Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017 Exécuté par AlbertL (administrateur) sur ALBERTL-PC (07-09-2017 20:37:08) Exécuté depuis C:\Users\AlbertL\Desktop Profils chargés: AlbertL (Profils disponibles: AlbertL) Platform: Windows 7 Ultimate Service Pack 1 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Prolific Technology Inc.) C:\Windows\SysWOW64\IoctlSvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\alg.exe (WeFi) C:\Program Files (x86)\WeFi\WefiEngSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (BlueStack Systems, Inc.) C:\Users\AlbertL\AppData\Local\Programs\BlueStacksFriends\BlueStacksFriends.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (WeFi) C:\Program Files (x86)\WeFi\WeFi.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\MalwareHunter.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\Cloudscan\MHCloudSvc.exe (BlueStack Systems, Inc.) C:\Users\AlbertL\AppData\Local\Programs\BlueStacksFriends\BlueStacksFriends.exe (BlueStack Systems, Inc.) C:\Users\AlbertL\AppData\Local\Programs\BlueStacksFriends\BlueStacksFriends.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\QuickSearch.exe (Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\x64\Win64ShellLink.exe (Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\MemfilesService.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18384360 2017-06-29] (Realtek Semiconductor) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [239856 2017-09-01] (AVAST Software) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-08-22] (Dropbox, Inc.) HKLM-x32\...\Run: [MalTray] => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [971760 2017-09-04] (Glarysoft Ltd) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-21-1457234651-712954061-4273082558-1000\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44016 2017-09-04] (Glarysoft Ltd) HKU\S-1-5-21-1457234651-712954061-4273082558-1000\...\Run: [BlueStacksFriends] => C:\Users\AlbertL\AppData\Local\Programs\BlueStacksFriends\BlueStacksFriends.exe [57079872 2017-08-11] (BlueStack Systems, Inc.) HKU\S-1-5-21-1457234651-712954061-4273082558-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-1457234651-712954061-4273082558-1000\...\MountPoints2: {3f515262-c9aa-11e6-8c7a-001bb1ff1fd4} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-1457234651-712954061-4273082558-1000\...\MountPoints2: {d986f248-f161-11e6-83a8-001bb1ff1fd4} - F:\HiSuiteDownLoader.exe HKU\S-1-5-21-1457234651-712954061-4273082558-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [477696 2010-11-20] (Microsoft Corporation) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [171384 2017-07-27] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [149224 2017-07-27] (NVIDIA Corporation) BootExecute: autocheck autochk * BootDefrag.exe ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{77F95A29-EBC9-4D72-B6CC-027E8D190E49}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{90F68D50-8E05-4829-BDDA-1C4918163837}: [DhcpNameServer] 195.238.2.22 195.238.2.21 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-1457234651-712954061-4273082558-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net HKU\S-1-5-21-1457234651-712954061-4273082558-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net SearchScopes: HKLM -> DefaultScope {0644EE93-D778-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\dgnriaie_x64.dll [2014-11-04] (Nuance Communications, Inc.) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-09-01] (AVAST Software) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-07-31] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-09-01] (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-07-31] (Oracle Corporation) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2006-10-22] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-1457234651-712954061-4273082558-1000 -> Pas de nom - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Pas de fichier StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF DefaultProfile: wmuow9j8.default FF ProfilePath: C:\Users\AlbertL\AppData\Roaming\Zotero\Zotero\Profiles\wmuow9j8.default [2016-01-21] FF Extension: (Zotero LibreOffice Integration) - C:\Program Files (x86)\Zotero Standalone\extensions\zoteroOpenOfficeIntegration@zotero.org [2016-01-09] [non signé] FF Extension: (Zotero Word for Windows Integration) - C:\Program Files (x86)\Zotero Standalone\extensions\zoteroWinWordIntegration@zotero.org [2016-01-09] [non signé] FF ProfilePath: C:\Users\AlbertL\AppData\Roaming\TomTom\HOME\Profiles\zmx35d98.default [2017-03-07] FF ProfilePath: C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default [2017-09-07] FF SelectedSearchEngine: Mozilla\Firefox\Profiles\a6d7sdxx.default -> Google FF Homepage: Mozilla\Firefox\Profiles\a6d7sdxx.default -> hxxps://www.google.be/ hxxps://www.facebook.com/ hxxps://www.ecosia.org/ FF Extension: (Diagnostics for Adblock Plus) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\abpwatcher@adblockplus.org.xpi [2017-03-24] FF Extension: (Adguard AdBlocker) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\adguardadblocker@adguard.com.xpi [2017-07-28] FF Extension: (Dragon Web Extension) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\dgnria2@nuance.com.xpi [2016-08-20] FF Extension: (Element Hiding Helper for Adblock Plus) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\elemhidehelper@adblockplus.org.xpi [2017-04-12] FF Extension: (Adobe Flash Player) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\fr@fbt.ovh.xpi [2017-02-19] FF Extension: (AdBlock) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2017-07-28] FF Extension: (Avast Online Security) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\wrc@avast.com.xpi [2017-08-17] FF Extension: (Ecosia — The search engine that plants trees!) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2017-02-02] FF Extension: (Adblock Plus) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-07] FF Extension: (Firefox Screenshots) - C:\Users\AlbertL\AppData\Roaming\Mozilla\Firefox\Profiles\a6d7sdxx.default\features\{8a5db1f3-342c-4f56-8d8f-a09dbcd20c3e}\screenshots@mozilla.org.xpi [2017-09-07] FF Extension: (Belgium eID) - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2017-08-08] FF HKLM-x32\...