\devicengccredprov.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2014-07-10] (Broadcom Corporation -> Broadcom Corporation.) HKLM\Software\...\Authentication\Credential Providers: [{600e7adb-da3e-41a4-9225-3c0399e88c0c}] -> C:\WINDOWS\system32\cngcredui.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{60b78e88-ead8-445c-9cfd-0b87f74ea6cd}] -> C:\WINDOWS\system32\credprovs.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{8AF662BF-65A0-4D0A-A540-A338A999D36F}] -> C:\Windows\System32\FaceCredentialProvider.dll [2019-08-14] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{8FD7E19C-3BF7-489B-A72C-846AB3678C96}] -> C:\WINDOWS\system32\SmartcardCredentialProvider.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{94596c7e-3744-41ce-893e-bbf09122f76a}] -> C:\WINDOWS\system32\SmartcardCredentialProvider.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{A910D941-9DA9-4656-8933-AA1EAE01F76E}] -> HKLM\Software\...\Authentication\Credential Providers: [{BEC09223-B018-416D-A0AC-523971B639F5}] -> C:\WINDOWS\System32\BioCredProv.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{C5D7540A-CD51-453B-B22B-05305BA03F07}] -> C:\Windows\System32\cxcredprov.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> C:\Windows\System32\FaceCredentialProvider.dll [2019-08-14] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{cb82ea12-9f71-446d-89e1-8d0924e1256e}] -> C:\WINDOWS\system32\credprovslegacy.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{D6886603-9D2F-4EB2-B667-1971041FA96B}] -> C:\Windows\System32\ngccredprov.dll [2019-09-11] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{e74e57b0-6c6d-44d5-9cda-fb2df5ed7435}] -> C:\WINDOWS\system32\certCredProvider.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\WINDOWS\system32\wlidcredprov.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Providers: [{F8A1793B-7873-4046-B2A7-1F318747F427}] -> C:\WINDOWS\system32\fidocredprov.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\Credential Provider Filters: [{DDC0EED2-ADBE-40b6-A217-EDE16A79A0DE}] -> C:\WINDOWS\system32\credprovs.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Authentication\PLAP Providers: [{5537E283-B1E7-4EF8-9C6E-7AB0AFE5056D}] -> C:\WINDOWS\system32\rasplap.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}] -> C:\WINDOWS\system32\wlgpclnt.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{16be69fa-4209-4250-88cb-716cf41954e0}] -> C:\WINDOWS\system32\auditcse.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{25537BA6-77A8-11D2-9B6C-0000F8080861}] -> C:\WINDOWS\system32\fdeploy.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{35378EAC-683F-11D2-A89A-00C04FBBCFA2}] -> HKLM\Software\...\Winlogon\GPExtensions: [{3610eda5-77ef-11d2-8dc5-00c04fa31a66}] -> C:\WINDOWS\System32\dskquota.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{426031c0-0b47-4852-b0ca-ac3d37bfcb39}] -> C:\WINDOWS\system32\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{4bcd6cde-777b-48b6-9804-43568e23545d}] -> C:\WINDOWS\System32\TsUsbRedirectionGroupPolicyExtension.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3}] -> C:\Windows\System32\iedkcs32.dll [2020-02-13] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{4D2F9B6F-1E52-4711-A382-6A8B1A003DE6}] -> C:\Windows\System32\tsworkspace.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{4d968b55-cac2-4ff5-983f-0a54603781a3}] -> C:\WINDOWS\system32\WorkFoldersGPExt.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{7909AD9E-09EE-4247-BAB9-7029D5F0A278}] -> C:\WINDOWS\system32\dmenrollengine.dll [2019-10-05] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{7933F41E-56F8-41d6-A31C-4148A711EE93}] -> C:\WINDOWS\System32\srchadmin.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{7B849a69-220F-451E-B3FE-2CB811AF94AE}] -> C:\Windows\System32\iedkcs32.dll [2020-02-13] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{827D319E-6EAC-11D2-A4EA-00C04F79F83A}] -> C:\WINDOWS\system32\scecli.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{8A28E2C5-8D06-49A4-A08C-632DAA493E17}] -> C:\WINDOWS\system32\gpprnext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}] -> C:\WINDOWS\system32\dot3gpclnt.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{BA649533-0AAC-4E04-B9BC-4DBAE0325B12}] -> C:\WINDOWS\system32\pwlauncher.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{C34B2751-1CF4-44F5-9262-C3FC39666591}] -> C:\WINDOWS\system32\pwlauncher.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{cdeafc3d-948d-49dd-ab12-e578ba4af7aa}] -> C:\WINDOWS\system32\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}] -> C:\Windows\System32\iedkcs32.dll [2020-02-13] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{CFF649BD-601D-4361-AD3D-0FC365DB4DB7}] -> C:\WINDOWS\system32\domgmt.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{e437bc1c-aa7d-11d2-a382-00c04f991e27}] -> C:\WINDOWS\System32\polstore.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{f3ccc681-b74c-4060-9f26-cd84525dca2a}] -> C:\WINDOWS\system32\auditcse.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{FB2CA36D-0B40-4307-821B-A13B252DE56C}] -> C:\WINDOWS\system32\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\...\Winlogon\GPExtensions: [{fbf687e6-f063-4d9f-9f4f-fd9a26acdd5f}] -> C:\WINDOWS\system32\gptext.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Lsa: [Authentication Packages] msv1_0 Lsa: [Notification Packages] scecli SecurityProviders: credssp.dll Startup: C:\Users\dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2016-09-26] ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) BootExecute: autocheck autochk * AlternateShell: cmd.exe ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {01553B62-C95F-4971-93D0-222FB9D0A034} - System32\Tasks\ChromiumUpdateTaskMachineCore => C:\Program Files (x86)\Chromium\Update\ChromiumUpdate.exe <==== ATTENTION Task: {054DCC8F-32C8-4984-8B2B-A4A4704280AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-12] (Google LLC -> Google LLC) Task: {249540A5-9C96-4CD9-B38C-1A96ADA92B62} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-05-12] (Adobe Inc. -> Adobe) Task: {26BFAFD3-31A7-4D65-B5BD-7697FA5D0D1D} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [18416 2015-10-22] (ASUSTeK Computer Inc. -> AsusTek) Task: {28FBFFF9-A63E-4599-AA90-16DF494D3822} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115448 2020-04-19] (Microsoft Corporation -> Microsoft Corporation) Task: {2902BDC5-4168-41AD-AFFB-48D8450A13FC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19853392 2014-09-11] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {2B720B73-16F8-47E5-AFEC-BAE8E110B46F} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {2BDD8C60-40C5-4B17-AE4C-A4BD3EC15D86} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {34E46341-9AB5-44A8-8E03-4102A466A1F5} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [127176 2020-05-07] (Mozilla Corporation -> Mozilla