Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 31-03-2021
Exécuté par User (administrateur) sur LENOVO (LENOVO 81D6) (03-04-2021 16:49:02)
Exécuté depuis C:\Users\User\Downloads
Profils chargés: User
Platform: Windows 10 Home Version 2004 19041.867 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

() [Fichier non signé] C:\Program Files (x86)\Rene.E Laboratory\File Protector\FLClient.exe
() [Fichier non signé] C:\Program Files (x86)\Rene.E Laboratory\File Protector\FLService.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0360470.inf_amd64_35c64671e7fac064\B360357\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0360470.inf_amd64_35c64671e7fac064\B360357\atiesrxx.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <3>
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdtrackersnmh.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnapp.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnService.exe
(Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Dolby Laboratories, Inc. -> ) C:\Windows\System32\dolbyaposvc\DAX3API.exe <2>
(ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrlHelper.exe
(ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDTouch.exe
(Global Media (Thailand) Co., Ltd -> Global Media (Thailand) Co., Ltd) C:\Program Files (x86)\MaskVPN\mask_svc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <21>
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation] C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20688.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20688.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Node.js Foundation -> Node.js) C:\Users\User\Desktop\Prey\versions\1.9.9\bin\node.exe
(Pango Inc. -> AnchorFree Inc.) C:\Program Files\Bitdefender\Bitdefender VPN\Hydra.Sdk.Windows.Service.exe
(Prey, Inc. -> Prey, Inc.) C:\Users\User\Desktop\Prey\wpxsvc.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(Stardock Corporation -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\DeskScapes10\Deskscapes64.exe
(Stardock Corporation -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\DeskScapes10\DS10Srv.exe
(Stardock Corporation -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\DeskScapes10\DSHost.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1076728 2020-03-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [BdVpnApp] => C:\Program Files\Bitdefender\Bitdefender VPN\BdVpnApp.exe [224376 2020-12-07] (Bitdefender SRL -> Bitdefender)
HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436704 2020-09-28] (Corel Corporation -> WinZip Computing, S.L.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [959440 2021-01-25] (Bitdefender SRL -> Bitdefender)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-920637449-3320240030-3157856164-1001\...\Run: [Viber] => C:\Users\User\AppData\Local\Viber\Viber.exe [47907032 2021-02-25] (Viber Media S.à r.l. -> Viber Media S.à r.l.)
HKU\S-1-5-21-920637449-3320240030-3157856164-1001\...\Run: [Gili File Lock Helper] => C:\Program Files (x86)\Rene.E Laboratory\File Protector\WinFLockerHelp.exe [28944 2019-02-15] (SiChuan HengYiDa XinXiJiShu YouXianGongSi -> )
HKU\S-1-5-21-920637449-3320240030-3157856164-1001\...\Run: [SmartSwitchPDLR.exe] => C:\Program Files (x86)\Samsung\Smart Switch PC\SmartSwitchPDLR.exe [1125544 2020-12-03] (Samsung Electronics CO., LTD. -> Samsung)
HKU\S-1-5-21-920637449-3320240030-3157856164-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33169992 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-18\...\Run: [] => [X]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe [2021-04-02] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Préchargeur.lnk [2021-03-10]
ShortcutTarget: WinZip Préchargeur.lnk -> C:\Program Files\WinZip\WzPreloader.exe (Corel Corporation -> WinZip Computing)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar638.lnk [2021-04-02]
ShortcutTarget: Sidebar638.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) [Fichier non signé] [Fichier en cours d'utilisation]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0902420E-EB02-40C3-B000-D3E28D26ABB4} - System32\Tasks\Opera scheduled Autoupdate 1617210323 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe
Task: {10522779-0FD0-4310-B25F-326045F6B57B} - \Lenovo\ImController\TimeBasedEvents\87cb3178-530b-4fb7-8617-9ed533e1001c -> Pas de fichier <==== ATTENTION
Task: {1BAC200A-01D8-4FF2-9492-A88FD5FBC6C3} - System32\Tasks\Opera scheduled assistant Autoupdate 1616869130 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\User\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {1E8B935C-F1A3-4629-8F0D-354477B55DD8} - \Lenovo\ImController\TimeBasedEvents\579ef771-de6c-4c98-bb3c-8ebf45ea8e81 -> Pas de fichier <==== ATTENTION
Task: {2667E477-B064-4E8F-BC4B-C210538D35B1} - System32\Tasks\Opera scheduled assistant Autoupdate 1617210335 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\User\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {2690FC9A-1C17-4CD7-8571-14531BA503A3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-18] (Piriform Software Ltd -> Piriform)
Task: {2CA37337-456E-4926-A032-09BB88565C43} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27616328 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {308B67AE-C907-4D28-879E-E96644CF5220} - \Lenovo\ImController\Lenovo iM Controller Monitor -> Pas de fichier <==== ATTENTION
Task: {3553686F-FA7D-4F84-85DD-F225E5C6E8CE} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe
Task: {448058A8-B48B-4639-9946-E123D14361EC} - System32\Tasks\yr5alhqwn64g => schtasks [Argument = /run /tn q6ylkvj4rptm]
Task: {46798F29-4E4E-4B0D-BFD4-D1039DDF249F} - System32\Tasks\q6ylkvj4rptm => wscript slmgr.vbs C:\WINDOWS\system32\get-dnsrecs.ps1
Task: {483D13C1-02D8-4C04-B238-8E15220392FE} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
Task: {4E4A231B-833F-4D61-BA32-26EB48875B42} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [1145 2020-12-04] () [Fichier non signé]
Task: {4F9BEED8-26CC-46C8-8ABF-9E81108EEB0E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141184 2021-03-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {73DF461A-D997-4380-AEED-BFE890A7B524} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> Pas de fichier <==== ATTENTION
Task: {7950E7C1-1D46-4634-A152-49B66DAE06BE} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
Task: {8087E7DE-AF45-426C-96C5-1A2F5EC71CEE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-10] (Google LLC -> Google LLC)
Task: {81655619-08AC-4AE9-B52E-0A522AD3180B} - System32\Tasks\Opera scheduled Autoupdate 1616869111 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe
Task: {84B37730-F0C9-4675-AE68-92D6A35D321A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23080824 2021-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {84D10C5F-8684-452F-A351-014A6462295F} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
Task: {870A6C74-CDA8-4D75-8D18-5B751CEF6957} - \Microsoft\Windows\Windows Error Reporting\SystemInfoTool -> Pas de fichier <==== ATTENTION
Task: {A382289C-043A-4AE6-A5A0-5F5964A02C5C} - \Lenovo\ImController\TimeBasedEvents\02cb484b-7d9b-4089-88d5-3c47f341be3f -> Pas de fichier <==== ATTENTION
Task: {AD999B0B-C8A7-4F61-9AE3-9DCDEFD0225B} - \Lenovo\ImController\TimeBasedEvents\e0863580-d4d6-4070-b824-0ca516f4bfc0 -> Pas de fichier <==== ATTENTION
Task: {B66099C4-AB7B-471E-8269-92D2DFF4F342} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-10] (Google LLC -> Google LLC)
Task: {BCAC402F-EDBB-4544-9B19-2947B9A31B71} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [642544 2021-03-18] (Mozilla Corporation -> Mozilla Foundation)
Task: {C0570046-A46C-48C2-9489-4E3BD9D33D6E} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23080824 2021-03-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {C2C36D95-0C87-406F-AE9B-F1AB8D0E2DA7} - \GoogleUpdate64Host -> Pas de fichier <==== ATTENTION
Task: {C2E8F653-EF76-4E2C-96E3-88498FB275E2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141184 2021-03-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {C7965C8A-D018-47BF-AF8A-28A4BDF4AB53} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5260176 2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {CC0FDFEA-D777-4DDB-9C75-164E770E0891} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> Pas de fichier <==== ATTENTION
Task: {D40F1D74-7A3A-4FB9-A02C-77A21E73D182} - System32\Tasks\Services\Diagnostic => C:\Users\User\AppData\Local\Disk\AutoIt3\AutoIt3_x64.exe -> "C:\Users\User\AppData\Local\Disk\AutoIt3\Settings.au3"
Task: {E473BFC0-B42B-4EB3-AA96-7AF058B3C869} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5260176 2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {E4A4EE74-6A6E-4CF2-B6C6-7156044B3D58} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [888232 2021-01-29] (Bitdefender SRL -> Bitdefender)
Task: {F9805CDA-D4AA-42C0-AA25-CF90E3C2CE36} - \Googleupdlauncher -> Pas de fichier <==== ATTENTION

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{a3b48d7e-cb3d-4215-87ce-e62d0fe9b6b8}: [DhcpNameServer] 192.168.1.1

Edge:
=======
Edge Profile: C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-03]
Edge Extension: (Outlook) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2021-03-16]
Edge Extension: (Word) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2021-03-16]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-04-02]
Edge Extension: (Excel) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2021-03-16]
Edge Extension: (PowerPoint) - C:\Users\User\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2021-03-16]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: tpjbf92g.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\tpjbf92g.default [2021-04-02]