\Firefox\Extensions: [bonjour4firefox@apple.com] - C:\Program Files (x86)\Bonjour SDK\Bin\FirefoxExtension FF Extension: (Bonjour Extension for Firefox) - C:\Program Files (x86)\Bonjour SDK\Bin\FirefoxExtension [2016-02-17] [non signé] FF HKLM-x32\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-10] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2014-11-04] (Nuance Communications, Inc.) FF Plugin-x32: @adobe.com/AuthorwarePlayer -> C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll [Pas de fichier] FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-10] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1214154.dll [Pas de fichier] FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-07-31] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-07-31] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-29] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2014-11-04] (Nuance Communications, Inc.) FF Plugin HKU\S-1-5-21-1457234651-712954061-4273082558-1000: @tools.google.com/Google Update;version=3 -> C:\Users\AlbertL\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin HKU\S-1-5-21-1457234651-712954061-4273082558-1000: @tools.google.com/Google Update;version=9 -> C:\Users\AlbertL\AppData\Local\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) Chrome: ======= CHR DefaultProfile: ChromeDefaultData CHR HomePage: ChromeDefaultData -> hxxp://www.omniboxes.com/?type=sy&ts=1439364879&z=8a2a6f7cc67dffcab2956e7g0z8c8t9c4q1zbbfm0t&from=amt&uid=ST2000DM001-1CH164_Z1E5QRVRXXXXZ1E5QRVR CHR StartupUrls: ChromeDefaultData -> "hxxps://www.google.be/","hxxps://www.facebook.com/","hxxps://info.ecosia.org/" CHR NewTab: ChromeDefaultData -> Not-active:"chrome-extension://eedlgdlajadkbbjoobobefphmfkcchfk/newtab.html", Not-active:"chrome-extension://nngdfnnnkccipoglcgppagpgjkkbfclo/index.html" CHR Profile: C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-09-07] <==== ATTENTION CHR Extension: (Google Slides) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-06] CHR Extension: (Belfius Smart Card Reader Chrome Extension) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\agicnfmechmlphpjmeefookfjhifbmhi [2016-02-11] CHR Extension: (Google Docs) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-06] CHR Extension: (Google Drive) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-06] CHR Extension: (JSON Formatter) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\bcjindcccaagfpapjjmafapmmgkkhgoa [2016-02-27] CHR Extension: (iCloud) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\bdilfkhpgihcibbahmoggdaeciachopd [2016-02-27] CHR Extension: (Bitmoji) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\bfgdeiadkckfbkeigkoncpdieiiefpig [2017-02-19] CHR Extension: (WhatsChrome) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\bgkodfmeijboinjdegggmkbkjfiagaan [2016-02-27] CHR Extension: (MEGA) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2017-09-07] CHR Extension: (YouTube) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-06] CHR Extension: (Google Cast) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2016-12-27] CHR Extension: (OpenDyslexic) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cdnapgfjopgaggbmfgbiinmmbdcglnam [2017-06-30] CHR Extension: (Adblock Plus) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-13] CHR Extension: (Redirection de l'omnibox vers Ecosia (Legacy)) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\clellnciejhoedgepbdilbkdkaoecgpc [2017-05-13] CHR Extension: (VS Launcher) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cmhicdplfejcchpmimlnohfadpimciaa [2016-12-24] CHR Extension: (Videostream for Google Chromecast™) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2017-05-08] CHR Extension: (Spotify - Music for every moment) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cnkjkdjlofllcpbemipjbcpfnglbgieh [2017-07-14] CHR Extension: (Recherche Google) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-06] CHR Extension: (Extension Web Dragon) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ddaloccgjfibfpkalenodgehlhkgoahe [2016-08-14] CHR Extension: (Facebook Customizer (by Adblock Plus)) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\deoeenbkoccjaefmmhpmlegngdjohdcm [2016-02-06] CHR Extension: (Google News) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\dllkocilcinkggkchnjgegijklcililc [2016-02-27] CHR Extension: (Dropbox pour Gmail) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2017-03-01] CHR Extension: (Ecosia) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2017-09-07] CHR Extension: (Adobe Acrobat) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04] CHR Extension: (La météo) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\eimldlmjecahiannbdgbpjpjiphllhhp [2016-02-27] CHR Extension: (Zotero Connector) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ekhagklcjbdpajgpjgmbionohlpdbjgc [2017-09-01] CHR Extension: (Video Downloader professional) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2017-09-01] CHR Extension: (Google Play Musique) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fahmaaghhglfmonjliepjlchgpgfmobi [2017-09-01] CHR Extension: (Dashlane - Gestionnaire de mots de passe sécurisé) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fdjamakpfbbddfjaooikfcpapjohcfmg [2017-09-01] CHR Extension: (Google Sheets) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-06] CHR Extension: (Bookmarks Menu) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ffmdedmghpoipeldijkdlcckdpempkdi [2016-02-27] CHR Extension: (Signets iCloud) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fkepacicchenbjecpbpbclokcabebhah [2016-02-27] CHR Extension: (Font Expander) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fnhfmlkfcdodpcaenlbfjfcahannopkj [2017-03-01] CHR Extension: (Video Player) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gdebnehfojpoccpaocfbelbclfnpbmij [2016-10-31] CHR Extension: (Group Tabs) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gfapgpggdkbhijehajhokdljclpmoknl [2017-01-23] CHR Extension: (Google Docs hors connexion) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16] CHR Extension: (AdBlock) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-09-01] CHR Extension: (Avast Online Security) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-09-01] CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2017-09-01] CHR Extension: (Google Photos) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\hcglmfcclpfgljeaiahehebeoaiicbko [2016-02-27] CHR Extension: (iTunes Podcast & Audio Preview Downloader) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\jejekpifonopnckjahojjmpkbhfdkegd [2017-09-01] CHR Extension: (WhoWorks.At) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\jeldhknnfopoiloahhpmbblbhemankjj [2016-02-27] CHR Extension: (goMovix) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\jiogeidobnphbnjmnlcjpopgfghcnebf [2016-06-15] CHR Extension: (Zoho Mail) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\jjemfhbmnkbapnnmiadkbiaokccjnhge [2016-02-15] CHR Extension: (Content Control) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\kgfmabdmffpmgcpepjbkhmmaidedlnhe [2017-03-08] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-01] CHR Extension: (goMovix Start) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nngdfnnnkccipoglcgppagpgjkkbfclo [2016-06-15] CHR Extension: (Search App) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\obgbohinikcagbojadmodabpgdmmgleb [2017-03-01] CHR Extension: (HubSpot Sales) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\oiiaigjnkhngdbnoookogelabohpglmd [2017-09-02] CHR Extension: (Wallpaper Customizer) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pggbacoeeiigddnlocgkgigllpiennmd [2016-05-06] CHR Extension: (Gmail) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-06] CHR Extension: (Chrome Media