Foundation) Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe Task: {36E27157-D0DB-4D2D-A708-3BCE4417161E} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1271424 2014-09-02] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé] Task: {3CB0C5FD-C647-46A6-8AFD-1032FB2E4067} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-05] (Piriform Software Ltd -> Piriform Software Ltd) Task: {3CB496C5-730B-4EB6-A39E-DD232F77593A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-27] (Avast Software s.r.o. -> Avast Software) Task: {4CF7BE61-C51D-450D-BD68-5826F99BDD07} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772528 2020-04-30] (Microsoft Corporation -> Microsoft Corporation) Task: {504E95A4-9A5B-46B8-A8B0-6E8CA13A257C} - System32\Tasks\ChromiumUpdateTaskMachineUA => C:\Program Files (x86)\Chromium\Update\ChromiumUpdate.exe <==== ATTENTION Task: {5976D4D9-F0EA-4468-8CD8-D5B140E3BE40} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA} Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [32256 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Task: {648A6394-E1E9-459E-A520-88B11645BE6C} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13872856 2014-12-26] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {6B745D0E-A60F-46BA-9166-DB07FC0117B0} - System32\Tasks\ChromiumUpdateTaskUserS-1-5-21-1921901940-906816708-456716430-1001UA => C:\Users\dominique\AppData\Local\Chromium\Update\ChromiumUpdate.exe <==== ATTENTION Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Task: {702D6679-20D5-4C94-BD74-3DC4F9FA75E6} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23772528 2020-04-30] (Microsoft Corporation -> Microsoft Corporation) Task: {73CA6DAE-72BF-4B2B-8B17-C052ACDFE457} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {76D8852A-4D47-4FCF-97F1-4A8D35223DF7} - System32\Tasks\Opera scheduled Autoupdate 1543951838 => C:\Users\dominique\AppData\Local\Programs\Opera\launcher.exe Task: {7F6F86C5-0DB6-4FA7-86CF-CD2083F6F1A6} - System32\Tasks\{1E0E0184-0601-4FB1-8696-39F10120FD55} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\NCH Software\Debut\debut.exe" -d C:\Users\dominique\Desktop\Simon Task: {8073FA45-0975-4DCE-B322-A9F35F24C3D3} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE} Task: {8903D858-479C-4386-9608-EED17CB3B34A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [14614416 2018-11-28] (Piriform Software Ltd -> Piriform Software Ltd) Task: {8D69C887-B5F7-4F1F-BEB8-D8511824D630} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_371_Plugin.exe [1458232 2020-05-12] (Adobe Inc. -> Adobe) Task: {B93E26AD-7294-49E5-9167-517893F106CA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {CBC41FD2-B74F-4572-84F5-92993A2FAEB5} - System32\Tasks\ChromiumUpdateTaskUserS-1-5-21-1921901940-906816708-456716430-1001Core => C:\Users\dominique\AppData\Local\Chromium\Update\ChromiumUpdate.exe <==== ATTENTION Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371} Task: {D13734BC-BF8A-4690-9314-EB8CCB340A23} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {D1FDE984-0955-46C0-8A41-7D1E554D8D23} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {D898CE26-8538-493B-ABC5-0AD86B623DF6} - System32\Tasks\Sync\{74F179CF-340D-F362-9AAD-6841911DA215} => C:\Users\dominique\AppData\Local\Sirimalakebi\Sync.exe [0 2013-05-01] () Task: {E229C328-E407-4340-9D5E-8E1AD9DCA5F6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems) Task: {EE0B9B21-E78A-45E2-9704-8F901D451CBB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpCmdRun.exe [485944 2020-05-07] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {F427A052-72DB-47AA-81C4-6C3551531297} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115448 2020-04-19] (Microsoft Corporation -> Microsoft Corporation) Task: {F4392834-9657-4654-A8D5-C2E2142B960B} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [60488 2014-11-05] (ASUSTeK Computer Inc. -> ASUS) Task: {FEBC829D-956D-4BB8-8571-E354C3D985A9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-12] (Google LLC -> Google LLC) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Internet (Tous(tes)) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Winsock: Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [54784 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 04 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 05 C:\WINDOWS\SysWOW64\winrnr.dll [23552 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 06 C:\WINDOWS\SysWOW64\NLAapi.dll [70144 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 07 C:\WINDOWS\SysWOW64\wshbth.dll [50688 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 12 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 13 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 14 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 01 C:\Windows\system32\napinsp.dll [68096 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 02 C:\Windows\system32\pnrpnsp.dll [86528 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 03 C:\Windows\system32\pnrpnsp.dll [86528 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 04 C:\Windows\System32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 05 C:\Windows\System32\winrnr.dll [31232 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 06 C:\Windows\system32\NLAapi.dll [93184 2020-03-12] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 07 C:\Windows\system32\wshbth.dll [64000 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 01 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 02 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 03 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 04 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 05 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 06 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 07 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 08 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 09 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 10 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 11 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 12 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 13 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 14 C:\Windows\system32\mswsock.dll [407544 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{0f948abd-8123-42b6-a962-ca85457804c2}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{564504eb-a3d5-4582-a6c3-97550e12806c}: [NameServer] 1.0.0.1,1.1.1.1 Tcpip\..\Interfaces\{564504eb-a3d5-4582-a6c3-97550e12806c}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{f333894c-21f2-473e-a86e-900d39f45365}: [NameServer] 8.8.4.4,1.1.1.1 Tcpip\..