FF Homepage: Mozilla\Firefox\Profiles\tpjbf92g.default -> hxxps://www.google.com/
FF NewTab: Mozilla\Firefox\Profiles\tpjbf92g.default -> hxxps://mysearchengine.co/homepage?hp=1&bitmask=9996&pId=BT171001&iDate=2021-03-31 05:19:48&bName=
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r3c3ze0m.default-release [2021-04-02]
FF Homepage: Mozilla\Firefox\Profiles\r3c3ze0m.default-release -> hxxps://www.google.com/
FF NewTab: Mozilla\Firefox\Profiles\r3c3ze0m.default-release -> hxxps://mysearchengine.co/homepage?hp=1&bitmask=9996&pId=BT171001&iDate=2021-03-31 05:19:48&bName=
FF Extension: (Ant Video downloader) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r3c3ze0m.default-release\Extensions\anttoolbar@ant.com.xpi [2021-03-28]
FF Extension: (Download Magnet Link With GetBy.Donwload) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r3c3ze0m.default-release\Extensions\{4dfcf5e6-638c-4787-8ae6-b20e6d13d491}.xpi [2021-03-28]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r3c3ze0m.default-release\searchplugins\My Bing Search.xml [2021-03-31]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-07-16] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ]
FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF Extension: (Bitdefender Anti-tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2020-09-17] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/antitracker/updates.json ]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2021-01-25] [] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2021-03-28] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2021-03-28] <==== ATTENTION

Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2021-04-03]
CHR HomePage: Default -> hxxp://duckduckgo.com/
CHR StartupUrls: Default -> "hxxps://duckduckgo.com/"
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}&atb=v263-7__
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Extension: (Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-03-10]
CHR Extension: (Safe Torrent Scanner) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2021-03-30]
CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-03-10]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-03-10]
CHR Extension: (AdGuard AdBlocker) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2021-04-02]
CHR Extension: (DuckDuckGo) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2021-04-02]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-03-10]
CHR Extension: (CamGirlCaps) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\eapcklnhcijkmljcihhmjgcbpfjpnloe [2021-03-10]
CHR Extension: (Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-03-10]
CHR Extension: (Bitdefender Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gannpgaobkkhmpomoijebaigcapoeebl [2021-04-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-10]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-04-01]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-04-01]
CHR Extension: (Mate Translate - traducteur, dictionnaire) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2021-03-31]
CHR Extension: (Bitdefender Anti-tracker) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\khndhdhbebhaddchcgnalcjlaekbbeof [2021-04-02]
CHR Extension: (LockPW) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kjcloihghgncbdkaafgkckbokjnehfmo [2021-03-10]
CHR Extension: (Secure Bookmarks) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\leocjgngiajhfiikjolfhcpiokgbinep [2021-03-10]
CHR Extension: (Boomerang for Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdanidgdpmkimeiiojknlnekblgmpdll [2021-03-10]
CHR Extension: (6play) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdhbifdgdmmhdhgmgpkgmddpejjiekg [2021-03-10]
CHR Extension: (Similar Sites - À la découverte de sites internet connexes) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\necpbmbhhdiplmfhmjicabdeighkndkn [2021-03-30]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-10]
CHR Extension: (OneClick Cleaner App) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadiaahhieelhhffeofkdchgfpjehjok [2021-03-10]
CHR Extension: (OneClick Cleaner for Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\oncckmaelaecccmaniihojgeopkcajfh [2021-03-10]
CHR Extension: (Video Downloader professional) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pboidikkgjoedgccndgmgcalcpofdoia [2021-03-28]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-03-10]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-10]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]

Opera:
=======
OPR Profile: C:\Users\User\AppData\Roaming\Opera Software\Opera Stable [2021-04-02]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AfVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\hydra.sdk.windows.service.exe [197624 2020-11-02] (Pango Inc. -> AnchorFree Inc.)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-10-02] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-10-02] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195344 2018-03-22] (Bitdefender SRL -> Bitdefender)
R2 BdVpnService; C:\Program Files\Bitdefender\Bitdefender VPN\bdvpnservice.exe [250392 2020-12-07] (Bitdefender SRL -> Bitdefender)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8990072 2021-03-11] (Microsoft Corporation -> Microsoft Corporation)
R2 CronService; C:\Users\User\Desktop\Prey\wpxsvc.exe [5493968 2021-01-25] (Prey, Inc. -> Prey, Inc.)
R2 DeskScapes10; C:\Program Files (x86)\Stardock\DeskScapes10\DS10srv.exe [107656 2019-03-08] (Stardock Corporation -> Stardock Software, Inc)
R2 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [1926600 2019-09-02] (Dolby Laboratories, Inc. -> )
R2 FLService; C:\Program Files (x86)\Rene.E Laboratory\File Protector\FLService.exe [110592 2014-01-07] () [Fichier non signé]
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [359808 2019-08-16] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 MaskVPNService; C:\Program Files (x86)\MaskVPN\mask_svc.exe [7493560 2020-08-06] (Global Media (Thailand) Co., Ltd -> Global Media (Thailand) Co., Ltd)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-04-01] (Malwarebytes Inc -> Malwarebytes)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4490376 2020-09-18] (Logitech Inc -> Logitech)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1358248 2021-01-29] (Bitdefender SRL -> Bitdefender)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-11-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [919992 2020-11-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [171272 2021-01-25] (Bitdefender SRL -> Bitdefender)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746944 2021-01-07] (Oracle Corporation -> Oracle Corporation)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-10-02] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2718744 2021-03-24] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [802968 2020-11-03] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-01-17] (Bitdefender SRL -> © Bitdefender SRL)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [161288 2020-12-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R0 FileLock; C:\WINDOWS\System32\drivers\FileLock.sys [61600 2021-03-16] (Shaanxi Hundred Mile Electroic Technology Co., Ltd -> Shaanxi Hundred Mile Electroic Technology Co., Ltd)
R0 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [481936 2020-11-20] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [195232 2020-09-03] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [185312 2020-10-07] (Bitdefender SRL -> Bitdefender)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-04-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-04-02] (Malwarebytes Inc -> Malwarebytes)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-12-11] (Insecure.Com LLC -> Insecure.Com LLC.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [168968 2020-12-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [47920 2020-02-20] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2020-12-30] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [641728 2021-03-24] (Bitdefender SRL -> Bitdefender)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [239872 2021-01-07] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [249776 2021-01-07] (Oracle Corporation -> Oracle Corporation)
S3 VBoxUSB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [174968 2021-01-07] (Oracle Corporation -> Oracle Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
U3 aswbdisk; pas de ImagePath
S3 hfFilter; system32\drivers\hfFilter.sys [X]
U4 npcap_wifi; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-04-03 16:49 - 2021-04-03 16:52 - 000031595 _____ C:\Users\User\Downloads\FRST.txt
2021-04-03 16:48 - 2021-04-03 16:48 - 002298368 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2021-04-03 16:48 - 2021-04-03 16:48 - 000001493 ____C C:\Users\User\Desktop\FRST64.exe - Raccourci.lnk
2021-04-02 22:09 - 2021-04-02 22:09 - 000248992 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-04-02 16:38 - 2021-04-02 16:38 - 000000864 ____C C:\Users\User\Desktop\ZHPSuite.lnk
2021-04-02 15:54 - 2021-04-02 20:40 - 000000000 ___DC C:\Users\User\AppData\Roaming\ZHP
2021-04-02 15:54 - 2021-04-02 16:38 - 000000000 ___DC C:\Users\User\AppData\Local\ZHP
2021-04-02 15:54 - 2021-04-02 15:54 - 000000874 ____C C:\Users\User\Desktop\ZHPCleaner.lnk
2021-04-01 23:39 - 2021-04-01 23:43 - 000000000 ___DC C:\ProgramData\WinThruster
2021-04-01 22:33 - 2021-04-01 23:12 - 000000000 ___DC C:\Users\User\AppData\LocalLow\uTorrent