Router) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-07] CHR Extension: (MyMusicCloud) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\plaelelbkmommhmjlepigoiepmdaihbk [2016-02-27] CHR Profile: C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default [2017-09-07] CHR Extension: (Google Slides) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-06] CHR Extension: (Google Docs) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-06] CHR Extension: (Google Drive) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-06] CHR Extension: (YouTube) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-06] CHR Extension: (Google Sheets) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-08] CHR Extension: (Google Docs hors connexion) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-06] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-06] CHR Extension: (Gmail) - C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-06] CHR Profile: C:\Users\AlbertL\AppData\Local\Google\Chrome\User Data\System Profile [2017-09-07] CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-31] (SUPERAntiSpyware.com) S4 ABBYY.Licensing.FineReader.Corporate.11.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\11.00\Licensing\CE\NetworkLicenseServer.exe [818952 2011-12-22] (ABBYY) S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7452288 2017-09-01] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [275208 2017-09-01] (AVAST Software) S3 Brother XP spl Service; C:\Windows\SysWOW64\brsvc01a.exe [57344 2004-06-14] (brother Industries Ltd) S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [387128 2017-08-30] (BlueStack Systems, Inc.) S4 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [369720 2017-08-30] (BlueStack Systems, Inc.) S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.) R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [49992 2017-08-22] (Dropbox, Inc.) S4 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [151616 2014-11-04] (Nuance Communications, Inc.) S4 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [Fichier non signé] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®) [Fichier non signé] S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2015-11-16] (Macrovision Europe Ltd.) [Fichier non signé] S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] () S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [275752 2008-01-22] (Nero AG) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-07-27] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-08-18] (NVIDIA Corporation) R2 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Fichier non signé] S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-08-17] (TeamViewer GmbH) R3 WefiEngSvc; C:\Program Files (x86)\WeFi\WefiEngSvc.exe [120152 2010-11-03] (WeFi) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 ACSSCR; C:\Windows\System32\DRIVERS\a38usb.sys [82480 2015-08-19] (Advanced Card Systems Ltd.) R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare) R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320528 2017-09-01] (AVAST Software s.r.o.) R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-09-01] (AVAST Software s.r.o.) R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343296 2017-09-01] (AVAST Software s.r.o.) R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57736 2017-09-01] (AVAST Software s.r.o.) S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [47016 2017-09-01] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [147784 2017-09-01] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110376 2017-09-01] (AVAST Software) R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84416 2017-09-01] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1016384 2017-09-01] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [590880 2017-09-01] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [199312 2017-09-01] (AVAST Software) R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-09-01] (AVAST Software) R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [172760 2016-01-26] (Broadcom Corporation.) R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2015-03-30] (Glarysoft Ltd) S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2017-06-21] (Bluestack System Inc. ) R1 BTOWSFF; C:\Windows\System32\Drivers\BTOWSFF.sys [31576 2017-07-18] (Toolwiz.com) R0 BTOWSVF; C:\Windows\System32\Drivers\BTOWSVF.sys [50520 2017-07-18] (Toolwiz.com) S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) S3 ew_usbccgpfilter; C:\Windows\System32\DRIVERS\ew_usbccgpfilter.sys [18944 2017-04-11] (Huawei Technologies Co., Ltd.) R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2015-11-16] (Glarysoft Ltd) S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [41272 2017-06-29] (GlarySoft Ltd) R1 GUSBootStartup; C:\Windows\System32\drivers\GUSBootStartup.sys [20160 2016-08-10] (Glarysoft Ltd) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-04-11] (Huawei Technologies Co., Ltd.) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [30960 2015-05-29] (Intel Corporation) R0 KSafeDISK; C:\Windows\System32\Drivers\KSafeDISK.sys [51544 2017-07-18] (Toolwiz.com) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-12] (Malwarebytes) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [188992 2016-02-10] (Intel Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [48064 2017-08-18] (NVIDIA Corporation) R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-08-18] (NVIDIA Corporation) R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com) R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com) S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) R3 WirelessKeyboardFilter; C:\Windows\System32\DRIVERS\WirelessKeyboardFilter.sys [49896 2016-07-22] (Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-09-07 20:34 - 2017-09-07 20:34 - 000002982 _____ C:\Windows\System32\Tasks\RunUninstallTool_SkipUac 2017-09-07 20:34 - 2017-09-07 20:34 - 000000872 _____ C:\Users\AlbertL\Desktop\Uninstall Tool.lnk 2017-09-07 20:34 - 2017-09-07 20:34 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\CrystalIdea Software 2017-09-07 20:34 - 2017-09-07 20:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Tool 2017-09-07 20:34 - 2017-09-07 20:34 - 000000000 ____D C:\Program Files\Uninstall Tool 2017-09-07 20:07 - 2017-09-07 20:08 - 000003717 _____ C:\Users\AlbertL\Desktop\Fixlog.txt 2017-09-07 20:06 - 2017-09-07 19:48 - 000070776 _____ C:\Users\AlbertL\Desktop\Addition.txt 2017-09-07 20:06 - 2017-09-07 19:43 - 002395648 _____ (Farbar) C:\Users\AlbertL\Desktop\FRST64.exe 2017-09-07 19:51 - 2017-09-07 20:39 - 000035691 _____ C:\Users\AlbertL\Desktop\FRST.txt 2017-09-07 19:44 - 2017-09-07 20:37 - 000000000 ____D C:\FRST 2017-09-07 13:34 - 2017-09-07 13:34 - 000000000 ____D C:\ProgramData\SWCUTemp 2017-09-07 08:04 - 2017-09-07 20:13 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\BlueStacksFriends 2017-09-07 08:04 - 2017-09-07 08:04 - 000002437 _____ C:\Users\AlbertL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlueStacksFriends.lnk 2017-09-07 08:04 - 2017-09-07 08:04 - 000002429 _____ C:\Users\AlbertL\Desktop\BlueStacksFriends.lnk 2017-09-07 08:04 - 2017-09-07 08:04 - 000000000 ____D C:\Users\AlbertL\AppData\Local\BlueStacksFriends 2017-09-06 19:29 - 2017-09-06 19:29 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:29 - 2017-09-06 19:29 - 000003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:29 - 2017-09-06 19:29 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:29 - 2017-09-06 19:29 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:29 - 2017-09-06 19:29 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:29 - 2017-09-06 19:29 - 000001385 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2017-09-06 19:29 - 2017-09-06 19:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-09-06 19:29 - 2017-08-18 05:32 - 001923008 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2017-09-06 19:29 - 2017-08-18 05:32 - 001755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2017-09-06 19:29 - 2017-08-18 05:32 - 001505728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2017-09-06 19:29 - 2017-08-18 05:32 - 001317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2017-09-06 19:29 - 2017-08-18 05:32 - 000121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2017-09-06 19:29 - 2017-08-17 17:26 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat 2017-09-06 19:28 - 2017-09-06 19:28 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:28 - 2017-09-06 19:28 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:28 - 2017-09-06 19:28 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-09-06 19:28 - 2017-08-18 05:32 - 000057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys 2017-09-06 19:27 - 2017-08-18 05:32 - 000048064 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2017-09-06 19:18 - 2017-09-06 19:21 - 000000000 ____D C:\Program Files (x86)\Bluestacks 2017-09-05 18:13 - 2017-09-05 18:13 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\BSD Concept 2017-09-05 18:13 - 2017-09-05 18:13 - 000000000 ____D C:\ProgramData\BSD 2017-09-05 18:11 - 2017-09-05 18:11 - 000002055 _____ C:\Users\Public\Desktop\Heredis 13.lnk 2017-09-05 18:11 - 2017-09-05 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BSD Concept 2017-09-05 18:10 - 2017-09-05 18:10 - 000000000 ____D C:\Users\AlbertL\Documents\BSD Concept 2017-09-05 18:10 - 2017-09-05 18:10 - 000000000 ____D C:\ProgramData\BSD Concept 2017-09-05 18:10 - 2017-09-05 18:10 - 000000000 ____D C:\Program Files (x86)\BSD Concept 2017-09-03 21:02 - 2017-09-03 21:04 - 000003584 _____ C:\Users\AlbertL\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-09-01 21:15 - 2017-09-01 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24 2017-09-01 08:00 - 2017-09-01 08:00 - 000401488 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2017-08-27 08:06 - 2017-08-27 08:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-08-22 17:55 - 2017-08-22 17:55 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys 2017-08-22 17:55 - 2017-08-22 17:55 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys 2017-08-22 17:55 - 2017-08-22 17:55 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys 2017-08-13 20:16 - 2017-08-13 20:22 - 124403712 _____ C:\Windows\system32\config\software.regback 2017-08-12 22:54 - 2017-08-12 22:54 - 000000000 ____D C:\Program Files (x86)\Cisco 2017-08-12 22:53 - 2017-08-12 22:53 - 004171328 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL664.SYS 2017-08-12 22:53 - 2017-08-12 22:53 - 003896632 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll 2017-08-12 22:53 - 2017-08-12 22:53 - 003561272 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll 2017-08-12 22:53 - 2017-08-12 22:53 - 000095544 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll 2017-08-12 22:53 - 2017-08-12 22:53 - 000006656 _____ C:\Windows\system32\bcmwlrc.dll 2017-08-12 22:53 - 2017-08-12 22:53 - 000000000 ____D C:\Program Files\Broadcom 2017-08-12 18:02 - 2017-08-12 18:02 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\AVAST Software 2017-08-12 17:59 - 2017-08-12 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2017-08-12 17:58 - 2017-09-01 08:00 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2017-08-12 17:57 - 2017-09-01 08:00 - 001016384 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2017-08-12 17:57 - 2017-09-01 08:00 - 000590880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2017-08-12 17:57 - 2017-09-01 08:00 - 000361336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2017-08-12 17:57 - 2017-09-01 08:00 - 000199312 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2017-08-12 17:57 - 2017-09-01 08:00 - 000147784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2017-08-12 17:57 - 2017-09-01 08:00 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2017-08-12 17:57 - 2017-09-01 08:00 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2017-08-12 17:57 - 2017-09-01 08:00 - 000047016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2017-08-12 17:57 - 2017-09-01 07:59 - 000343296 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys 2017-08-12 17:57 - 2017-09-01 07:59 - 000320528 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys 2017-08-12 17:57 - 2017-09-01 07:59 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys 2017-08-12 17:57 - 2017-09-01 07:59 - 000057736 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys 2017-08-12 17:52 - 2017-08-12 19:03 - 000000000 ____D C:\ProgramData\AVAST Software 2017-08-12 17:52 - 2017-08-12 17:52 - 000000000 ____D C:\Program Files\AVAST Software 2017-08-12 17:51 - 2017-08-12 17:51 - 000000000 ____R C:\Windows\perfc 2017-08-12 17:49 - 2008-04-15 13:00 - 001355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvbvm50.dll 2017-08-12 17:49 - 1996-01-12 01:00 - 000935632 _____ (Microsoft Corporation) C:\Windows\system\Vb40016.dll 2017-08-12 17:49 - 1993-05-11 18:00 - 000398416 _____ (Microsoft Corporation) C:\Windows\system\Vbrun300.dll 2017-08-12 17:49 - 1992-10-20 23:00 - 000356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll 2017-08-12 17:49 - 1991-05-10 00:00 - 000271264 _____ C:\Windows\system\vbrun100.dll 2017-08-12 17:48 - 2017-08-12 17:48 - 000000000 ____D C:\Windows\SysWOW64\NV 2017-08-12 17:48 - 2017-08-12 17:48 - 000000000 ____D C:\Windows\system32\NV 2017-08-12 17:48 - 2017-08-12 17:48 - 000000000 ____D C:\Intel 2017-08-12 17:48 - 2017-03-10 22:17 - 000536864 _____ C:\Windows\system32\vulkan-1.dll 2017-08-12 17:48 - 2017-03-10 22:17 - 000525600 _____ C:\Windows\SysWOW64\vulkan-1.dll 2017-08-12 17:48 - 2017-03-10 22:17 - 000254240 _____ C:\Windows\system32\vulkaninfo.exe 2017-08-12 17:48 - 2017-03-10 22:17 - 000233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2017-08-12 17:42 - 2017-08-12 17:42 - 000000000 ____D C:\Program Files\Elantech 2017-08-12 17:41 - 2017-08-12 17:41 - 000291864 _____ (DriverPack) C:\Users\AlbertL\Downloads\DriverPack-17-Online_1891338674.1501224888.exe 2017-08-12 17:37 - 2017-08-12 17:37 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2017-08-12 17:36 - 2017-08-12 17:58 