\Interfaces\{f333894c-21f2-473e-a86e-900d39f45365}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-f2f5d9d22325b59e HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185417065\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185417065\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185418815\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185418815\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-21-1921901940-906816708-456716430-1001\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm HKU\S-1-5-21-1921901940-906816708-456716430-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-21-1921901940-906816708-456716430-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-f2f5d9d22325b59e HKU\S-1-5-21-1921901940-906816708-456716430-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-f2f5d9d22325b59e HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB URLSearchHook: HKU\S-1-5-21-1921901940-906816708-456716430-1001 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Windows -> Microsoft Corporation) URLSearchHook: HKU\S-1-5-21-1921901940-906816708-456716430-1001 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Windows -> Microsoft Corporation) URLSearchHook: HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Windows -> Microsoft Corporation) URLSearchHook: HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Windows -> Microsoft Corporation) SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASJB SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASJB SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASJB SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASJB SearchScopes: HKU\S-1-5-21-1921901940-906816708-456716430-1001 -> DefaultScope {bce42d98-b1cd-493f-a64c-107aae7521be} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-f2f5d9d22325b59e&q={searchTerms} SearchScopes: HKU\S-1-5-21-1921901940-906816708-456716430-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 SearchScopes: HKU\S-1-5-21-1921901940-906816708-456716430-1001 -> {bce42d98-b1cd-493f-a64c-107aae7521be} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-f2f5d9d22325b59e&q={searchTerms} SearchScopes: HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300 -> DefaultScope {bce42d98-b1cd-493f-a64c-107aae7521be} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-f2f5d9d22325b59e&q={searchTerms} SearchScopes: HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 SearchScopes: HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300 -> {bce42d98-b1cd-493f-a64c-107aae7521be} URL = hxxp://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-f2f5d9d22325b59e&q={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-12] (Microsoft Corporation -> Microsoft Corporation) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\ssv.dll [2017-07-23] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\jp2ssv.dll [2017-07-23] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-10-01] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler-x32: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler-x32: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler-x32: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\msvidctl.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler-x32: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler-x32: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler-x32: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler-x32: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler-x32: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler-x32: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler-x32: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler-x32: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler-x32: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler-x32: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-12] (Microsoft Windows -> Microsoft Corporation) Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler-x32: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-08] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-08] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-08] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-08] (Microsoft Corporation -> Microsoft Corporation) Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler-x32: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler-x32: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler-x32: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\msvidctl.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler-x32: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Handler-x32: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll [2020-04-16] (Microsoft Windows -> Microsoft Corporation) Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2019-03-19] (Microsoft Windows -> Microsoft Corporation) Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLMF.DLL [2020-01-12] (Microsoft Corporation -> Microsoft Corporation) Filter-x32: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL [2020-01-12] (Microsoft Corporation -> Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe Edge: ====== DownloadDir: C:\Users\dominique\Downloads Edge Extension: (AutoFormFill) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [2019-03-19] Edge Extension: (BookReader) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [2019-03-19] Edge Extension: (LearningTools) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [2019-03-19] Edge Extension: (PinJSAPI) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [2019-03-19] FireFox: ======== FF DefaultProfile: 7zyd0t11.default FF ProfilePath: C:\Users\dominique\AppData\Roaming\Mozilla\Firefox\Profiles\7zyd0t11.default [2020-05-12] FF ProfilePath: C:\Users\dominique\AppData\Roaming\Mozilla\Firefox\Profiles\rf2b1cll.default-release [2020-05-13] FF Extension: (Déploiement de DoH) - C:\Program Files\Mozilla Firefox\browser\features\doh-rollout@mozilla.org.xpi [2020-05-07] [non signé] FF Extension: (Form Autofill) - C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi [2020-05-07] [non signé] FF Extension: (Firefox Screenshots) - C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi [2020-05-07] [non signé] FF Extension: (WebCompat Reporter) - C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2020-05-07] [non signé] FF Extension: (Web Compat) - C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi [2020-05-07] [non signé] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2019-05-02] FF HKLM\...\Mozilla Firefox 76.0.1\Extensions: [Components] - C:\Program Files\Mozilla Firefox\components => non trouvé(e) FF HKLM\...