2021-04-01 04:17 - 2021-04-01 04:17 - 000002033 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-04-01 04:16 - 2021-04-01 04:15 - 000199128 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-04-01 04:16 - 2021-04-01 04:15 - 000019912 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-04-01 04:12 - 2021-04-01 04:12 - 000000000 ___DC C:\Program Files\Malwarebytes
2021-04-01 03:30 - 2021-04-01 03:30 - 000000732 ____C C:\Users\User\Desktop\Gadgets.lnk
2021-04-01 01:08 - 2021-04-01 01:08 - 000000000 ___DC C:\Users\User\AppData\Local\mbamtray
2021-04-01 00:56 - 2021-04-02 01:40 - 000000000 ___DC C:\WINDOWS\system32\Drivers\etc\BACKUP
2021-04-01 00:55 - 2021-04-01 00:55 - 000000000 ___DC C:\Program Files (x86)\Malwarebytes
2021-04-01 00:18 - 2021-04-01 00:18 - 000000000 ___DC C:\Users\User\AppData\Local\mbam
2021-04-01 00:17 - 2021-04-01 00:17 - 000000000 ___DC C:\ProgramData\Malwarebytes
2021-04-01 00:04 - 2021-04-03 16:51 - 000000000 ___DC C:\FRST
2021-03-31 22:54 - 2021-04-02 01:40 - 000000000 ___DC C:\Program Files (x86)\WinRAR
2021-03-31 22:54 - 2021-03-31 22:54 - 000001827 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2021-03-31 22:50 - 2021-04-02 01:40 - 000000000 ___DC C:\Program Files\Wireshark
2021-03-31 22:50 - 2021-03-31 22:50 - 000000875 ____C C:\Users\User\Desktop\µTorrent.lnk
2021-03-31 22:38 - 2021-04-03 16:31 - 000000000 ___DC C:\Program Files\CCleaner
2021-03-31 22:38 - 2021-04-02 01:40 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-03-31 22:38 - 2021-04-01 22:20 - 000002236 ____C C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-03-31 22:38 - 2021-03-31 22:38 - 000003936 ____C C:\WINDOWS\system32\Tasks\CCleaner Update
2021-03-31 19:17 - 2021-03-31 19:17 - 000000875 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2021-03-31 19:05 - 2021-04-01 03:16 - 000003872 ____C C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1617210335
2021-03-31 19:05 - 2021-04-01 03:16 - 000003646 ____C C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1617210323
2021-03-30 23:11 - 2021-03-31 00:00 - 000000000 ___DC C:\ProgramData\Avira
2021-03-30 23:10 - 2021-03-31 00:00 - 000000000 ___DC C:\Program Files (x86)\Avira
2021-03-30 22:50 - 2021-03-30 22:50 - 000000000 ___DC C:\Users\User\AppData\Roaming\Figo
2021-03-30 21:56 - 2021-03-30 22:51 - 000000000 ___DC C:\Users\User\AppData\Roaming\tfdlQQsmgLCLqUsD
2021-03-30 20:03 - 2021-03-31 20:23 - 000000000 ___DC C:\Users\User\AppData\Local\BitTorrentHelper
2021-03-30 20:00 - 2021-04-02 01:40 - 000000000 ___DC C:\Users\User\AppData\Roaming\uTorrent
2021-03-30 19:59 - 2021-03-30 19:59 - 000000000 ___DC C:\Users\User\AppData\Local\UT008
2021-03-30 16:56 - 2021-04-02 01:40 - 000000000 ___DC C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-03-30 16:56 - 2021-04-02 01:40 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-03-30 16:56 - 2021-04-02 01:40 - 000000000 ___DC C:\Program Files\WinRAR
2021-03-30 01:00 - 2021-04-01 00:37 - 000000000 ___DC C:\Users\User\AppData\Roaming\QFdlmQHlyRaMGNe
2021-03-29 20:20 - 2021-03-29 20:20 - 000000000 ___DC C:\Users\User\AppData\Roaming\Nuts
2021-03-29 19:30 - 2021-03-29 20:24 - 000000000 ___DC C:\Users\User\AppData\Roaming\kdQwPKieCkyRdsmd
2021-03-29 19:17 - 2021-03-29 19:17 - 000000000 ___DC C:\Users\User\AppData\Roaming\Lettios
2021-03-29 18:48 - 2021-03-29 18:48 - 000086716 ____C C:\ProgramData\agent.update.1617036461.bdinstall.v2.bin
2021-03-28 19:29 - 2021-04-02 18:12 - 000000000 ___DC C:\ProgramData\Mozilla
2021-03-28 19:29 - 2021-04-02 01:40 - 000000000 ___DC C:\WINDOWS\system32\Tasks\Mozilla
2021-03-28 19:29 - 2021-04-02 01:40 - 000000000 ___DC C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-28 19:29 - 2021-03-28 19:29 - 000001228 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-28 19:29 - 2021-03-28 19:29 - 000000000 ___DC C:\Users\User\AppData\Roaming\Mozilla
2021-03-28 19:29 - 2021-03-28 19:29 - 000000000 ___DC C:\Users\User\AppData\Local\Mozilla
2021-03-28 19:28 - 2021-04-02 01:40 - 000000000 ___DC C:\Program Files (x86)\Mozilla Firefox
2021-03-28 18:25 - 2021-03-28 18:25 - 000000000 ___DC C:\ProgramData\dbg
2021-03-28 02:55 - 2021-03-28 03:29 - 000000000 ___DC C:\Users\User\AppData\Roaming\qrEssdbEoqnJijf
2021-03-28 00:27 - 2021-04-02 01:40 - 000000000 ___DC C:\Users\User\AppData\Roaming\SysInfoTool
2021-03-27 22:13 - 2021-03-31 22:56 - 000000000 ___DC C:\WINDOWS\Minidump
2021-03-27 21:26 - 2021-03-27 21:26 - 000000000 ___DC C:\Program Files (x86)\Ci
2021-03-27 21:24 - 2021-03-27 21:24 - 000000000 ____C C:\Users\User\Documents\ProtonVPN_234125.rar.rar
2021-03-27 21:23 - 2021-03-27 21:28 - 000000000 ___DC C:\Program Files (x86)\Perferendis
2021-03-27 21:17 - 2021-03-27 22:11 - 006556338 ____C C:\WINDOWS\system32\mui_pack.json
2021-03-27 21:16 - 2021-03-27 22:11 - 000001449 ____C C:\WINDOWS\system32\config.json
2021-03-27 21:16 - 2021-03-27 21:16 - 006556336 ____C C:\WINDOWS\system32\mui_pack_es.json
2021-03-27 21:16 - 2021-03-27 21:16 - 000003372 ____C C:\WINDOWS\system32\Tasks\q6ylkvj4rptm
2021-03-27 21:16 - 2021-03-27 21:16 - 000003330 ____C C:\WINDOWS\system32\Tasks\yr5alhqwn64g
2021-03-27 21:15 - 2021-03-27 21:18 - 000000000 ___DC C:\ProgramData\q9r8u0s1u9r8u0s1u9
2021-03-27 21:15 - 2021-03-27 21:15 - 000246842 ____C C:\WINDOWS\system32\get-dnsrecs.ps1
2021-03-27 21:14 - 2021-03-27 21:14 - 000040960 ____C (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2021-03-27 21:07 - 2021-03-27 21:07 - 000000000 ___DC C:\Users\User\AppData\Local\Weather
2021-03-27 21:06 - 2021-04-01 00:37 - 000000000 ___DC C:\Users\User\AppData\Roaming\DLRHDHLXFrBlrn
2021-03-27 21:01 - 2021-03-27 21:01 - 000000000 ___DC C:\Users\User\AppData\Roaming\Boris
2021-03-27 21:01 - 2021-03-27 21:01 - 000000000 ___DC C:\Users\User\AppData\LocalLow\gC9tT2iQ3s
2021-03-27 21:01 - 2021-03-27 21:01 - 000000000 ___DC C:\Users\User\AppData\LocalLow\_1password
2021-03-27 21:00 - 2021-04-02 01:40 - 000000000 ___DC C:\Users\User\AppData\Roaming\purefoe
2021-03-27 20:59 - 2021-03-27 21:29 - 000000000 ___DC C:\Program Files (x86)\MaskVPN
2021-03-27 20:34 - 2021-04-02 02:14 - 000000000 ___DC C:\Users\User\AppData\Local\CrashDumps
2021-03-27 20:19 - 2021-04-01 03:16 - 000003646 ____C C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1616869111
2021-03-27 20:19 - 2021-03-31 19:06 - 000000000 ___DC C:\Users\User\AppData\Local\Opera Software
2021-03-27 20:18 - 2021-04-01 03:16 - 000003872 ____C C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1616869130
2021-03-27 20:16 - 2021-03-31 19:02 - 000000000 ___DC C:\Users\User\AppData\Roaming\Opera Software
2021-03-27 20:16 - 2021-03-27 21:31 - 000000000 ___DC C:\ProgramData\Avast Software
2021-03-27 20:16 - 2021-03-27 20:19 - 000000000 ___HD C:\Users\User\Downloads\.opera
2021-03-27 20:16 - 2021-03-27 20:16 - 000016438 ____C C:\Users\User\AppData\Local\partner.bmp
2021-03-27 20:15 - 2021-03-27 20:15 - 000000000 ___DC C:\ProgramData\McAfee
2021-03-27 20:14 - 2021-03-27 20:15 - 000000000 ___DC C:\Users\User\AppData\Roaming\CompetentBaryta
2021-03-27 09:45 - 2019-10-31 00:23 - 004646160 ___RH (EZB Systems, Inc. ) C:\Users\User\Downloads\⠀⠀
2021-03-25 03:51 - 2021-03-25 18:48 - 000004608 ____C C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2021-03-24 23:07 - 2021-03-25 18:48 - 000070537 ___HC C:\Users\User\Desktop\$$JetTHM$$.cache
2021-03-24 20:21 - 2021-03-24 20:21 - 000000000 ___DC C:\Users\User\AppData\Roaming\COWON
2021-03-22 21:28 - 2021-03-22 21:25 - 002083509 ____C C:\Users\User\Desktop\FL STUDIO 20 MANUEL FRANCAIS .pdf
2021-03-22 03:59 - 2021-04-02 01:40 - 000000000 ___DC C:\Users\User\FL Studio 20
2021-03-22 03:46 - 2021-03-23 23:55 - 000000000 ___DC C:\Users\User\Documents\Image-Line
2021-03-22 03:43 - 2021-03-22 04:14 - 000000000 ___DC C:\Program Files\Common Files\VST2
2021-03-22 03:43 - 2021-03-22 03:43 - 000000000 ___DC C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2021-03-22 03:43 - 2021-03-22 03:43 - 000000000 ___DC C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2021-03-22 03:43 - 2021-03-22 03:43 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2021-03-22 03:43 - 2021-03-22 03:43 - 000000000 ___DC C:\Program Files (x86)\VstPlugins
2021-03-22 03:43 - 2021-03-22 03:43 - 000000000 ___DC C:\Program Files (x86)\ASIO4ALL v2
2021-03-22 03:42 - 2021-03-22 03:42 - 000000000 ___DC C:\Users\User\AppData\Local\xmrig
2021-03-22 03:17 - 2021-03-22 03:44 - 000000000 ___DC C:\Program Files\Image-Line
2021-03-22 03:01 - 2021-03-22 04:31 - 000000000 ___DC C:\ProgramData\PackageCacheService
2021-03-22 02:31 - 2021-04-02 01:40 - 000000000 _SHDC C:\ProgramData\MicrosoftSyncFramework
2021-03-22 02:31 - 2021-03-22 02:31 - 000000000 ___DC C:\Users\User\AppData\Roaming\WinRAR
2021-03-22 01:06 - 2021-03-22 01:16 - 000000000 ___DC C:\Users\User\AppData\Roaming\IMVLpikuHFqxwDEVMp
2021-03-22 00:58 - 2021-03-22 00:58 - 000000000 ___DC C:\ProgramData\Posse
2021-03-22 00:53 - 2021-04-01 00:37 - 000000000 ___DC C:\Users\User\AppData\Roaming\imqEzpXFGAxwPtCBe
2021-03-22 00:53 - 2021-03-22 00:53 - 000000000 ___DC C:\Users\User\AppData\Roaming\Uadeko
2021-03-22 00:50 - 2021-03-22 00:50 - 000000000 ___DC C:\Users\User\AppData\Roaming\Prince
2021-03-22 00:35 - 2021-03-22 03:24 - 000000000 ___DC C:\Users\User\AppData\Roaming\QkzuEAKfdmObEHR
2021-03-21 20:28 - 2021-03-27 20:48 - 000000000 ___DC C:\Program Files (x86)\Program Files (x86)
2021-03-21 20:16 - 2010-01-17 00:27 - 002440704 ____C (AD © 2010) C:\WINDOWS\SysWOW64\SYNSOEMU.DLL
2021-03-21 02:17 - 2021-03-21 02:17 - 000000061 ____C C:\Users\User\AppData\Roaming\.sunvox_synth_s
2021-03-21 02:17 - 2021-03-21 02:17 - 000000061 ____C C:\Users\User\AppData\Roaming\.sunvox_synth_l
2021-03-20 20:41 - 2021-03-20 20:41 - 000000000 ___DC C:\Users\User\Documents\MEGAsync Downloads
2021-03-20 20:38 - 2021-03-20 20:54 - 000000000 ___DC C:\WINDOWS\system32\Tasks\MEGA