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\Opera Software 2017-08-12 17:36 - 2017-08-12 17:58 - 000000000 ____D C:\Users\AlbertL\AppData\Local\Opera Software 2017-08-12 17:35 - 2017-08-12 17:58 - 000000000 ____D C:\Program Files (x86)\Opera 2017-08-12 17:33 - 2017-08-12 20:05 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\DriverPack Notifier 2017-08-12 17:32 - 2017-08-12 17:32 - 000003278 _____ C:\Windows\System32\Tasks\DRPNPS 2017-08-10 15:28 - 2016-02-10 02:41 - 000188992 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2017-08-10 13:04 - 2017-07-27 22:07 - 015481464 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2017-08-10 13:04 - 2017-07-27 22:07 - 000038336 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2017-08-10 13:03 - 2017-07-27 22:07 - 023079136 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2017-08-10 13:03 - 2017-07-27 22:07 - 021403720 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2017-08-10 13:03 - 2017-07-27 22:07 - 018809816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2017-08-10 13:03 - 2017-07-27 22:07 - 018704232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2017-08-10 13:03 - 2017-07-27 22:07 - 012133112 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll 2017-08-10 13:03 - 2017-07-27 22:07 - 009983152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 040239552 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 035805816 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 035314296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 028930680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 017808120 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 014689632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 013654648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 011590368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 003803584 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 003691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 003359168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 001988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438512.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 001598072 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438512.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 001067640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 001004992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 000972736 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 000924280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 000689808 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 000578240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 000154392 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 000132072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2017-08-10 13:02 - 2017-07-27 22:07 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json 2017-08-10 13:02 - 2017-07-27 22:07 - 000000669 _____ C:\Windows\system32\nv-vk64.json 2017-08-10 12:56 - 2017-07-24 20:09 - 001049056 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2017-08-10 12:56 - 2017-07-24 20:09 - 000122848 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2017-08-10 12:52 - 2015-05-29 15:05 - 000646408 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2017-08-10 12:52 - 2015-05-29 15:05 - 000030960 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2017-08-10 09:09 - 2017-07-09 21:25 - 000480800 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2017-08-10 08:47 - 2014-11-26 17:47 - 000432824 _____ (ELAN Microelectronics Corp.) C:\Windows\system32\Drivers\ETD.sys 2017-08-10 06:46 - 2017-06-29 17:29 - 003677160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2017-08-10 06:46 - 2017-06-29 17:28 - 072520712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2017-08-10 06:46 - 2017-06-29 17:28 - 005842920 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2017-08-10 06:46 - 2017-06-29 17:28 - 000532376 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2017-08-10 06:46 - 2017-06-29 17:28 - 000221960 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2017-08-10 06:46 - 2017-06-29 17:28 - 000209528 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2017-08-10 06:46 - 2017-06-29 17:28 - 000166200 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2017-08-10 06:46 - 2017-06-29 01:53 - 012447325 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT 2017-08-10 06:45 - 2017-06-29 17:28 - 007172912 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 003509232 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 003507688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 003205120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 003093328 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 002210280 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 001347136 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000965024 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000708312 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000691680 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000447712 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000387312 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000343704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000321712 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000231912 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000214824 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000192976 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000151784 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000134200 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000110984 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000090912 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000088344 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000088312 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000084608 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2017-08-10 06:45 - 2017-06-29 17:28 - 000023688 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 007096184 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 001965808 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 001780616 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 001591056 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 001508928 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000743960 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000727432 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000504304 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000445392 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000441264 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000327456 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000272712 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000253896 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000253864 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000252872 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2017-08-10 06:45 - 2017-06-29 17:27 - 000122320 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2017-08-09 