\Mozilla Firefox 76.0.1\Extensions: [Plugins] - C:\Program Files\Mozilla Firefox\plugins => non trouvé(e) FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_371.dll [2020-05-12] (Adobe Inc. -> ) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems Incorporated -> Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_371.dll [2020-05-12] (Adobe Inc. -> ) FF Plugin-x32: @chbrowserupdate.com/Chromium Update;version=3 -> C:\Program Files (x86)\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [Pas de fichier] FF Plugin-x32: @chbrowserupdate.com/Chromium Update;version=9 -> C:\Program Files (x86)\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [Pas de fichier] FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] (Foxit Corporation -> ) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] (Foxit Corporation -> ) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-01-06] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-01-06] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\dtplugin\npDeployJava1.dll [2017-07-23] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.141.2 -> C:\Program Files (x86)\Java\jre1.8.0_141\bin\plugin2\npjp2.dll [2017-07-23] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-12] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems Incorporated -> Adobe Systems) FF Plugin HKU\S-1-5-21-1921901940-906816708-456716430-1001: @chbrowserupdate.com/Chromium Update;version=3 -> C:\Users\dominique\AppData\Local\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [Pas de fichier] FF Plugin HKU\S-1-5-21-1921901940-906816708-456716430-1001: @chbrowserupdate.com/Chromium Update;version=9 -> C:\Users\dominique\AppData\Local\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [Pas de fichier] FF Plugin HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300: @chbrowserupdate.com/Chromium Update;version=3 -> C:\Users\dominique\AppData\Local\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [Pas de fichier] FF Plugin HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300: @chbrowserupdate.com/Chromium Update;version=9 -> C:\Users\dominique\AppData\Local\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [Pas de fichier] StartMenuInternet: Firefox-308046B0AF4A39CB - "C:\Program Files\Mozilla Firefox\firefox.exe" FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\channel-prefs.js [2020-05-07] Chrome: ======= CHR Profile: C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default [2020-05-10] CHR Notifications: Default -> hxxps://999-traduction.leforum.eu; hxxps://megaup.net; hxxps://serie-streaming.biz CHR HomePage: Default -> hxxp://www.google.fr/ CHR StartupUrls: Default -> "hxxp://www.google.fr/" CHR NewTab: Default -> Not-active:"chrome-extension://eedlgdlajadkbbjoobobefphmfkcchfk/newtab.html" CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms} CHR DefaultSearchKeyword: Default -> google CHR Extension: (Slides) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-06-01] CHR Extension: (Docs) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-06-01] CHR Extension: (Google Drive) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-06-01] CHR Extension: (YouTube) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-06-01] CHR Extension: (Mogicons) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpgpffljkgjmijjdmjbdppndoojdgboe [2020-01-16] CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-06] CHR Extension: (Ecosia Search) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2019-11-06] CHR Extension: (Adobe Acrobat) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-03-03] CHR Extension: (Sheets) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-06-01] CHR Extension: (Google Docs hors connexion) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-21] CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-04-14] CHR Extension: (Jack Spade) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmfhcemponaaoollhcoebkpajgdamieo [2020-01-16] CHR Extension: (Avast Online Security) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-02-28] CHR Extension: (Yahoo Partner) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\njpedbdniajflhgfoipnjkednnlkngbj [2020-01-10] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-05] CHR Extension: (Yahoo Homepage) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojfilbbecboffgonioffpjjhcobjahoe [2020-04-19] CHR Extension: (Gmail) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-01] CHR Extension: (Chrome Media Router) - C:\Users\dominique\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-21] CHR HKLM\...\Chrome\Extension: [lpmnnhmmbcieapakkffeadobioaffhoa] CHR HKU\S-1-5-21-1921901940-906816708-456716430-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lpmnnhmmbcieapakkffeadobioaffhoa] CHR HKU\S-1-5-21-1921901940-906816708-456716430-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ojfilbbecboffgonioffpjjhcobjahoe] CHR HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lpmnnhmmbcieapakkffeadobioaffhoa] CHR HKU\S-1-5-21-1921901940-906816708-456716430-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-05112020185419300\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ojfilbbecboffgonioffpjjhcobjahoe] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [lpmnnhmmbcieapakkffeadobioaffhoa] CHR HKLM-x32\...\Chrome\Extension: [njpedbdniajflhgfoipnjkednnlkngbj] CHR crx: C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\default_apps\docs.crx [2020-05-02] CHR crx: C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\default_apps\drive.crx [2020-05-02] CHR crx: C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\default_apps\gmail.crx [2020-05-02] CHR crx: C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\default_apps\youtube.crx [2020-05-02] Opera: ======= OPR Extension: (Tampermonkey) - C:\Users\dominique\AppData\Roaming\Opera Software\Opera Stable\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2019-03-05] OPR Extension: (MyJSCript) - C:\Users\dominique\AppData\Roaming\Opera Software\Opera Stable\Extensions\gpabpfikknflecblchhfkpkcpilbkfcd [2019-03-05] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Fichier non signé] R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10610544 2020-04-30] (Microsoft Corporation -> Microsoft Corporation) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd -> Disc Soft Ltd) R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel(R) Software -> Intel Corporation) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373728 2016-11-30] (Intel(R) pGFX -> Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel® Trusted Connect Service -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2015-01-06] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6933272 2020-05-11] (Malwarebytes Inc -> Malwarebytes) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462920 2017-12-04] (NVIDIA Corporation -> NVIDIA Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation -> NVIDIA Corporation) U3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\NisSrv.exe [3304992 2020-05-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MsMpEng.exe [103376 2020-05-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WirelessKB850NotificationService; C:\WINDOWS\system32\WirelessKB850NotificationService.exe [176624 2018-05-14] (Microsoft Corporation -> Microsoft Corporation) S2 chromium; "C:\Program Files (x86)\Chromium\Update\ChromiumUpdate.exe" /svc [X] <==== ATTENTION S3 chromiumm; "C:\Program Files (x86)\Chromium\Update\ChromiumUpdate.exe" /medsvc [X] <==== ATTENTION ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) R1 ATKWMIACPIIO_; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [97680 2015-10-22] (ASUSTeK Computer Inc. -> ASUS Corporation) S3 dc3d; C:\WINDOWS\System32\drivers\dc3d.sys [47616 2011-05-18] (Hardware Group Test Cert -> Microsoft Corporation) R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel(R) Software -> Intel Corporation) R3 dptf_pch; C:\WINDOWS\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel(R) Software -> Intel Corporation) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-04-04] (Disc Soft Ltd -> Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-04-04] (Disc Soft Ltd -> Disc Soft Ltd) R3 esif_lf; C:\WINDOWS\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel(R) Software -> Intel Corporation) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-05-11] (Malwarebytes Corporation -> Malwarebytes) R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32680 2019-08-07] (ASUSTek Computer Inc. -> ASUS) R0 IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel(R) Software -> Intel Corporation) R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [17280 2012-08-06] (ASUSTeK Computer Inc. -> ) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-05-11] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-05-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [195432 2020-05-11] (Malwarebytes Inc -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [73368 2020-05-11] (Malwarebytes Inc -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-05-11] (Malwarebytes Inc -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [125088 2020-05-11] (Malwarebytes Inc -> Malwarebytes) R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2015-01-06] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [82072 2015-09-23] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvam.inf_amd64_1aae4f19e68d0780\nvlddmkm.sys [17003280 2017-12-12] (NVIDIA Corporation -> NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [895256 2015-07-08] (Realtek Semiconductor Corp -> Realtek ) R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [428032 2017-02-16] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation) R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions) S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24576 2019-09-11] (Microsoft Windows -> Microsoft Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-05-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [394680 2020-05-07] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64944 2020-05-07] (Microsoft Windows -> Microsoft Corporation) R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [312776 2020-05-01] (Microsoft Windows Hardware Compatibility Publisher -> Nox Limited Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) =================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2020-05-13 15:00 - 2020-05-13 15:04 - 000081115 _____ C:\Users\dominique\Downloads\FRST.txt 2020-05-13 14:57 - 2020-05-13 15:02 - 000000000 ____D C:\FRST 2020-05-13 14:56 - 2020-05-13 14:56 - 002286080 _____ (Farbar) C:\Users\dominique\Downloads\FRST64.exe 2020-05-13 04:34 - 2020-05-13 08:40 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\IGDump 2020-05-12 22:23 - 2020-05-13 14:38 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\Mozilla 2020-05-12 22:23 - 2020-05-12 22:23 - 000000000 ____D C:\Users\dominique\AppData\Local\Mozilla 2020-05-12 20:41 - 2020-05-12 22:23 - 000000000 ____D C:\ProgramData\Mozilla 2020-05-12 20:41 - 2020-05-12 20:43 - 000000000 ____D C:\Program Files\Mozilla Firefox 2020-05-12 20:41 - 2020-05-12 20:41 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-05-12 20:41 - 2020-05-12 20:41 - 000000995 _____ C:\Users\Public\Desktop\Firefox.lnk 2020-05-12 20:41 - 2020-05-12 20:41 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2020-05-12 20:41 - 2020-05-12 20:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2020-05-12 16:56 - 2020-05-12 16:56 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-05-12 16:56 - 2020-05-12 16:56 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-05-12 02:26 - 2020-05-12 02:26 - 000000000 ___HD C:\OneDriveTemp 2020-05-11 18:54 - 2020-05-11 18:54 - 000195432 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2020-05-11 18:54 - 2020-05-11 18:54 - 000125088 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2020-05-11 18:54 - 2020-05-11 18:54 - 000073368 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2020-05-11 18:19 - 2020-05-11 18:19 - 000002035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2020-05-11 18:18 - 2020-05-11 18:53 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2020-05-11 18:18 - 2020-05-11 18:18 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2020-05-11 07:55 - 2020-05-11 12:00 - 000000000 ____D C:\Users\dominique\AppData\Local\Sirimalakebi 2020-05-11 07:55 - 2020-05-11 07:55 - 000001405 _____ C:\Users\dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HowToRemove.lnk 2020-05-10 20:44 - 2019-01-18 10:00 - 000000000 ____D C:\Users\dominique\Downloads\BrokenSword.5.the.Serpents.Curse.GOG 2020-05-10 18:35 - 2020-05-10 19:17 - 2198175191 _____ C:\Users\dominique\Downloads\BrokenSword.5.the.Serpents.Curse.GOG.part2.rar 2020-05-10 18:21 - 2020-05-10 20:43 - 000000000 ____D C:\Users\dominique\Downloads\Broken.Sword.5.the.Serpents.curse.Episode.1.GOG 2020-05-10 13:48 - 2020-05-10 13:52 - 000000000 ____D C:\Users\dominique\AppData\Local\Mimerune 2020-05-06 00:22 - 2020-05-06 00:22 - 000000062 _____ C:\Users\dominique\AppData\Roaming\WB.CFG 2020-05-05 16:22 - 2020-05-11 18:53 - 000000000 ____D C:\Users\dominique\AppData\Local\Tocutema 2020-05-05 16:22 - 2020-05-11 07:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\Sync 2020-05-05 16:20 - 2020-05-11 12:00 - 000000000 ____D C:\ProgramData\{A7B89B84-8F90-E3FC-D7C8-CBD43F20130C} 2020-05-01 21:25 - 2020-05-01 21:42 - 000000298 _____ C:\Users\dominique\d4ac4633ebd6440fa397b84f1bc94a3c.7z 2020-05-01 21:06 - 2020-05-01 21:06 - 000000066 _____ C:\Users\dominique\inittk.ini 2020-05-01 21:05 - 2020-05-01 21:27 - 000000000 ____D C:\Users\dominique\.android 2020-05-01 21:04 - 2020-05-01 21:04 - 000000041 _____ C:\Users\dominique\inst.ini 2020-05-01 21:04 - 2020-05-01 21:04 - 000000000 ____D C:\Users\dominique\Nox_share 2020-05-01 21:03 - 2020-05-01 21:40 - 000000000 ____D C:\Users\dominique\AppData\Local\NoxSrv 2020-05-01 21:03 - 2020-05-01 21:03 - 000000053 _____ C:\Users\dominique\useruid.ini 2020-05-01 21:03 - 2020-05-01 21:03 - 000000045 _____ C:\Users\dominique\nuuid.ini 2020-05-01 20:51 - 2020-05-01 20:51 - 000000715 _____ C:\Users\dominique\Desktop\Nox.lnk 2020-05-01 20:51 - 2020-05-01 20:51 - 000000000 ____D C:\Users\dominique\AppData\Roaming\NoxSrv 2020-05-01 20:51 - 2020-05-01 20:51 - 000000000 ____D C:\Users\dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Nox 2020-05-01 20:50 - 2020-05-01 21:39 - 