2021-03-20 20:38 - 2021-03-20 20:38 - 000000000 ___DC C:\Users\User\AppData\Local\Mega Limited
2021-03-20 03:34 - 2021-03-21 02:26 - 000000000 ___DC C:\ProgramData\VirtualBox
2021-03-20 03:34 - 2021-03-20 03:34 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2021-03-20 03:34 - 2021-01-07 11:18 - 001037824 ____C (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxDrv.sys
2021-03-20 03:34 - 2021-01-07 11:18 - 000187888 ____C (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys
2021-03-20 03:33 - 2021-03-20 03:33 - 000000000 ___DC C:\Program Files\Oracle
2021-03-19 18:43 - 2021-03-19 19:02 - 000000000 ___DC C:\Users\User\AppData\Local\PlaceholderTileLogoFolder
2021-03-17 20:25 - 2021-03-17 20:25 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2021-03-16 23:49 - 2021-03-16 23:49 - 000000000 ___DC C:\Program Files\Samsung
2021-03-16 23:47 - 2021-03-16 23:47 - 000000000 ___DC C:\ProgramData\Documents\CrashDump
2021-03-16 22:38 - 2021-03-16 22:38 - 000000000 ___DC C:\Users\User\Documents\Samsung
2021-03-16 22:36 - 2020-12-09 10:06 - 000168968 ____C (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2021-03-16 22:36 - 2020-12-09 10:06 - 000161288 ____C (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2021-03-16 22:34 - 2021-03-16 22:38 - 000000000 ___DC C:\ProgramData\Samsung
2021-03-16 22:33 - 2021-03-17 20:25 - 000000000 ___DC C:\Users\User\AppData\Roaming\Samsung
2021-03-16 22:33 - 2021-03-17 20:25 - 000000000 ___DC C:\Program Files (x86)\Samsung
2021-03-16 22:33 - 2019-12-13 17:08 - 000144664 ____C (MAPILab Ltd. & Add-in Express Ltd.) C:\WINDOWS\SysWOW64\secman.dll
2021-03-16 18:07 - 2021-03-16 18:07 - 000002914 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-03-16 18:07 - 2021-03-16 18:07 - 000002908 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-03-16 18:07 - 2021-03-16 18:07 - 000002904 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-03-16 18:07 - 2021-03-16 18:07 - 000002902 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-03-16 18:05 - 2021-03-27 17:07 - 000002442 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-16 18:03 - 2021-04-01 03:15 - 000003622 ____C C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-16 18:03 - 2021-04-01 03:15 - 000003398 ____C C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-16 08:17 - 2021-04-03 16:50 - 000000000 ____C C:\WINDOWS\FileLock.bin
2021-03-16 07:38 - 2021-03-20 02:38 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rene.E Laboratory
2021-03-16 07:38 - 2021-03-16 08:03 - 000001318 ____C C:\Users\User\Desktop\Renee File Protector.lnk
2021-03-16 07:38 - 2021-03-16 07:38 - 000061600 ____C (Shaanxi Hundred Mile Electroic Technology Co., Ltd) C:\WINDOWS\system32\Drivers\FileLock.sys
2021-03-16 07:37 - 2021-03-16 07:37 - 000000000 ___DC C:\Program Files (x86)\Rene.E Laboratory
2021-03-15 22:23 - 2021-03-15 22:23 - 000000000 ___DC C:\Users\User\AppData\Roaming\CrystalIdea Software
2021-03-14 02:42 - 2021-03-14 02:42 - 000000000 ___HC C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-03-13 00:43 - 2021-03-13 00:47 - 000000000 ___DC C:\WINDOWS\system32\MRT
2021-03-12 20:49 - 2021-03-12 20:49 - 000000000 ___HC C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2021-03-12 19:49 - 2021-03-12 19:49 - 000000000 ___DC C:\Users\User\AppData\Roaming\GiliSoft
2021-03-12 19:43 - 2021-03-15 21:09 - 000000000 ___DC C:\Program Files\File Protector
2021-03-12 18:29 - 2021-03-12 18:29 - 000096708 ____C C:\Users\User\Documents\Rene.E Lab - Online Shop.html
2021-03-12 18:29 - 2021-03-12 18:29 - 000000000 ___DC C:\Users\User\Documents\Rene.E Lab - Online Shop_files
2021-03-12 18:21 - 2021-03-12 18:21 - 000000000 ___DC C:\Users\User\AppData\Local\CEF
2021-03-12 18:10 - 2021-03-12 18:10 - 000000859 ____C C:\Users\User\Desktop\Ableton Live 10 Suite 1.lnk
2021-03-12 18:07 - 2021-03-12 18:07 - 000000000 ___DC C:\Users\User\AppData\Local\VirtualDJ
2021-03-12 00:44 - 2021-03-12 00:44 - 000000000 ___DC C:\ProgramData\ssh
2021-03-11 23:07 - 2021-03-11 23:07 - 000095744 ____C C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-03-11 23:06 - 2021-03-11 23:06 - 002755584 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-11 23:06 - 2021-03-11 23:06 - 000581120 ____C (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-03-11 23:06 - 2021-03-11 23:06 - 000575488 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-03-11 23:06 - 2021-03-11 23:06 - 000499200 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-03-11 23:06 - 2021-03-11 23:06 - 000234496 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-03-11 23:06 - 2021-03-11 23:06 - 000204800 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2021-03-11 23:06 - 2021-03-11 23:06 - 000135168 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-03-11 23:06 - 2021-03-11 23:06 - 000072704 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-03-11 23:06 - 2021-03-11 23:06 - 000067584 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-03-11 23:06 - 2021-03-11 23:06 - 000053760 ____C C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-03-11 23:05 - 2021-03-11 23:05 - 000469504 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-03-11 23:05 - 2021-03-11 23:05 - 000304128 ____C (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-03-11 23:05 - 2021-03-11 23:05 - 000266240 ____C (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2021-03-11 23:05 - 2021-03-11 23:05 - 000170496 ____C (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-03-11 23:05 - 2021-03-11 23:05 - 000084992 ____C (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-03-11 23:05 - 2021-03-11 23:05 - 000045880 ____C C:\WINDOWS\system32\HvSocket.dll
2021-03-11 23:04 - 2021-03-11 23:04 - 003860832 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2021-03-11 23:04 - 2021-03-11 23:04 - 002755584 ____C (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-11 23:04 - 2021-03-11 23:04 - 001314128 ____C (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-11 23:04 - 2021-03-11 23:04 - 000980320 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2021-03-11 23:04 - 2021-03-11 23:04 - 000915296 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2021-03-11 23:04 - 2021-03-11 23:04 - 000732000 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2021-03-11 23:04 - 2021-03-11 23:04 - 000729600 ____C (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-03-11 23:04 - 2021-03-11 23:04 - 000595968 ____C (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-03-11 23:04 - 2021-03-11 23:04 - 000087552 ____C (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-03-11 23:04 - 2021-03-11 23:04 - 000067072 ____C C:\WINDOWS\system32\BWContextHandler.dll
2021-03-11 23:04 - 2021-03-11 23:04 - 000055376 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2021-03-11 23:04 - 2021-03-11 23:04 - 000011359 ____C C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-11 23:03 - 2021-03-11 23:03 - 000455680 ____C C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-03-11 23:03 - 2021-03-11 23:03 - 000446976 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-03-11 23:03 - 2021-03-11 23:03 - 000221184 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2021-03-11 23:03 - 2021-03-11 23:03 - 000178688 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-03-11 23:03 - 2021-03-11 23:03 - 000112128 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2021-03-11 23:03 - 2021-03-11 23:03 - 000100864 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2021-03-11 23:03 - 2021-03-11 23:03 - 000047472 ____C C:\WINDOWS\SysWOW64\umpdc.dll
2021-03-11 23:03 - 2021-03-11 23:03 - 000039936 ____C (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2021-03-11 23:02 - 2021-03-11 23:02 - 001333760 ____C C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-03-11 23:02 - 2021-03-11 23:02 - 001163776 ____C C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-11 23:02 - 2021-03-11 23:02 - 000611952 ____C C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-11 23:02 - 2021-03-11 23:02 - 000422912 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-03-11 23:02 - 2021-03-11 23:02 - 000330752 ____C C:\WINDOWS\SysWOW64\ssdm.dll
2021-03-11 23:02 - 2021-03-11 23:02 - 000266240 ____C C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-03-11 23:02 - 2021-03-11 23:02 - 000240640 ____C C:\WINDOWS\SysWOW64\CoreMas.dll
2021-03-11 23:02 - 2021-03-11 23:02 - 000235520 ____C C:\WINDOWS\SysWOW64\HeatCore.dll
2021-03-11 23:02 - 2021-03-11 23:02 - 000182272 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-03-11 23:02 - 2021-03-11 23:02 - 000023552 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2021-03-11 23:02 - 2021-03-11 23:02 - 000010752 ____C C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2021-03-11 23:01 - 2021-03-11 23:01 - 004898144 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2021-03-11 23:01 - 2021-03-11 23:01 - 001354080 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2021-03-11 23:01 - 2021-03-11 23:01 - 001091936 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2021-03-11 23:01 - 2021-03-11 23:01 - 001032544 ____C (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2021-03-11 23:01 - 2021-03-11 23:01 - 000238592 ____C (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-03-11 23:01 - 2021-03-11 23:01 - 000102912 ____C (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2021-03-11 23:01 - 2021-03-11 23:01 - 000056672 ____C (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2021-03-11 23:00 - 2021-03-11 23:00 - 002254336 ____C C:\WINDOWS\system32\dwmscene.dll