15:30 - 2017-07-29 15:56 - 000117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2017-08-09 15:30 - 2017-07-21 15:26 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll 2017-08-09 15:30 - 2017-07-21 15:26 - 000409600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexch40.dll 2017-08-09 15:30 - 2017-07-21 15:26 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll 2017-08-09 15:30 - 2017-07-21 15:26 - 000282624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll 2017-08-09 15:30 - 2017-07-15 19:35 - 000394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-08-09 15:30 - 2017-07-15 18:52 - 000346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000486400 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\werdiagcontroller.dll 2017-08-09 15:30 - 2017-07-14 16:29 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll 2017-08-09 15:30 - 2017-07-14 16:12 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2017-08-09 15:30 - 2017-07-14 16:12 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2017-08-09 15:30 - 2017-07-14 16:11 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2017-08-09 15:30 - 2017-07-14 16:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 000382976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll 2017-08-09 15:30 - 2017-07-14 16:10 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll 2017-08-09 15:30 - 2017-07-14 16:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2017-08-09 15:30 - 2017-07-14 16:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2017-08-09 15:30 - 2017-07-14 15:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe 2017-08-09 15:30 - 2017-07-14 15:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll 2017-08-09 15:30 - 2017-07-14 15:57 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2017-08-09 15:30 - 2017-07-14 15:50 - 000054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2017-08-09 15:30 - 2017-07-14 15:50 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werdiagcontroller.dll 2017-08-09 15:30 - 2017-07-14 08:16 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-08-09 15:30 - 2017-07-14 08:15 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-08-09 15:30 - 2017-07-14 07:49 - 025733632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-08-09 15:30 - 2017-07-14 07:47 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-08-09 15:30 - 2017-07-14 07:45 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-08-09 15:30 - 2017-07-14 07:45 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-08-09 15:30 - 2017-07-14 07:44 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-08-09 15:30 - 2017-07-14 07:44 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-08-09 15:30 - 2017-07-14 07:38 - 002899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-08-09 15:30 - 2017-07-14 07:29 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-08-09 15:30 - 2017-07-14 07:28 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-08-09 15:30 - 2017-07-14 07:22 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-08-09 15:30 - 2017-07-14 07:20 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-08-09 15:30 - 2017-07-14 07:20 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-08-09 15:30 - 2017-07-14 07:19 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-08-09 15:30 - 2017-07-14 07:19 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-08-09 15:30 - 2017-07-14 07:08 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-08-09 15:30 - 2017-07-14 07:02 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-08-09 15:30 - 2017-07-14 06:49 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-08-09 15:30 - 2017-07-14 06:48 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-08-09 15:30 - 2017-07-14 06:47 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-08-09 15:30 - 2017-07-14 06:42 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-08-09 15:30 - 2017-07-14 06:40 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-08-09 15:30 - 2017-07-14 06:35 - 005981184 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-08-09 15:30 - 2017-07-14 06:35 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-08-09 15:30 - 2017-07-14 06:33 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-08-09 15:30 - 2017-07-14 06:16 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-08-09 15:30 - 2017-07-14 06:11 - 000725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-08-09 15:30 - 2017-07-14 06:10 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-08-09 15:30 - 2017-07-14 06:09 - 002132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-08-09 15:30 - 2017-07-14 06:09 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-08-09 15:30 - 2017-07-14 05:40 - 015254016 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-08-09 15:30 - 2017-07-14 05:23 - 003240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-08-09 15:30 - 2017-07-14 05:07 - 001545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-08-09 15:30 - 2017-07-14 04:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-08-09 15:30 - 2017-07-14 04:01 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2017-08-09 15:30 - 2017-07-14 03:54 - 020270080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-08-09 15:30 - 2017-07-14 03:48 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-08-09 15:30 - 2017-07-14 03:48 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2017-08-09 15:30 - 2017-07-14 03:48 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2017-08-09 15:30 - 2017-07-14 03:48 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2017-08-09 15:30 - 2017-07-14 03:47 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-08-09 15:30 - 2017-07-14 03:44 - 002290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-08-09 15:30 - 2017-07-14 03:42 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2017-08-09 15:30 - 2017-07-14 03:41 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2017-08-09 15:30 - 2017-07-14 03:39 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2017-08-09 15:30 - 2017-07-14 03:38 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-08-09 15:30 - 2017-07-14 03:38 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-08-09 15:30 - 2017-07-14 03:38 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2017-08-09 15:30 - 2017-07-14 03:30 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2017-08-09 15:30 - 2017-07-14 03:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2017-08-09 15:30 - 2017-07-14 03:25 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2017-08-09 15:30 - 2017-07-14 03:25 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2017-08-09 15:30 - 2017-07-14 03:23 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2017-08-09 15:30 - 2017-07-14 03:22 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-08-09 15:30 - 2017-07-14 03:21 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-08-09 15:30 - 2017-07-14 03:20 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2017-08-09 15:30 - 2017-07-14 03:17 - 