000000000 ____D C:\Users\dominique\vmlogs 2020-05-01 20:49 - 2020-05-01 21:39 - 000000000 ____D C:\Users\dominique\.BigNox 2020-05-01 20:48 - 2020-05-01 20:48 - 000000000 ____D C:\Program Files (x86)\Bignox 2020-05-01 20:45 - 2020-05-01 21:42 - 000000000 ____D C:\Users\dominique\AppData\Local\Nox 2020-05-01 20:45 - 2020-05-01 21:01 - 000000000 ____D C:\Users\dominique\AppData\Local\NoxInsPackFileder 2020-05-01 20:42 - 2020-05-01 20:44 - 385964936 _____ (Duodian Technology Co. Ltd.) C:\Users\dominique\Downloads\nox_setup_v6.6.0.6_full_intl.exe 2020-05-01 13:18 - 2020-05-01 13:26 - 000000000 ____D C:\Users\Public\BlueStacks 2020-04-30 00:49 - 2020-04-30 00:49 - 000000000 ____D C:\Users\dominique\AppData\Roaming\NVIDIA 2020-04-30 00:47 - 2020-04-30 01:02 - 000000000 ____D C:\Users\dominique\Documents\Larian Studios 2020-04-30 00:46 - 2020-03-22 10:00 - 000289568 _____ (Valve Corporation) C:\WINDOWS\system32\steam_api64.dll 2020-04-30 00:33 - 2020-03-22 10:00 - 000289568 _____ (Valve Corporation) C:\Users\dominique\Downloads\steam_api64.dll 2020-04-30 00:32 - 2020-04-30 00:32 - 000125563 _____ C:\Users\dominique\Downloads\steam_api64.zip 2020-04-29 23:19 - 2018-08-30 01:34 - 006305697 _____ C:\Users\dominique\Documents\English.pak 2020-04-29 22:22 - 2020-04-29 22:24 - 000055453 _____ C:\Users\dominique\Downloads\overland-v772-gog.torrent 2020-04-29 17:34 - 2020-04-29 17:39 - 472169636 _____ C:\Users\dominique\Downloads\Le.Bureau.Des.Legendes.S05E05.FRENCH.WEBRip.XviD-ZT.WwW.Zone-Annuaire.COM.avi 2020-04-28 23:33 - 2020-04-28 23:33 - 000000000 ____D C:\Users\dominique\AppData\Local\NVIDIA Corporation 2020-04-28 23:30 - 2020-04-28 23:33 - 000000000 ____D C:\Users\dominique\AppData\Local\PhantomDoctrine 2020-04-28 23:30 - 2020-04-28 23:30 - 000000000 ____D C:\Users\dominique\AppData\Local\UnrealEngine 2020-04-28 23:30 - 2020-04-28 23:30 - 000000000 ____D C:\Users\dominique\AppData\Local\GameAnalytics 2020-04-28 19:53 - 2020-04-28 19:54 - 000000000 ____D C:\Users\dominique\Documents\Fell Seal 2020-04-28 19:53 - 2020-04-28 19:53 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\6 Eyes Studio 2020-04-28 19:48 - 2020-04-29 23:04 - 000000775 _____ C:\Users\dominique\Desktop\Fell Seal Arbiters Mark.lnk 2020-04-28 19:48 - 2020-04-28 19:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fell Seal Arbiters Mark 2020-04-28 15:48 - 2020-04-28 15:52 - 333565783 _____ C:\Users\dominique\Downloads\Fleabag.S02E06.FiNAL.FASTSUB.VOSTFR.720p.HDTV.x264-WEEDS.WwW.Annuaire-Telechargement.CoM.mkv 2020-04-28 13:16 - 2020-04-28 13:28 - 747104795 _____ C:\Users\dominique\Downloads\Fleabag.S02E04.FASTSUB.VOSTFR.720p.WEBRip.x264-WEEDS-ZT.WwW.Zone-Telechargement.Net.mkv 2020-04-28 13:15 - 2020-04-28 13:20 - 314753241 _____ C:\Users\dominique\Downloads\Fleabag.S02E05.FASTSUB.VOSTFR.720p.HDTV.x264-WEEDS.WwW.Annuaire-Telechargement.CoM.mkv 2020-04-27 20:34 - 2020-04-27 20:36 - 2135636219 _____ C:\Users\dominique\Downloads\Blacksad.Under.the.Skin.v1.03-PLAZA.part3.rar 2020-04-27 20:14 - 2020-04-27 20:32 - 1063004405 _____ C:\Users\dominique\Downloads\Blacksad.Under.the.Skin.v1.03-PLAZA.part2.rar 2020-04-27 19:41 - 2020-04-27 19:52 - 1063004405 _____ C:\Users\dominique\Downloads\Blacksad.Under.the.Skin.v1.03-PLAZA.part1.rar 2020-04-27 19:23 - 2020-04-27 19:23 - 000000790 _____ C:\Users\dominique\Desktop\The Suicide of Rachel Foster.lnk 2020-04-27 19:22 - 2020-04-27 19:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Suicide of Rachel Foster 2020-04-27 18:54 - 2020-02-19 19:11 - 000000000 ____D C:\Users\dominique\Downloads\The.Suicide.of.Rachel.Foster-CODEX 2020-04-27 17:46 - 2020-04-27 17:46 - 000000901 _____ C:\Users\dominique\Desktop\The Invisible Hours.lnk 2020-04-27 17:38 - 2020-04-27 17:42 - 310450814 _____ C:\Users\dominique\Downloads\Fleabag.S02E03.FASTSUB.VOSTFR.720p.WEBRip.x264-WEEDS-ZT.WwW.Zone-Telechargement.Net.mkv 2020-04-27 17:24 - 2020-04-29 22:54 - 000000671 _____ C:\Users\dominique\Desktop\Night Call.lnk 2020-04-27 17:24 - 2020-04-27 17:24 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\Raw Fury 2020-04-27 17:21 - 2020-04-27 17:25 - 000000000 ____D C:\Night Call 2020-04-27 15:29 - 2017-06-15 06:48 - 000001828 _____ C:\Users\dominique\Downloads\Uninstall_Patch_Fr.bat 2020-04-27 15:14 - 2020-04-27 15:14 - 001399641 _____ (Ghylard ) C:\Users\dominique\Downloads\Non confirmé 921872.crdownload 2020-04-27 14:19 - 2020-05-05 11:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cognition - An Erica Reed Thriller 2020-04-27 13:54 - 2020-04-27 13:55 - 944015022 _____ C:\Users\dominique\Downloads\Fleabag.S02E02.FASTSUB.VOSTFR.720p.WEBRip.x264-WEEDS.WwW.Annuaire-Telechargement.CoM.mkv 2020-04-27 13:51 - 2020-04-27 13:56 - 345990051 _____ C:\Users\dominique\Downloads\Fleabag.S02E01.FASTSUB.VOSTFR.720p.HDTV.x264-WEEDS-ZT.WwW.Zone-Telechargement.Net.mkv 2020-04-26 23:33 - 2020-04-26 23:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Broken Sword 3 [GOG.com] 2020-04-26 20:52 - 2020-04-26 20:52 - 000021111 _____ C:\Users\dominique\Downloads\4998295988586f6505c9f8b57d521f87e7bd044b.torrent 2020-04-26 20:24 - 2020-04-26 20:24 - 000000000 ____D C:\Users\dominique\AppData\Local\JxBrowser 2020-04-26 16:13 - 2020-04-26 16:13 - 000003440 _____ C:\WINDOWS\system32\Tasks\ChromiumUpdateTaskMachineUA 2020-04-26 16:13 - 2020-04-26 16:13 - 000003316 _____ C:\WINDOWS\system32\Tasks\ChromiumUpdateTaskMachineCore 2020-04-26 16:13 - 2020-04-26 16:13 - 000002972 _____ C:\Users\dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search Powered by Yahoo!.lnk 2020-04-26 16:11 - 2020-04-26 16:11 - 000000000 ____D C:\Users\dominique\AppData\Roaming\GoodgameEmpire_GG 2020-04-26 16:11 - 2020-04-26 16:11 - 000000000 ____D C:\Program Files (x86)\Digital Communications 2020-04-23 20:17 - 2019-03-21 05:33 - 000010813 _____ C:\Users\dominique\Downloads\lisezmoi.txt 2020-04-22 21:20 - 2020-04-22 21:27 - 471697522 _____ C:\Users\dominique\Downloads\Le.Bureau.Des.Legendes.S05E03.FRENCH.WEBRip.XviD-ZT.WwW.Zone-Annuaire.COM.avi 2020-04-22 21:18 - 2020-04-22 21:20 - 472620222 _____ C:\Users\dominique\Downloads\Le.Bureau.Des.Legendes.S05E04.FRENCH.WEBRip.XviD-ZT.WwW.Zone-Annuaire.COM.avi 2020-04-21 21:23 - 2020-04-21 21:23 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\Unity 2020-04-21 21:19 - 2020-04-21 21:19 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\Perchang 2020-04-20 20:40 - 2020-04-20 20:53 - 1063004405 _____ C:\Users\dominique\Downloads\Broken.Sword.5.the.Serpents.curse.Episode.1.GOG.part1.rar 2020-04-19 22:30 - 2020-04-19 22:30 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\Daedalic Entertainment GmbH 2020-04-19 17:26 - 2020-04-19 17:26 - 000003704 _____ C:\WINDOWS\system32\Tasks\ChromiumUpdateTaskUserS-1-5-21-1921901940-906816708-456716430-1001UA 2020-04-19 17:26 - 2020-04-19 17:26 - 000003436 _____ C:\WINDOWS\system32\Tasks\ChromiumUpdateTaskUserS-1-5-21-1921901940-906816708-456716430-1001Core 2020-04-19 17:25 - 