2021-03-11 23:00 - 2021-03-11 23:00 - 001822272 ____C (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-11 23:00 - 2021-03-11 23:00 - 001394024 ____C (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-11 23:00 - 2021-03-11 23:00 - 000544768 ____C (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-03-11 23:00 - 2021-03-11 23:00 - 000266752 ____C (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2021-03-11 23:00 - 2021-03-11 23:00 - 000190976 ____C C:\WINDOWS\system32\BthpanContextHandler.dll
2021-03-11 23:00 - 2021-03-11 23:00 - 000152064 ____C C:\WINDOWS\system32\EoAExperiences.exe
2021-03-11 23:00 - 2021-03-11 23:00 - 000112128 ____C (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2021-03-11 23:00 - 2021-03-11 23:00 - 000060928 ____C C:\WINDOWS\system32\runexehelper.exe
2021-03-11 23:00 - 2021-03-11 23:00 - 000048640 ____C (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2021-03-11 23:00 - 2021-03-11 23:00 - 000001370 ____C C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2021-03-11 22:59 - 2021-03-11 22:59 - 002260480 ____C (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-03-11 22:59 - 2021-03-11 22:59 - 000643072 ____C C:\WINDOWS\system32\WindowManagementAPI.dll
2021-03-11 22:59 - 2021-03-11 22:59 - 000231248 ____C C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-11 22:59 - 2021-03-11 22:59 - 000091136 ____C C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-11 22:59 - 2021-03-11 22:59 - 000029696 ____C (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2021-03-11 22:59 - 2021-03-11 22:59 - 000025088 ____C (The ICU Project) C:\WINDOWS\system32\icuin.dll
2021-03-11 22:58 - 2021-03-11 22:58 - 002260992 ____C C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-03-11 22:58 - 2021-03-11 22:58 - 000707016 ____C C:\WINDOWS\system32\TextShaping.dll
2021-03-11 22:58 - 2021-03-11 22:58 - 000306688 ____C C:\WINDOWS\system32\HeatCore.dll
2021-03-11 22:57 - 2021-03-11 22:57 - 000562688 ____C (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-03-11 22:57 - 2021-03-11 22:57 - 000363520 ____C C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-03-11 22:57 - 2021-03-11 22:57 - 000243200 ____C (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-03-11 22:57 - 2021-03-11 22:57 - 000165888 ____C C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-03-11 22:56 - 2021-03-11 22:56 - 004227116 ____C C:\WINDOWS\system32\DefaultHrtfs.bin
2021-03-11 22:56 - 2021-03-11 22:56 - 000455168 ____C C:\WINDOWS\system32\ssdm.dll
2021-03-11 22:56 - 2021-03-11 22:56 - 000287232 ____C C:\WINDOWS\system32\CoreMas.dll
2021-03-11 22:56 - 2021-03-11 22:56 - 000197632 ____C C:\WINDOWS\system32\IHDS.dll
2021-03-11 22:56 - 2021-03-11 22:56 - 000089088 ____C C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2021-03-11 22:56 - 2021-03-11 22:56 - 000074240 ____C C:\WINDOWS\system32\rdsxvmaudio.dll
2021-03-11 22:56 - 2021-03-11 22:56 - 000073216 ____C C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2021-03-11 22:56 - 2021-03-11 22:56 - 000064552 ____C C:\WINDOWS\system32\umpdc.dll
2021-03-11 22:56 - 2021-03-11 22:56 - 000030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2021-03-11 22:56 - 2021-03-11 22:56 - 000013312 ____C C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-03-11 21:59 - 2021-03-11 21:59 - 000000000 ___DC C:\Program Files\Microsoft Update Health Tools
2021-03-11 20:35 - 2021-03-11 20:35 - 000000000 ___DC C:\ProgramData\IObit
2021-03-11 18:12 - 2021-04-02 01:40 - 000000000 ___DC C:\WINDOWS\Prey
2021-03-11 18:10 - 2021-04-02 01:40 - 000000000 ___DC C:\Users\User\Desktop\Prey
2021-03-11 16:47 - 2021-03-11 17:05 - 000000000 ___DC C:\WINDOWS\system32\Tasks\NCH Software
2021-03-11 16:46 - 2021-03-11 17:13 - 000000000 ___DC C:\Program Files (x86)\NCH Software
2021-03-11 16:46 - 2021-03-11 17:05 - 000000000 ___DC C:\ProgramData\NCH Software
2021-03-11 16:46 - 2021-03-11 16:46 - 000000000 ___DC C:\Users\User\AppData\Roaming\NCH Software
2021-03-11 16:38 - 2021-03-11 17:06 - 000000000 ___DC C:\ProgramData\TEMP
2021-03-11 16:38 - 2021-03-11 16:42 - 000000081 ____C C:\ProgramData\fvconfig.ini
2021-03-11 16:38 - 2021-03-11 16:38 - 000115272 ____C (Eltima Software) C:\WINDOWS\HMFAxCore9f5dcafb5219edf4b6367a0b9b99b390.sys
2021-03-11 16:17 - 2011-06-03 23:59 - 000057648 ____C (FSPro Labs) C:\WINDOWS\system32\Drivers\FSPFltd2.sys
2021-03-11 15:44 - 2021-03-11 15:44 - 000230840 ____C (TrueCrypt Foundation) C:\WINDOWS\system32\Drivers\truecrypt.sys
2021-03-11 15:22 - 2021-03-11 15:22 - 000000000 ___DC C:\WINDOWS\system32\Tasks\Services
2021-03-11 15:20 - 2021-03-11 15:20 - 000000000 ___DC C:\Users\User\AppData\Roaming\Natasha
2021-03-11 14:54 - 2021-04-01 00:37 - 000000000 ___DC C:\Users\User\AppData\Roaming\jAsRcswIpgyCVUwFmk
2021-03-11 14:21 - 2021-03-16 07:38 - 000000000 ___DC C:\ProgramData\GiliSoft
2021-03-11 13:51 - 2021-03-11 14:00 - 000000000 ___DC C:\Users\User\AppData\Local\1Password
2021-03-11 02:52 - 2021-03-11 02:52 - 000001513 ____C C:\Users\User\Desktop\Caméra.lnk
2021-03-11 02:50 - 2021-03-13 02:56 - 000002347 ____C C:\Users\User\Desktop\Paramètres de la caméra Logitech.lnk
2021-03-11 02:32 - 2021-03-11 02:32 - 000000000 ___DC C:\Program Files\Logitech
2021-03-11 01:50 - 2021-04-03 16:31 - 000004156 ____C C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{3EDCC384-E253-4983-A9C6-6320D30FDCE0}
2021-03-11 00:52 - 2021-03-11 00:52 - 000000000 ___DC C:\Users\User\AppData\Local\Viber Media S.à r.l
2021-03-11 00:28 - 2021-04-02 18:00 - 000000000 ___DC C:\Users\User\Documents\LOGICIELS
2021-03-11 00:19 - 2021-03-11 00:19 - 000001300 ____C C:\Users\User\Desktop\Windows 10 Manager.lnk
2021-03-11 00:19 - 2021-03-11 00:19 - 000000000 ___DC C:\Users\User\AppData\Roaming\Yamicsoft
2021-03-11 00:19 - 2021-03-11 00:19 - 000000000 ___DC C:\Program Files\Yamicsoft
2021-03-11 00:11 - 2021-03-12 18:09 - 000000829 ___HC C:\Users\User\Desktop\Ableton Live 10 Suite.lnk
2021-03-11 00:07 - 2021-03-11 00:07 - 000000000 ___DC C:\Users\User\Documents\Ableton
2021-03-11 00:07 - 2021-03-11 00:07 - 000000000 ___DC C:\Users\User\AppData\Roaming\Cycling '74
2021-03-11 00:07 - 2021-03-11 00:07 - 000000000 ___DC C:\Users\User\AppData\Roaming\Ableton
2021-03-11 00:07 - 2021-03-11 00:07 - 000000000 ___DC C:\Users\User\AppData\Local\Ableton
2021-03-11 00:07 - 2021-03-11 00:07 - 000000000 ___DC C:\ProgramData\Max 8
2021-03-11 00:04 - 2021-03-11 00:04 - 000000290 _RSHC C:\ProgramData\ntuser.pol
2021-03-11 00:03 - 2021-03-11 00:03 - 000000000 ___DC C:\Program Files\Common Files\Propellerhead Software
2021-03-10 23:54 - 2021-03-11 02:47 - 000000000 ___DC C:\ProgramData\Ableton
2021-03-10 23:53 - 2021-03-11 00:11 - 000000859 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 10 Suite.lnk
2021-03-10 23:32 - 2021-03-10 23:32 - 000001633 ____C C:\Users\User\Desktop\Office.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002492 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002461 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002456 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002451 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002450 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002443 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visio.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002414 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002413 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002407 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002401 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2021-03-10 23:16 - 2021-03-10 23:16 - 000002393 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2021-03-10 23:13 - 2021-03-10 23:13 - 000000000 ___DC C:\Program Files\Common Files\DESIGNER
2021-03-10 23:07 - 2021-03-23 15:33 - 000000000 ___DC C:\Program Files\Microsoft Office
2021-03-10 23:07 - 2021-03-10 23:07 - 000000000 ___DC C:\Program Files\Microsoft Office 15
2021-03-10 22:58 - 2021-03-31 22:50 - 000002736 ____C C:\WINDOWS\system32\Tasks\WinZip Update Notifier 2
2021-03-10 22:58 - 2021-03-31 22:50 - 000002734 ____C C:\WINDOWS\system32\Tasks\WinZip Update Notifier 3
2021-03-10 22:58 - 2021-03-31 22:50 - 000002734 ____C C:\WINDOWS\system32\Tasks\WinZip Update Notifier 1
2021-03-10 22:58 - 2021-03-10 23:01 - 000000000 ___DC C:\Users\User\AppData\Local\WinZip
2021-03-10 22:58 - 2021-03-10 22:58 - 000002087 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip.lnk
2021-03-10 22:58 - 2021-03-10 22:58 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2021-03-10 22:57 - 2021-04-02 01:40 - 000000000 ___DC C:\Program Files\WinZip
2021-03-10 22:57 - 2021-03-10 22:58 - 000000000 ___DC C:\ProgramData\WinZip
2021-03-10 22:56 - 2021-03-10 22:56 - 000000000 ___DC C:\ProgramData\UniqueId
2021-03-10 21:12 - 2021-03-10 21:12 - 000000000 ___DC C:\Program Files (x86)\DVDVideoMedia
2021-03-10 21:06 - 2021-03-10 21:06 - 000000000 ___DC C:\Users\User\AppData\Roaming\SecretFolder
2021-03-10 20:57 - 2021-03-12 18:08 - 000000000 ___DC C:\Users\User\Documents\VirtualDJ
2021-03-10 20:57 - 2021-03-10 20:57 - 000000976 ____C C:\Users\User\Desktop\VirtualDJ 2021.lnk
2021-03-10 20:57 - 2021-03-10 20:57 - 000000000 ___DC C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2021-03-10 20:57 - 2021-03-10 20:57 - 000000000 ___DC C:\Program Files\VirtualDJ
2021-03-10 20:54 - 2021-03-10 20:54 - 000000000 ___DC C:\ProgramData\AnyDesk
2021-03-10 20:53 - 2021-03-17 20:25 - 000000000 __HDC C:\Program Files (x86)\InstallShield Installation Information
2021-03-10 20:53 - 2021-03-11 22:59 - 000000000 ___DC C:\Users\User\AppData\Roaming\AnyDesk
2021-03-10 20:53 - 2021-03-10 20:53 - 000000000 ___DC C:\Program Files (x86)\JetAudio
2021-03-10 20:50 - 2021-03-11 00:40 - 000000000 ___DC C:\Users\User\AppData\Local\Stardock