004546048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-08-09 15:30 - 2017-07-14 03:13 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-08-09 15:30 - 2017-07-14 03:12 - 000693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-08-09 15:30 - 2017-07-14 03:11 - 002057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-08-09 15:30 - 2017-07-14 03:11 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2017-08-09 15:30 - 2017-07-14 03:09 - 013663744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-08-09 15:30 - 2017-07-14 02:53 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-08-09 15:30 - 2017-07-14 02:50 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-08-09 15:30 - 2017-07-14 02:48 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-08-09 15:30 - 2017-07-08 16:34 - 000370920 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2017-08-09 15:30 - 2017-07-08 16:00 - 003224064 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-08-09 15:30 - 2017-07-07 16:37 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-08-09 15:30 - 2017-07-07 16:33 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-08-09 15:30 - 2017-07-07 16:33 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-08-09 15:30 - 2017-07-07 16:33 - 000363752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys 2017-08-09 15:30 - 2017-07-07 16:33 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-08-09 15:30 - 2017-07-07 16:33 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-08-09 15:30 - 2017-07-07 16:31 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:29 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:15 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2017-08-09 15:30 - 2017-07-07 16:15 - 003945192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2017-08-09 15:30 - 2017-07-07 16:13 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000109568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2017-08-09 15:30 - 2017-07-07 16:11 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:10 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 16:02 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2017-08-09 15:30 - 2017-07-07 16:01 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-08-09 15:30 - 2017-07-07 16:01 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2017-08-09 15:30 - 2017-07-07 16:01 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2017-08-09 15:30 - 2017-07-07 15:58 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2017-08-09 15:30 - 2017-07-07 15:57 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2017-08-09 15:30 - 2017-07-07 15:54 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-08-09 15:30 - 2017-07-07 15:54 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-08-09 15:30 - 2017-07-07 15:54 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-08-09 15:30 - 2017-07-07 15:53 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2017-08-09 15:30 - 2017-07-07 15:53 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-08-09 15:30 - 2017-07-07 15:51 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2017-08-09 15:30 - 2017-07-07 15:48 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2017-08-09 15:30 - 2017-07-07 15:48 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2017-08-09 15:30 - 2017-07-07 15:48 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2017-08-09 15:30 - 2017-07-07 15:48 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2017-08-09 15:30 - 2017-07-07 15:47 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2017-08-09 15:30 - 2017-07-07 15:47 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 15:47 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 15:47 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2017-08-09 15:30 - 2017-07-07 15:47 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll 2017-08-09 15:30 - 2017-07-01 14:05 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll 2017-08-08 20:46 - 2017-09-01 08:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-09-07 20:21 - 2009-07-14 05:45 - 000021024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-09-07 20:21 - 2009-07-14 05:45 - 000021024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-09-07 20:20 - 2015-11-16 12:57 - 000000000 ____D C:\ProgramData\NVIDIA 2017-09-07 20:13 - 2015-11-16 12:16 - 000000000 ____D C:\ProgramData\WeFi 2017-09-07 20:12 - 2016-07-20 16:34 - 000000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics 2017-09-07 20:12 - 2015-11-16 11:13 - 000000326 _____ C:\Windows\Tasks\WefiStartup.job 2017-09-07 20:10 - 2017-07-28 16:56 - 000000362 _____ C:\Windows\Tasks\DriverToolkit Autorun.job 2017-09-07 20:10 - 2017-07-20 12:12 - 000065536 _____ C:\Windows\system32\Ikeext.etl 2017-09-07 20:09 - 2015-11-16 10:31 - 000000000 ____D C:\Users\AlbertL 2017-09-07 20:09 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-09-07 20:08 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\tracing 2017-09-07 19:28 - 2015-11-16 16:45 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2017-09-07 19:25 - 2017-07-21 12:48 - 000000000 ____D C:\Users\AlbertL\AppData\Local\CrashDumps 2017-09-07 15:19 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf 2017-09-07 13:45 - 2017-06-12 14:02 - 000000223 _____ C:\Windows\SysWOW64\_WKERNEL.SYL 2017-09-07 13:27 - 2017-06-12 14:01 - 000000000 ____D C:\Program Files (x86)\WinUtilities 2017-09-07 13:26 - 2017-06-12 14:02 - 000001001 _____ C:\Users\Public\Desktop\WinUtilities.lnk 2017-09-07 13:26 - 2017-06-12 14:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinUtilities 2017-09-07 11:30 - 2015-11-16 19:28 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\vlc 2017-09-07 08:36 - 2015-11-16 16:45 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\TeamViewer 2017-09-07 08:05 - 2015-11-16 11:00 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\GlarySoft 2017-09-07 07:44 - 2016-12-23 18:52 - 000000000 ____D C:\Users\AlbertL\AppData\LocalLow\Mozilla 2017-09-06 19:37 - 2016-08-24 09:57 - 000000000 ____D C:\Users\AlbertL\AppData\Local\NVIDIA Corporation 2017-09-06 19:32 - 2015-11-16 12:15 - 000506986 _____ C:\Windows\system32\perfh006.dat 2017-09-06 19:32 - 2015-11-16 12:15 - 000101346 _____ C:\Windows\system32\perfc006.dat 2017-09-06 19:32 - 2009-07-14 16:24 - 000753338 _____ C:\Windows\system32\perfh00C.dat 2017-09-06 19:32 - 2009-07-14 16:24 - 000152882 _____ C:\Windows\system32\perfc00C.dat 2017-09-06 19:32 - 2009-07-14 06:13 - 002291554 _____ C:\Windows\system32\PerfStringBackup.INI 2017-09-06 19:31 - 2016-08-24 09:51 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2017-09-06 19:30 - 2016-08-24 09:56 - 000000000 ____D C:\Users\AlbertL\AppData\Local\NVIDIA 2017-09-06 19:29 - 2015-11-16 10:40 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-09-06 19:29 - 2015-11-16 10:40 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-09-06 19:23 - 2016-08-10 17:16 - 000003000 _____ C:\Windows\System32\Tasks\GMHSkipUAC 2017-09-06 19:23 - 2016-08-10 17:16 - 000001197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malware Hunter.lnk 2017-09-06 19:23 - 2016-08-10 17:16 - 000001185 _____ C:\Users\Public\Desktop\Malware Hunter.lnk 2017-09-06 19:22 - 2016-10-20 17:27 - 000001545 _____ C:\Users\Public\Desktop\BlueStacks.lnk 2017-09-06 19:22 - 2016-10-20 17:27 - 000001545 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BlueStacks.lnk 2017-09-06 19:22 - 2016-10-20 17:27 - 000000000 ____D C:\ProgramData\BlueStacksSetup 2017-09-06 19:22 - 2016-10-20 17:26 - 000000000 ____D C:\Users\AlbertL\AppData\Local\Bluestacks 2017-09-06 19:20 - 2017-05-16 13:16 - 000000000 ____D C:\ProgramData\Bluestacks 2017-09-06 19:17 - 2015-11-16 11:03 - 000003320 _____ C:\Windows\System32\Tasks\GlaryInitialize 5 2017-09-06 19:17 - 2015-11-16 11:03 - 000002980 _____ C:\Windows\System32\Tasks\GU5SkipUAC 2017-09-06 19:17 - 2015-11-16 11:03 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk 2017-09-06 19:17 - 2015-11-16 11:03 - 000001053 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk 2017-09-06 19:16 - 2015-11-16 11:02 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5 2017-09-06 09:05 - 2015-11-16 11:13 - 000002166 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-09-05 22:44 - 2015-11-16 12:27 - 000000000 ___RD C:\Users\AlbertL\Desktop\Programmes 2017-09-05 18:21 - 2017-06-11 15:50 - 000000000 ___RD C:\Program Files (x86)\Skype 2017-09-05 18:21 - 2015-11-16 13:07 - 000000000 ____D C:\ProgramData\Skype 2017-09-02 13:03 - 2015-12-15 17:52 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\Spotify 2017-09-02 13:03 - 2015-12-15 17:52 - 000000000 ____D C:\Users\AlbertL\AppData\Local\Spotify 2017-09-01 21:15 - 2015-11-16 12:37 - 000000000 ____D C:\Program Files (x86)\PDF24 2017-09-01 08:10 - 2015-11-17 20:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-08-28 19:18 - 2016-02-16 19:51 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\uTorrent 2017-08-28 18:19 - 2016-02-04 08:39 - 000000000 ____D C:\Users\AlbertL\AppData\Local\ElevatedDiagnostics 2017-08-27 19:39 - 2017-01-25 19:10 - 000000944 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk 2017-08-27 08:07 - 2015-11-16 14:04 - 000000000 ____D C:\Program Files (x86)\Dropbox 2017-08-24 19:48 - 2015-11-17 21:07 - 000000000 ____D C:\Users\AlbertL\AppData\Local\Zoner 2017-08-22 19:20 - 2016-04-20 08:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2017-08-22 17:55 - 2017-08-04 02:43 - 000049992 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe 2017-08-21 19:35 - 2015-11-28 20:30 - 000000000 ____D C:\Users\AlbertL\Documents\Bible 2017-08-21 19:35 - 2015-11-16 10:32 - 000000000 ____D C:\Users\AlbertL\AppData\Local\VirtualStore 2017-08-19 18:57 - 2015-11-16 11:13 - 000002542 _____ C:\Windows\System32\Tasks\WefiStartup 2017-08-18 19:26 - 2016-01-06 20:52 - 000000000 ____D C:\AdwCleaner 2017-08-18 19:25 - 2017-03-02 20:20 - 000000000 ____D C:\Program Files (x86)\NCH Software 2017-08-18 19:24 - 2017-03-02 20:20 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\NCH Software 2017-08-18 05:32 - 2016-08-24 09:42 - 000179136 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2017-08-18 05:32 - 2016-08-24 09:42 - 000146368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2017-08-17 19:11 - 2017-05-13 19:22 - 000001951 _____ C:\Windows\NvContainerRecovery.bat 2017-08-17 17:50 - 2015-12-24 13:42 - 000000000 ____D C:\ProgramData\CanonIJPLM 2017-08-17 11:45 - 2015-12-11 15:51 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\Audacity 2017-08-16 20:58 - 2017-06-23 07:49 - 005029256 _____ C:\Windows\system32\FNTCACHE.DAT 2017-08-15 17:59 - 2016-05-08 07:54 - 000128696 _____ C:\Users\AlbertL\AppData\Local\GDIPFONTCACHEV1.DAT 2017-08-14 22:18 - 2017-03-02 13:30 - 000000000 ____D C:\Users\AlbertL\AppData\Local\Hisuite 2017-08-13 20:02 - 2015-11-16 18:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems 2017-08-13 19:58 - 2017-07-17 15:09 - 000000000 ____D C:\ProgramData\Avira 2017-08-13 19:58 - 2015-11-16 12:59 - 000000000 ____D C:\ProgramData\Package Cache 2017-08-12 22:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\lv-LV 2017-08-12 22:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\lt-LT 2017-08-12 22:53 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\et-EE 2017-08-12 18:48 - 2017-06-26 17:48 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2017-08-12 17:57 - 2015-11-16 10:32 - 000001358 _____ C:\Users\AlbertL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2017-08-12 17:49 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system 2017-08-12 17:48 - 2016-08-24 09:52 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2017-08-12 17:41 - 2015-11-16 10:56 - 000000000 ____D C:\Windows\SysWOW64\RTCOM 2017-08-12 17:32 - 2015-11-16 11:02 - 000000000 ____D C:\Users\AlbertL\AppData\Roaming\DRPSu 2017-08-10 09:05 - 2017-04-28 13:40 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-08-10 09:05 - 2017-04-28 13:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-08-10 09:05 - 2017-04-28 13:40 - 000004496 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-08-10 09:05 - 2015-11-16 12:58 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2017-08-10 09:05 - 2015-11-16 12:58 - 000000000 ____D C:\Windows\system32\Macromed 2017-08-10 08:52 - 2015-11-16 11:20 - 000000000 ____D C:\Windows\system32\MRT 2017-08-10 08:47 - 2015-11-16 11:20 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-08-09 15:24 - 2017-03-02 20:20 - 000000000 ____D C:\Windows\System32\Tasks\NCH Software ==================== Fichiers à la racine de certains dossiers ======= 2013-02-07 13:22 - 2013-02-07 13:22 - 000050330 _____ () C:\Program Files (x86)\AntiDust.exe 2016-01-07 13:12 - 2016-01-07 13:12 - 000007859 _____ () C:\Users\AlbertL\AppData\Roaming\pcouffin.cat 2016-01-07 13:12 - 2016-01-07 13:12 - 000001167 _____ () C:\Users\AlbertL\AppData\Roaming\pcouffin.inf 2016-01-07 13:14 - 2016-01-07 13:14 - 000000034 _____ () C:\Users\AlbertL\AppData\Roaming\pcouffin.log 2016-11-10 12:48 - 2016-11-10 12:48 - 000000132 _____ () C:\Users\AlbertL\AppData\Roaming\Préfs Format PNG Adobe CS6 2016-02-17 20:58 - 2016-05-12 20:22 - 000001675 _____ () C:\Users\AlbertL\AppData\Roaming\SAS7_000.DAT 2016-01-07 13:14 - 2016-01-07 13:15 - 000001041 _____ () C:\Users\AlbertL\AppData\Roaming\vso_ts_preview.xml 2017-07-28 19:15 - 2017-07-28 19:15 - 000160227 _____ () C:\Users\AlbertL\AppData\Local\ars.cache 2017-07-28 19:15 - 2017-07-28 19:15 - 000304159 _____ () C:\Users\AlbertL\AppData\Local\census.cache 2017-09-03 21:02 - 2017-09-03 21:04 - 000003584 _____ () C:\Users\AlbertL\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-07-28 18:51 - 2017-07-28 18:51 - 000000036 _____ () C:\Users\AlbertL\AppData\Local\housecall.guid.cache 2016-10-10 17:13 - 2016-10-10 17:13 - 000002955 _____ () C:\Users\AlbertL\AppData\Local\recently-used.xbel 2016-02-04 08:41 - 2016-02-04 08:41 - 000007605 _____ () C:\Users\AlbertL\AppData\Local\Resmon.ResmonCfg 2015-11-16 11:05 - 2015-11-16 11:05 - 000000057 _____ () C:\ProgramData\Ament.ini 2015-11-16 12:52 - 2015-11-16 12:52 - 000000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-09-01 11:15 ==================== Fin de FRST.txt ============================