2020-04-19 17:25 - 000000000 ____D C:\ProgramData\{8A89B6B5-A2A1-CECD-FAF9-E6E512113E3D} 2020-04-19 17:24 - 2020-04-26 16:13 - 000000000 ____D C:\ProgramData\ddiqj 2020-04-19 15:24 - 2020-04-19 15:24 - 000000000 ____D C:\Users\dominique\AppData\Roaming\Gloomhaven Installer 2020-04-19 15:23 - 2018-06-16 00:55 - 000002136 _____ C:\Users\dominique\Downloads\READ ME.txt 2020-04-19 14:37 - 2020-04-19 14:37 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\FlamingFowlStudios 2020-04-16 12:16 - 2020-04-16 12:16 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe 2020-04-16 12:16 - 2020-04-16 12:16 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll 2020-04-16 12:16 - 2020-04-16 12:16 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 022636544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 018027520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 007756800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 005910016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 004611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 004129624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 003512320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 002951832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 002800640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001870408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001545216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001413840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001397576 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 001310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001077064 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 001013000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 000775696 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000673464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2020-04-16 12:15 - 2020-04-16 12:15 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2020-04-16 12:15 - 2020-04-16 12:15 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000420152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe 2020-04-16 12:15 - 2020-04-16 12:15 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-04-16 12:15 - 2020-04-16 12:15 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2020-04-16 12:15 - 2020-04-16 12:15 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-04-16 12:14 - 2020-04-16 12:14 - 014818816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 006523048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 003753472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2020-04-16 12:14 - 2020-04-16 12:14 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-04-16 12:14 - 2020-04-16 12:14 - 002767928 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 002086656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001665216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001646048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001484384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001245184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000993280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 000785920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2020-04-16 12:14 - 2020-04-16 12:14 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000673704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000628616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2020-04-16 12:14 - 2020-04-16 12:14 - 000538160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000510792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000487784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2020-04-16 12:14 - 2020-04-16 12:14 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2020-04-16 12:14 - 2020-04-16 12:14 - 000415760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-04-16 12:14 - 2020-04-16 12:14 - 000277864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000268008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2020-04-16 12:14 - 2020-04-16 12:14 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000147696 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000123952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000050544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe 2020-04-16 12:14 - 2020-04-16 12:14 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll 2020-04-16 12:14 - 2020-04-16 12:14 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2020-04-16 12:13 - 2020-04-16 12:14 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 004563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 003802624 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 003729408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-04-16 12:13 - 2020-04-16 12:13 - 003547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 002717184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-04-16 12:13 - 2020-04-16 12:13 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-04-16 12:13 - 2020-04-16 12:13 - 001726264 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001612800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001603584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001512832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 001427456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001378528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-04-16 12:13 - 2020-04-16 12:13 - 001261808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001243648 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 001011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-04-16 12:13 - 2020-04-16 12:13 - 000840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000811320 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000759272 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000684560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000638480 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000618296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-04-16 12:13 - 2020-04-16 12:13 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000515600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000513576 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-04-16 12:13 - 2020-04-16 12:13 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2020-04-16 12:13 - 2020-04-16 12:13 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000033080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys 2020-04-16 12:13 - 2020-04-16 12:13 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll 2020-04-16 12:13 - 2020-04-16 12:13 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 017790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 007849216 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 003587384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 002131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 002126144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 002114560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001960448 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001762816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001263856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001127424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000879616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000637240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000437560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000416016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000339304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000297272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000193848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000151352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcProxyStubs.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe 2020-04-16 12:12 - 2020-04-16 12:12 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys 2020-04-16 12:12 - 2020-04-16 12:12 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll 2020-04-16 12:12 - 2020-04-16 12:12 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys 2020-04-16 00:29 - 2020-03-17 05:57 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-04-16 00:29 - 2020-03-17 05:56 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-04-15 17:43 - 2020-04-15 17:43 - 000000000 ____D C:\Users\dominique\Documents\Zoom 2020-04-15 16:17 - 2020-05-07 13:29 - 000000000 ____D C:\Users\dominique\AppData\Roaming\Zoom ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2020-05-13 15:06 - 2019-10-03 18:42 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2020-05-13 15:06 - 2019-10-03 18:42 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData 2020-05-13 15:05 - 2015-08-29 18:43 - 000000000 ___RD C:\Users\dominique\OneDrive 2020-05-13 14:55 - 2019-08-05 19:36 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{DBB9A9E9-097C-4348-AEBF-94F3322DB3ED} 2020-05-13 14:39 - 2015-08-27 18:15 - 000000165 _____ C:\Users\dominique\AppData\Roaming\sp_data.sys 2020-05-13 14:35 - 2019-08-05 19:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-05-13 12:41 - 2014-10-29 08:19 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2020-05-13 05:31 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-05-12 22:23 - 2016-04-25 18:45 - 000000000 ____D C:\Users\dominique\AppData\Roaming\Mozilla 2020-05-12 19:06 - 2019-08-05 19:36 - 000004746 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier 2020-05-12 19:06 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Macromed 2020-05-12 19:05 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2020-05-12 16:56 - 2015-10-03 06:46 - 000000000 ____D C:\Program Files (x86)\Google 2020-05-12 02:25 - 2019-08-05 19:36 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1921901940-906816708-456716430-1001 2020-05-12 02:24 - 2019-08-05 19:16 - 000002455 _____ C:\Users\dominique\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-05-11 22:50 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-05-11 22:50 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-05-11 21:37 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-05-11 19:02 - 2018-09-15 19:30 - 000000000 ____D C:\Users\dominique\AppData\Roaming\vlc 2020-05-11 18:59 - 2016-03-26 02:51 - 000000000 ____D C:\Users\dominique\Desktop\Simon 2020-05-11 18:57 - 2018-03-27 13:58 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture 2020-05-11 18:55 - 2017-09-23 15:19 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2020-05-11 18:53 - 2019-08-05 19:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-05-11 18:53 - 2017-09-23 15:20 - 000000000 ____D C:\ProgramData\NVIDIA 2020-05-11 18:50 - 2019-06-06 12:29 - 000000000 ____D C:\Users\dominique\Desktop\Santé 2020-05-11 18:19 - 2019-07-11 23:10 - 000002023 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2020-05-11 18:18 - 2019-07-11 23:10 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2020-05-11 18:17 - 2019-07-11 23:10 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2020-05-07 21:25 - 2019-03-19 06:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2020-05-07 13:37 - 2018-02-14 18:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2020-05-05 11:51 - 2019-01-06 01:33 - 000000000 ____D C:\Users\dominique\AppData\LocalLow\Phoenix Online Studios 2020-05-01 21:42 - 2019-08-05 19:16 - 000000000 ____D C:\Users\dominique 2020-05-01 21:03 - 2019-03-19 06:52 - 000000000 __RHD C:\Users\Public\Libraries 2020-05-01 20:49 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Registration 2020-05-01 20:49 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF 2020-05-01 20:27 - 2018-12-08 00:49 - 000000000 ____D C:\ProgramData\GOG.com 2020-05-01 14:26 - 2018-12-04 21:29 - 000000000 ____D C:\Users\dominique\AppData\Roaming\uTorrent 2020-05-01 14:10 - 2019-03-23 20:33 - 000000000 ____D C:\Users\dominique\AppData\Local\BitTorrentHelper 2020-05-01 14:09 - 2017-04-24 16:04 - 000000000 ____D C:\Users\dominique\Desktop\Documents importants 2020-04-30 00:27 - 2018-12-07 02:54 - 000000000 ____D C:\Users\dominique\AppData\Local\D3DSCache 2020-04-27 11:03 - 2015-08-27 18:14 - 000000000 ____D C:\Users\dominique\AppData\Local\NVIDIA 2020-04-23 23:50 - 2019-08-05 19:07 - 000483320 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-04-23 20:08 - 2014-10-29 08:25 - 000000000 ____D C:\ProgramData\Package Cache 2020-04-19 17:46 - 2017-12-01 16:06 - 000000000 ____D C:\Users\dominique\AppData\Local\Packages 2020-04-17 14:00 - 2019-08-05 19:26 - 001771410 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-04-17 14:00 - 2019-03-19 14:00 - 000794662 _____ C:\WINDOWS\system32\perfh00C.dat 2020-04-17 14:00 - 2019-03-19 14:00 - 000150678 _____ C:\WINDOWS\system32\perfc00C.dat 2020-04-17 02:48 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources 2020-04-17 02:48 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2020-04-17 02:48 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\migwiz 2020-04-17 02:48 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-04-17 02:48 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Provisioning 2020-04-17 02:48 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-04-16 12:24 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-04-15 11:05 - 2019-08-05 19:36 - 000004594 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater ==================== Fichiers à la racine de certains dossiers ======== 2015-08-27 18:15 - 2020-05-13 14:39 - 000000165 _____ () C:\Users\dominique\AppData\Roaming\sp_data.sys 2020-05-06 00:22 - 2020-05-06 00:22 - 000000062 _____ () C:\Users\dominique\AppData\Roaming\WB.CFG 2019-03-05 20:22 - 2019-03-05 20:22 - 000000002 _____ () C:\Users\dominique\AppData\Local\imw.ini 2018-09-30 00:19 - 2018-09-30 00:19 - 000000000 _____ () C:\Users\dominique\AppData\Local\oobelibMkey.log ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)