2021-03-10 20:50 - 2021-03-10 20:50 - 000000000 ___DC C:\Users\User\Documents\Stardock
2021-03-10 20:50 - 2021-03-10 20:50 - 000000000 ___DC C:\ProgramData\Stardock
2021-03-10 20:50 - 2021-03-10 20:50 - 000000000 ___DC C:\Program Files (x86)\Stardock
2021-03-10 20:46 - 2021-03-10 20:46 - 000000000 ___DC C:\Program Files (x86)\Free Video Joiner
2021-03-10 20:45 - 2021-03-10 20:45 - 000001827 ____C C:\Users\User\Desktop\Wireshark.lnk
2021-03-10 20:44 - 2021-04-01 03:16 - 000002216 ____C C:\WINDOWS\system32\Tasks\npcapwatchdog
2021-03-10 20:44 - 2021-03-31 22:54 - 000000000 ___DC C:\ProgramData\Package Cache
2021-03-10 20:44 - 2021-03-10 20:44 - 000000000 ___DC C:\WINDOWS\SysWOW64\Npcap
2021-03-10 20:44 - 2021-03-10 20:44 - 000000000 ___DC C:\WINDOWS\system32\Npcap
2021-03-10 20:44 - 2021-03-10 20:44 - 000000000 ___DC C:\Program Files\Npcap
2021-03-10 20:42 - 2021-03-10 20:42 - 000000000 ___DC C:\Program Files (x86)\Free Crop Video
2021-03-10 20:41 - 2021-03-10 20:41 - 000000000 ___DC C:\Users\User\AppData\Local\Downloaded Installations
2021-03-10 20:39 - 2021-04-02 21:49 - 000000000 ___DC C:\Users\User\AppData\Roaming\vlc
2021-03-10 20:38 - 2021-03-10 20:38 - 000000000 ___DC C:\Program Files\VideoLAN
2021-03-10 20:33 - 2021-03-11 02:54 - 000000000 ___DC C:\Users\User\AppData\Roaming\ViberPC
2021-03-10 20:33 - 2021-03-10 20:33 - 000001028 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Viber.lnk
2021-03-10 20:33 - 2021-03-10 20:33 - 000001026 ____C C:\Users\User\Desktop\Viber.lnk
2021-03-10 20:33 - 2021-03-10 20:33 - 000000000 ___DC C:\Users\User\Documents\ViberDownloads
2021-03-10 20:32 - 2021-03-10 20:33 - 000000000 ___DC C:\Users\User\AppData\Local\Viber
2021-03-10 20:32 - 2021-03-10 20:32 - 000000000 ___DC C:\Users\User\AppData\Local\Package Cache
2021-03-10 20:28 - 2021-03-10 20:28 - 000000000 ___DC C:\Program Files\Common Files\logishrd
2021-03-10 20:18 - 2021-04-03 16:28 - 000000000 ___DC C:\Users\User\AppData\Local\Sidebar7
2021-03-10 20:05 - 2021-03-10 20:05 - 000779836 ____C C:\ProgramData\cl.1615399238.bdinstall.v2.bin
2021-03-10 20:05 - 2021-03-10 20:05 - 000102392 ____C C:\ProgramData\cl.kit.1615399230.bdinstall.v2.bin
2021-03-10 20:05 - 2021-03-10 20:05 - 000000000 ___DC C:\ProgramData\Gemma
2021-03-10 20:05 - 2021-03-10 20:05 - 000000000 ___DC C:\ProgramData\Atc
2021-03-10 20:05 - 2021-03-10 20:05 - 000000000 ___DC C:\ProgramData\48C4687D-9760-4F5B-BAB3-60351B0841E4
2021-03-10 20:03 - 2021-03-10 20:03 - 000000000 ___DC C:\WINDOWS\system32\elambkup
2021-03-10 20:03 - 2021-03-10 20:03 - 000000000 ___DC C:\ProgramData\BDLogging
2021-03-10 20:03 - 2019-03-21 01:12 - 000022960 ____C (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys
2021-03-10 20:02 - 2021-03-24 08:43 - 002718744 ____C (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2021-03-10 20:02 - 2021-03-10 20:02 - 000000000 ___DC C:\Users\User\AppData\Roaming\Bitdefender
2021-03-10 20:02 - 2020-11-20 12:20 - 000481936 ____C (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys
2021-03-10 20:02 - 2020-11-03 17:17 - 000802968 ____C (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys
2021-03-10 20:02 - 2020-01-17 03:03 - 000046056 ____C (© Bitdefender SRL) C:\WINDOWS\system32\Drivers\bdprivmon.sys
2021-03-10 20:01 - 2021-03-24 08:43 - 000641728 ____C (Bitdefender) C:\WINDOWS\system32\Drivers\trufos.sys
2021-03-10 20:01 - 2020-10-07 11:30 - 000185312 ____C (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2021-03-10 20:01 - 2020-09-03 05:20 - 000195232 ____C (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys
2021-03-10 19:53 - 2021-03-21 02:25 - 000000081 ____C C:\Users\User\AppData\Roaming\sunvox_config.ini
2021-03-10 19:53 - 2021-03-21 02:25 - 000000010 ____C C:\Users\User\AppData\Roaming\.sunvox_pateditor
2021-03-10 19:53 - 2021-03-21 02:25 - 000000005 ____C C:\Users\User\AppData\Roaming\.sunvox_timeline
2021-03-10 19:53 - 2021-03-21 02:25 - 000000002 ____C C:\Users\User\AppData\Roaming\.sunvox_soundnet
2021-03-10 19:47 - 2021-03-10 21:04 - 000000000 ___DC C:\ProgramData\Bitdefender
2021-03-10 19:46 - 2021-03-10 20:01 - 000000000 ___DC C:\Program Files\Common Files\Bitdefender
2021-03-10 19:43 - 2021-04-01 03:20 - 000003804 ____C C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2021-03-10 19:43 - 2021-03-10 19:43 - 000206452 ____C C:\ProgramData\vpn.1615398139.bdinstall.v2.bin
2021-03-10 19:43 - 2021-03-10 19:43 - 000000000 ___DC C:\ProgramData\AnchorFree_Inc
2021-03-10 19:42 - 2021-03-10 20:01 - 000000000 ___DC C:\Program Files\Bitdefender
2021-03-10 19:42 - 2021-03-10 19:42 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender VPN
2021-03-10 19:42 - 2021-03-10 19:42 - 000000000 ___DC C:\ProgramData\Bitdefender VPN
2021-03-10 19:41 - 2021-04-02 01:40 - 000000000 ___DC C:\Program Files\Bitdefender Agent
2021-03-10 19:41 - 2021-03-10 19:41 - 000118332 ____C C:\ProgramData\agent.1615398104.bdinstall.v2.bin
2021-03-10 19:41 - 2021-03-10 19:41 - 000000000 ___DC C:\ProgramData\Bitdefender Agent
2021-03-10 19:36 - 2021-03-23 17:15 - 000000000 ___DC C:\Users\User\AppData\Local\Comms
2021-03-10 19:29 - 2021-04-02 03:11 - 000002245 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-10 19:28 - 2021-03-10 19:28 - 000000000 ___DC C:\Program Files\Google
2021-03-10 19:27 - 2021-04-01 03:15 - 000003576 ____C C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-03-10 19:27 - 2021-04-01 03:15 - 000003352 ____C C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-03-10 19:26 - 2021-03-10 19:41 - 000000000 ___DC C:\Users\User\AppData\Local\Google
2021-03-10 19:26 - 2021-03-10 19:26 - 000000000 ___DC C:\Program Files (x86)\Google
2021-03-10 19:19 - 2021-04-01 03:16 - 000002918 ____C C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-920637449-3320240030-3157856164-1001
2021-03-10 19:19 - 2021-03-10 19:19 - 000000000 ___DC C:\Users\User\AppData\Local\OneDrive
2021-03-10 19:18 - 2021-03-12 19:16 - 000000000 ___DC C:\Users\User\AppData\Local\Lenovo
2021-03-10 19:18 - 2021-03-10 19:18 - 000000000 ___DC C:\ProgramData\Microsoft OneDrive
2021-03-10 19:17 - 2021-03-10 19:24 - 000000000 ___DC C:\Users\User\AppData\Local\MicrosoftEdge
2021-03-10 19:15 - 2021-03-19 19:02 - 000000000 ___DC C:\ProgramData\Packages
2021-03-10 19:15 - 2021-03-10 19:15 - 000000000 ___DC C:\Users\User\AppData\Local\Publishers
2021-03-10 19:14 - 2021-04-02 22:19 - 000000000 ___DC C:\Users\User\AppData\Local\D3DSCache
2021-03-10 19:14 - 2021-04-02 16:29 - 000000000 ___DC C:\Users\User\AppData\Local\Packages
2021-03-10 19:14 - 2021-03-16 18:45 - 000000000 ___DC C:\Users\User\AppData\Local\VirtualStore
2021-03-10 19:14 - 2021-03-10 20:33 - 000000000 ___DC C:\Users\User\AppData\Local\AMD
2021-03-10 19:14 - 2021-03-10 19:58 - 000000000 ___DC C:\Users\User\AppData\Local\ConnectedDevicesPlatform
2021-03-10 19:14 - 2021-03-10 19:14 - 000000020 __SHC C:\Users\User\ntuser.ini
2021-03-10 19:14 - 2021-03-10 19:14 - 000000000 ___DC C:\Users\User\AppData\Roaming\Adobe
2021-03-10 19:01 - 2021-03-10 19:01 - 000000000 SHDCL C:\Users\Default\AppData\Local\Historique
2021-03-10 19:01 - 2021-03-10 19:01 - 000000000 SHDCL C:\Users\Default User
2021-03-10 19:01 - 2021-03-10 19:01 - 000000000 SHDCL C:\Users\All Users
2021-03-10 19:01 - 2021-03-10 19:01 - 000000000 SHDCL C:\ProgramData\Modèles
2021-03-10 19:01 - 2021-03-10 19:01 - 000000000 SHDCL C:\ProgramData\Menu Démarrer
2021-03-10 19:01 - 2021-03-10 19:01 - 000000000 SHDCL C:\ProgramData\Bureau
2021-03-10 19:01 - 2021-03-10 19:01 - 000000000 SHDCL C:\Program Files\Fichiers communs
2021-03-10 19:00 - 2021-04-02 18:58 - 001770910 ____C C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-10 18:50 - 2021-03-15 17:54 - 000002398 ____C C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Voisinage réseau
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Voisinage d'impression
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Modèles
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Mes documents
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Menu Démarrer
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Documents\Mes vidéos
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Documents\Mes images
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\Documents\Ma musique
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-03-10 18:50 - 2021-03-10 18:50 - 000000000 SHDCL C:\Users\User\AppData\Local\Historique
2021-03-10 18:44 - 2021-04-02 18:50 - 000000134 ____C C:\WINDOWS\system32\regtest.txt
2021-03-10 18:44 - 2021-03-10 18:44 - 000000000 ___DC C:\ProgramData\Realtek
2021-03-10 18:44 - 2021-03-10 18:44 - 000000000 ___DC C:\Program Files\Common Files\Dolby
2021-03-10 18:44 - 2021-02-23 19:24 - 000107936 ____C (Lenovo Group Ltd.) C:\WINDOWS\system32\ImController.CoInstaller.dll
2021-03-10 18:43 - 2021-04-02 18:50 - 000065536 ____C C:\WINDOWS\psp_storage.bin
2021-03-10 18:43 - 2021-03-12 19:16 - 000000000 ___DC C:\WINDOWS\system32\Tasks\Lenovo
2021-03-10 18:43 - 2021-03-12 19:16 - 000000000 ___DC C:\ProgramData\Lenovo
2021-03-10 18:43 - 2021-03-10 18:44 - 000000000 ___DC C:\WINDOWS\system32\dolbyaposvc
2021-03-10 18:43 - 2021-03-10 18:43 - 000000000 ___DC C:\WINDOWS\system32\AMD
2021-03-10 18:43 - 2021-03-10 18:43 - 000000000 ___DC C:\Program Files\AMD
2021-03-10 18:42 - 2021-04-02 18:50 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
2021-03-10 18:42 - 2021-03-10 18:42 - 000000000 ___DC C:\WINDOWS\system32\Drivers\wd
2021-03-10 18:42 - 2019-09-24 20:02 - 000464832 ____C (ELAN Microelectronics Corp.) C:\WINDOWS\system32\ETDUninstall.exe
2021-03-10 18:41 - 2021-04-03 16:28 - 000000000 ___DC C:\WINDOWS\system32\SleepStudy
2021-03-10 18:41 - 2021-03-12 00:49 - 000439128 ____C C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-10 18:40 - 2021-03-31 22:56 - 000000000 ___DC C:\WINDOWS\Panther
2021-03-10 18:35 - 2021-03-12 20:08 - 000000000 ___DC C:\Windows.old
2021-03-10 18:34 - 2021-03-10 18:34 - 000000000 ___DC C:\WINDOWS\ServiceProfiles
2021-03-10 18:33 - 2021-03-10 18:33 - 000000000 ___DC C:\WINDOWS\system32\Samsung
2021-03-10 18:32 - 2021-03-12 19:16 - 000000000 ___DC C:\WINDOWS\Lenovo
2021-03-10 18:30 - 2021-03-10 18:30 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-03-10 18:29 - 2021-03-10 18:29 - 000000000 ___DC C:\WINDOWS\Setup
2021-03-10 18:28 - 2021-03-10 19:14 - 000000000 ___DC C:\WINDOWS\system32\FxsTmp
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\SysWOW64\XPSViewer
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\SysWOW64\FxsTmp
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\system32\OpenSSH
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\system32\MailContactsCalendarSync
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\OCR
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\addins
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\Program Files\Reference Assemblies
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\Program Files\MSBuild
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\Program Files (x86)\Reference Assemblies
2021-03-10 18:28 - 2021-03-10 18:28 - 000000000 ___DC C:\Program Files (x86)\MSBuild
2021-03-10 18:27 - 2021-04-02 18:58 - 000793016 ____C C:\WINDOWS\system32\perfh00C.dat
2021-03-10 18:27 - 2021-04-02 18:58 - 000150146 ____C C:\WINDOWS\system32\perfc00C.dat
2021-03-10 18:27 - 2021-03-10 18:27 - 000351124 ____C C:\WINDOWS\system32\perfi00C.dat
2021-03-10 18:27 - 2021-03-10 18:27 - 000040694 ____C C:\WINDOWS\system32\perfd00C.dat
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\SysWOW64\winrm
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\SysWOW64\WCN
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\SysWOW64\sysprep
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\SysWOW64\slmgr
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\SysWOW64\fr
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\SysWOW64\0409
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\system32\winrm
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\system32\WCN
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\system32\slmgr
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\system32\Printing_Admin_Scripts
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\system32\fr
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\system32\0409
2021-03-10 18:27 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\DigitalLocker
2021-03-10 18:22 - 2021-04-02 23:23 - 000000000 ___DC C:\ProgramData\regid.1991-06.com.microsoft
2021-03-10 18:22 - 2021-04-02 18:50 - 000000000 ___DC C:\WINDOWS\ServiceState
2021-03-10 18:22 - 2021-04-02 01:40 - 000000000 __HDC C:\WINDOWS\ELAMBKUP
2021-03-10 18:22 - 2021-04-02 01:40 - 000000000 ___DC C:\WINDOWS\system32\Sysprep
2021-03-10 18:22 - 2021-04-02 01:40 - 000000000 ___DC C:\WINDOWS\Branding
2021-03-10 18:22 - 2021-04-02 01:37 - 000000000 __HDC C:\Program Files\WindowsApps
2021-03-10 18:22 - 2021-04-02 01:33 - 000000000 ___DC C:\WINDOWS\registration
2021-03-10 18:22 - 2021-04-01 23:48 - 000000000 __RDC C:\Program Files (x86)
2021-03-10 18:22 - 2021-04-01 01:48 - 000000000 ___DC C:\WINDOWS\LiveKernelReports
2021-03-10 18:22 - 2021-03-31 19:46 - 000000000 ___DC C:\WINDOWS\AppReadiness
2021-03-10 18:22 - 2021-03-15 17:53 - 000000000 ___DC C:\Program Files\Common Files\microsoft shared
2021-03-10 18:22 - 2021-03-14 01:05 - 000000000 ___DC C:\WINDOWS\system32\NDF
2021-03-10 18:22 - 2021-03-12 00:55 - 000000000 __RDC C:\WINDOWS\ImmersiveControlPanel
2021-03-10 18:22 - 2021-03-12 00:47 - 000000000 ___DC C:\WINDOWS\system32\config\TxR
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 __SDC C:\WINDOWS\SysWOW64\F12
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 __SDC C:\WINDOWS\SysWOW64\DiagSvcs
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\WinMetadata
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\setup
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\oobe
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\migwiz
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\Keywords
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\Dism
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\Com
2021-03-10 18:22 - 2021-03-12 00:46 - 000000000 ___DC C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 __SDC C:\WINDOWS\system32\UNP
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 __SDC C:\WINDOWS\system32\F12
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 __SDC C:\WINDOWS\system32\DiagSvcs
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 __RDC C:\WINDOWS\PrintDialog
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\SystemResources
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\WinMetadata
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\WinBioPlugIns
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\SystemResetPlatform
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\ShellExperiences
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\setup
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\PerceptionSimulation
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\oobe
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\migwiz
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\Keywords
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\Dism
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\Com
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\appraiser
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\system32\AdvancedInstallers
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\ShellExperiences
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\ShellComponents
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\Provisioning
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\PolicyDefinitions
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\IME
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\DiagTrack
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\bcastdvr
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\Program Files\Windows Photo Viewer
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\Program Files\Windows Defender
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\Program Files\Common Files\System
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\Program Files (x86)\Windows Photo Viewer
2021-03-10 18:22 - 2021-03-12 00:45 - 000000000 ___DC C:\Program Files (x86)\Windows Defender
2021-03-10 18:22 - 2021-03-11 23:25 - 000020908 ____C C:\WINDOWS\system32\OEMDefaultAssociations.xml
2021-03-10 18:22 - 2021-03-11 13:04 - 000000000 ___DC C:\WINDOWS\appcompat
2021-03-10 18:22 - 2021-03-11 00:04 - 000000000 __HDC C:\WINDOWS\system32\GroupPolicy
2021-03-10 18:22 - 2021-03-10 20:18 - 000000000 __SDC C:\Program Files\Windows Sidebar
2021-03-10 18:22 - 2021-03-10 20:18 - 000000000 __SDC C:\Program Files (x86)\Windows Sidebar
2021-03-10 18:22 - 2021-03-10 20:12 - 000000000 __SDC C:\WINDOWS\Downloaded Program Files
2021-03-10 18:22 - 2021-03-10 20:12 - 000000000 __RDC C:\WINDOWS\Offline Web Pages
2021-03-10 18:22 - 2021-03-10 19:15 - 000000000 ___DC C:\ProgramData\USOPrivate
2021-03-10 18:22 - 2021-03-10 19:14 - 000000000 ___DC C:\WINDOWS\system32\spool
2021-03-10 18:22 - 2021-03-10 19:01 - 000000000 ___DC C:\Program Files\Windows NT
2021-03-10 18:22 - 2021-03-10 18:37 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-03-10 18:22 - 2021-03-10 18:36 - 000000000 ___DC C:\WINDOWS\system32\WinBioDatabase
2021-03-10 18:22 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\SysWOW64\MUI
2021-03-10 18:22 - 2021-03-10 18:28 - 000000000 ___DC C:\WINDOWS\system32\MUI
2021-03-10 18:22 - 2021-03-10 18:27 - 000000000 __SDC C:\WINDOWS\system32\dsc
2021-03-10 18:22 - 2021-03-10 18:27 - 000000000 ___DC C:\WINDOWS\Help
2021-03-10 18:22 - 2021-03-10 18:27 - 000000000 ___DC C:\Program Files (x86)\Windows NT
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 _RSDC C:\WINDOWS\Media
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 __SDC C:\WINDOWS\SysWOW64\Nui
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 __SDC C:\WINDOWS\SysWOW64\Configuration
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 __SDC C:\WINDOWS\system32\Nui
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 __SDC C:\WINDOWS\system32\Configuration
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 __HDC C:\WINDOWS\LanguageOverlayCache
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\Web
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\WaaS
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\Vss
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\tracing
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\TAPI
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\SMI
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\ras
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\NDF
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\Msdtc
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\Ipmi
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\InputMethod
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\inetsrv
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\IME
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\icsxml
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\GroupPolicyUsers
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\GroupPolicy
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\downlevel
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\Bthprops
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SysWOW64\AppLocker
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SystemApps
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\winevt
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ti-et
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ta-lk
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ta-in
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\si-lk
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\Sgrm
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\SecureBootUpdates
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ras
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ProximityToast
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\PointOfService
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\osa-Osge-001
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\my-mm
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\MsDtc
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\Ipmi
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\InputMethod
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\inetsrv
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\IME
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\icsxml
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ias
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\Hydrogen
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\GroupPolicyUsers
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ff-Adlm-SN
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\DriverState
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\Drivers\DriverData
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\downlevel
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\DDFs
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\ContainerSettingsProviders
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\config\systemprofile
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\config\RegBack
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\config\Journal
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\Bthprops
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\AppLocker
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\am-et
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\System
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SKB
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\security
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\schemas
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\SchCache
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\Resources
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\rescache
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\PLA
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\Performance
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\ModemLogs
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\L2Schemas
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\InputMethod
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\IdentityCRL
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\Globalization
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\GameBarPresenceWriter
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\Cursors
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\Containers
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\ProgramData\WindowsHolographicDevices
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\ProgramData\USOShared
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\Program Files\Windows Security
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\Program Files\Windows Portable Devices
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\Program Files\Windows Multimedia Platform
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\Program Files\ModifiableWindowsApps
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\Program Files\Common Files\Services
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\Program Files (x86)\Windows Portable Devices
2021-03-10 18:22 - 2021-03-10 18:22 - 000000000 ___DC C:\Program Files (x86)\Windows Multimedia Platform
2021-03-10 18:22 - 2021-03-10 18:18 - 000215943 ____C C:\WINDOWS\SysWOW64\dssec.dat
2021-03-10 18:22 - 2021-03-10 18:18 - 000215943 ____C C:\WINDOWS\system32\dssec.dat
2021-03-10 18:22 - 2021-03-10 18:18 - 000017635 ____C C:\WINDOWS\system32\Drivers\etc\services
2021-03-10 18:22 - 2021-03-10 18:18 - 000003683 ____C C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2021-03-10 18:22 - 2021-03-10 18:18 - 000003103 ____C C:\WINDOWS\SysWOW64\mmc.exe.config
2021-03-10 18:22 - 2021-03-10 18:18 - 000003103 ____C C:\WINDOWS\system32\mmc.exe.config
2021-03-10 18:22 - 2021-03-10 18:18 - 000001358 ____C C:\WINDOWS\system32\Drivers\etc\protocol
2021-03-10 18:22 - 2021-03-10 18:18 - 000000858 ____C C:\WINDOWS\system32\DefaultQuestions.json
2021-03-10 18:22 - 2021-03-10 18:18 - 000000741 ____C C:\WINDOWS\SysWOW64\NOISE.DAT
2021-03-10 18:22 - 2021-03-10 18:18 - 000000741 ____C C:\WINDOWS\system32\NOISE.DAT
2021-03-10 18:22 - 2021-03-10 18:18 - 000000407 ____C C:\WINDOWS\system32\Drivers\etc\networks
2021-03-10 18:22 - 2021-03-10 18:18 - 000000219 ____C C:\WINDOWS\system.ini
2021-03-10 18:22 - 2021-03-10 18:18 - 000000092 ____C C:\WINDOWS\win.ini
2021-03-10 18:19 - 2021-04-02 18:58 - 000000000 ___DC C:\WINDOWS\INF
2021-03-10 18:11 - 2021-04-02 00:09 - 000000000 ___DC C:\WINDOWS\CbsTemp
2021-03-10 18:10 - 2021-04-02 18:55 - 000065536 _____ C:\WINDOWS\system32\config\ELAM
2021-03-10 18:10 - 2021-04-02 18:50 - 110100480 _____ C:\WINDOWS\system32\config\SOFTWARE
2021-03-10 18:10 - 2021-04-02 18:50 - 022806528 _____ C:\WINDOWS\system32\config\SYSTEM
2021-03-10 18:10 - 2021-04-02 18:50 - 001310720 _____ C:\WINDOWS\system32\config\DEFAULT
2021-03-10 18:10 - 2021-04-02 18:50 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-03-10 18:10 - 2021-04-02 18:50 - 000131072 _____ C:\WINDOWS\system32\config\SAM
2021-03-10 18:10 - 2021-04-02 18:50 - 000065536 _____ C:\WINDOWS\system32\config\SECURITY
2021-03-10 18:10 - 2021-03-12 00:45 - 000000000 ___DC C:\WINDOWS\servicing
2021-03-10 18:10 - 2021-03-10 18:22 - 000000000 ___DC C:\WINDOWS\system32\SMI
2021-03-05 23:54 - 2021-03-10 19:44 - 000000180 ____C C:\Users\User\Desktop\YOUTUBE.url
2021-03-05 20:19 - 2021-03-10 19:44 - 000000180 ____C C:\Users\User\Desktop\GMAIL.url
2021-03-04 22:54 - 2021-03-04 22:55 - 000000000 ___DC C:\Users\User\Documents\Freemake

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-04-02 18:50 - 2021-02-16 05:31 - 000008192 ___SH C:\DumpStack.log.tmp
2021-04-02 18:12 - 2020-04-06 03:03 - 000000000 ___DC C:\Users\User\AppData\LocalLow\Mozilla
2021-04-01 02:59 - 2020-04-05 19:34 - 000000000 ___DC C:\ProgramData\Documents\NativeFus_Log
2021-03-21 02:40 - 2020-05-10 15:25 - 000000000 ___DC C:\Users\User\.VirtualBox
2021-03-15 17:54 - 2020-04-04 11:12 - 000000000 ___RD C:\Users\User\OneDrive
2021-03-12 16:23 - 2021-02-02 15:05 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2021-03-11 02:32 - 2020-04-06 17:18 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paramètres de la caméra Logitech
2021-03-11 00:19 - 2020-05-04 07:02 - 000000000 ___DC C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yamicsoft
2021-03-10 20:53 - 2020-04-04 15:28 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jetAudio
2021-03-10 20:50 - 2020-10-02 18:50 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
2021-03-10 20:46 - 2020-05-08 23:06 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Video Joiner
2021-03-10 20:39 - 2020-04-04 11:06 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2021-03-10 20:33 - 2021-01-28 20:08 - 000000000 ___DC C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2021-03-10 20:18 - 2020-04-04 15:16 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack
2021-03-10 20:03 - 2020-09-24 23:19 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2021-03-10 19:14 - 2020-04-04 10:55 - 000000000 __RDC C:\Users\User\3D Objects
2021-03-10 18:36 - 2020-11-26 23:24 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Carte Bleue La Banque Postale
2021-03-10 18:36 - 2020-05-09 19:01 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper
2021-03-10 18:36 - 2020-04-04 11:08 - 000000000 __SDC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.7
2021-03-10 18:35 - 2021-02-27 22:51 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reFX
2021-03-10 18:35 - 2020-05-09 06:21 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RZSoft
2021-03-10 18:35 - 2020-05-08 06:05 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoMedia

==================== Fichiers à la racine de certains dossiers ========

2021-03-02 01:59 - 2021-03-02 01:59 - 000000785 _____ () C:\Users\User\D540.bat
2021-03-10 19:53 - 2021-03-21 02:25 - 000000010 ____C () C:\Users\User\AppData\Roaming\.sunvox_pateditor
2021-03-10 19:53 - 2021-03-21 02:25 - 000000002 ____C () C:\Users\User\AppData\Roaming\.sunvox_soundnet
2021-03-21 02:17 - 2021-03-21 02:17 - 000000061 ____C () C:\Users\User\AppData\Roaming\.sunvox_synth_l
2021-03-21 02:17 - 2021-03-21 02:17 - 000000061 ____C () C:\Users\User\AppData\Roaming\.sunvox_synth_s
2021-03-10 19:53 - 2021-03-21 02:25 - 000000005 ____C () C:\Users\User\AppData\Roaming\.sunvox_timeline
2021-03-10 19:53 - 2021-03-21 02:25 - 000000081 ____C () C:\Users\User\AppData\Roaming\sunvox_config.ini
2021-03-25 03:51 - 2021-03-25 18:48 - 000004608 ____C () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2021-03-27 20:16 - 2021-03-27 20:16 - 000016438 ____C () C:\Users\User\AppData\Local\partner.bmp

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================