Jump to content

Frozen desktop malware ?


Recommended Posts

Hello,

I think i have a malware freezing my computer, but i'm not sure. The thing is, sometimes my desktop is like frozen, i cant click on anything until I open the task manager. For example, i'm using Discord and chrome at the same time, chrome works perfectly, i watch videos on youtube, but then, if I switch tabs to discord, i can't click on anything, nothing respond, i go on my desktop, same, but chrome keeps working well. I checked my CPU/GPU, and nothing seems abnormal. 

Again, i'm not sure if it's a malware or not, but better safe than sorry ! I tried adwCleanner/ZHPCleaner and antivirus.. Nothing detected.

So if you can help, i'll appreciate it enormously.

And sorry if my english is bad, i'm french and i'll do my best to not make too much grammatical errors.

Link to post
Share on other sites

  • Staff

***This is an automated reply***

Hi,

Thanks for posting in the Malware Removal for Windows Help forum. Being infected is not fun and can be very frustrating to resolve, but don't worry because we have a team of experts here help you!!

Note: Please be patient. When the site is busy it can take up to 48 hours before a malware removal helper can assist you. If no one has replied to your new topic after 48 hours please contact an Administrator to let them know.

First, if you haven't done so, please run a Threat Scan with the latest version of Malwarebytes. This may resolve your malware infection issue without the need for additional support. Click "Reveal Hidden Contents" below for details:

Spoiler

Malwarebytes can detect and remove most malware with no further actions required for free.

If you do not have Malwarebytes, please download it here and install. Be sure to post back the log as shown below.

  1. Open Malwarebytes for Windows
  2. To the left, click Scan > Scan Types.

    auto-reply-scan-types2.jpg.86e24e955a95d
     
  3. Select Threat Scan. Threat Scan is the most thorough and recommended scan method available.

    auto-reply-scan-types1.jpg.f4eee0e0c9375
     
  4. Click Start Scan
     

Next, if you're still experiencing issues after running Malwarebytes, then technical logs will be required to assist you. Click "Reveal Hidden Contents" below and follow the instructions to run the Farbar Recovery Scan Tool:

Spoiler

Don't use any temporary file cleaners unless requested - this can cause data loss and make a recovery difficult.

Please download the Farbar Recovery Scan Tool here and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  1. Double-click to run it. When the tool opens click Yes to the disclaimer.
  2. Press the Scan button.

    _frst_scan.jpg.d79beccbb6e66628e557f6c28
     
  3. It will make a log (FRST.txt) in the same directory the tool is run. Please attach or copy and paste it to your reply.
  4. The first time the tool is run, it also makes another log (Addition.txt). If you've run it before it may not and you may need to select it manually.
     

Finally, attach the Malwarebytes Threat Scan, FRST.txt and Additional.txt logs to your reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:   notify me.jpeg
 

Click "Reveal Hidden Contents" below for details on how to add attachments to your post.
Note: If you are unable to attach files, please copy and past the contents of the requested files in your Reply instead. 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

mb_attach.jpg.220985d559e943927cbe3c078b
 

Please Note the Following:

  • One of our expert helpers will give you one-on-one assistance when one becomes available.
  • Refrain from making any further changes to your computer (such as Install/Uninstall programs, using special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  • Do not 'bump' or add a reply to your topic once it is started. Topics which appear to have replies are considered to have a helper assisting them and may be overlooked, resulting in a longer waiting period for help
  • If you're using Peer 2 Peer software such as uTorrent or similar, please completely disable it from running while being assisted here.

Troubleshooting Tips

 

 

Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
attachlogs.png

Attach the file.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach.
Click Attach this file.
Click the Add reply button.
===

Please post the logs  for my review.

Wait for further instructions.

Link to post
Share on other sites

Hello and thanks for helping me ! 

Here's the content of the FRST.txt

 

Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 06.06.2018 01
Exécuté par Laval Emmanuel (administrateur) sur MSI (10-06-2018 16:58:14)
Exécuté depuis C:\Users\Laval Emmanuel\Downloads
Profils chargés: Laval Emmanuel (Profils disponibles: Laval Emmanuel)
Platform: Windows 10 Home Version 1803 17134.48 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\IntelCpHDCPSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Intel Corporation) C:\Windows\System32\ibtsiva.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Windscribe Limited) C:\Program Files (x86)\Windscribe\WindscribeService.exe
(Microvirt Software Technology Co. Ltd.) D:\Microvirt\MEmu\MemuService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\IntelCpHeciSvc.exe
(Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\igfxEM.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe\HxTsr.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe
(Nahimic) C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe
() C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PDVD12Serv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11804.1001.10.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9217016 2017-04-13] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-24] (Intel Corporation)
HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [301056 2015-09-12] (MSI)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [1878016 2017-04-19] (WinZip)
HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [124360 2017-04-19] (WinZip Computing, S.L.)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2017-04-19] (WinZip Computing, S.L.)
HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [734296 2017-12-13] (Nahimic)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3920552 2015-10-28] (Synaptics Incorporated)
HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [109824 2016-08-05] (Panda Security, S.L.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2018-05-30] (LogMeIn Inc.)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3201312 2018-06-09] (Valve Corporation)
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1224520 2018-05-31] ()
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832272 2017-08-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9772248 2017-05-05] (Piriform Ltd)
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Discord] => C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.)
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [10601064 2017-05-09] (Windscribe Limited)
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [HP Officejet 4630 series (NET)] => C:\Program Files\HP\HP Officejet 4630 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [729704 2018-03-21] (Disc Soft Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-11-03]
ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OCS Inventory NG Systray.lnk [2017-11-23]
ShortcutTarget: OCS Inventory NG Systray.lnk -> C:\Program Files (x86)\OCS Inventory Agent\OcsSystray.exe (OCS Inventory NG)
Startup: C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 4630 series.lnk [2018-05-21]
ShortcutTarget: Alertes de surveillance de l'encre - HP Officejet 4630 series.lnk -> C:\Program Files\HP\HP Officejet 4630 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP)
Startup: C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-08-03]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Laval Emmanuel\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\..\Interfaces\{391d8f15-9d19-4b21-b61b-825d0fa40b75}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{be37cd19-5afc-4edb-ace2-f2e63f588c88}: [DhcpNameServer] 10.110.232.1
Tcpip\..\Interfaces\{f0193d4e-2215-4793-b76e-4d83175453da}: [DhcpNameServer] 10.187.88.5 10.187.88.10 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem15.msn.com/?pc=NMTE
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem15.msn.com/?pc=NMTE
SearchScopes: HKU\S-1-5-21-1206140665-71179153-3832734882-1001 -> DefaultScope {1291C7EF-4B32-4620-B70B-57A036C671DD} URL = 
SearchScopes: HKU\S-1-5-21-1206140665-71179153-3832734882-1001 -> {1291C7EF-4B32-4620-B70B-57A036C671DD} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2018-02-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_161\bin\ssv.dll [2018-01-19] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2018-03-13] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-19] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-09-22] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 50juu56a.default
FF ProfilePath: C:\Users\Laval Emmanuel\AppData\Roaming\TomTom\HOME\Profiles\pp53vacx.default [2017-10-10]
FF ProfilePath: C:\Users\Laval Emmanuel\AppData\Roaming\Mozilla\Firefox\Profiles\50juu56a.default [2018-06-10]
FF Homepage: Mozilla\Firefox\Profiles\50juu56a.default -> hxxps://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-07] ()
FF Plugin: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-19] (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-07] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2017-09-21] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems)

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://pandasecurity.mystart.com/results.php?pr=vmn&id=pandasafeweb&v=1_0_chromeextension_unknown__&searchfeed=web&hsimp=yhs-panda1&ent=ch_ss&q={searchTerms}
CHR DefaultSearchKeyword: Default -> safeWeb
CHR Profile: C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default [2018-06-10]
CHR Extension: (Slides) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-04-30]
CHR Extension: (BetterTTV) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2018-04-30]
CHR Extension: (Docs) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-04-30]
CHR Extension: (Google Drive) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-04-30]
CHR Extension: (YouTube) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-04-30]
CHR Extension: (Sheets) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-04-30]
CHR Extension: (Google Docs hors connexion) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-04-30]
CHR Extension: (AdBlock) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-05-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-30]
CHR Extension: (Gmail) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-04-30]
CHR Extension: (Chrome Media Router) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-30]
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-04-28] ()
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058392 2017-12-12] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3663976 2018-03-21] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-09] (EasyAntiCheat Ltd)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3346856 2018-05-30] (LogMeIn Inc.)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4665168 2015-09-24] (SafeNet Inc.)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-07-11] (Hi-Rez Studios) [Fichier non signé]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-24] (Intel Corporation)
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [515768 2017-04-13] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-07] (Intel Corporation)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2327488 2018-03-06] (Rivet Networks)
R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [451072 2015-10-07] (Rivet Networks) [Fichier non signé]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
S2 MBAMService; D:\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
R2 MEmusvc; D:\Microvirt\MEmu\MemuService.exe [269480 2017-05-26] (Microvirt Software Technology Co. Ltd.)
R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2015-09-12] (Micro-Star International Co., Ltd.) [Fichier non signé]
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-07-09] ()
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [153096 2016-08-05] (Panda Security, S.L.)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-11-14] (Hewlett-Packard) [Fichier non signé]
S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [7986816 2016-11-06] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764712 2018-05-20] (NVIDIA Corporation)
R3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764712 2018-05-20] (NVIDIA Corporation)
S2 OCS Inventory Service; C:\Program Files (x86)\OCS Inventory Agent\OcsService.exe [786432 2017-10-30] (OCS Inventory NG) [Fichier non signé]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1966408 2018-05-31] (Overwolf LTD)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-11-14] (Hewlett-Packard) [Fichier non signé]
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [47096 2017-04-26] (Panda Security, S.L.)
S3 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation)
R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [71272 2017-05-09] (Windscribe Limited)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-07-09] (Intel® Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
S2 NvStreamSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe" [X]
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bwcW10x64.sys [141896 2015-10-01] (Rivet Networks, LLC.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-06-23] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-06-23] (Disc Soft Ltd)
R3 Hamachi; C:\WINDOWS\System32\drivers\Hamdrv.sys [45680 2017-02-27] (LogMeIn Inc.)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [350552 2015-09-24] (SafeNet Inc.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [244744 2017-04-13] (Intel Corporation)
R3 KillerEth; C:\WINDOWS\System32\drivers\e2xw10x64.sys [145920 2018-04-12] (Qualcomm Atheros, Inc.)
R3 MEmuDrv; D:\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2018-04-12] (Intel Corporation)
R1 NNSALPC; C:\WINDOWS\system32\DRIVERS\NNSALPC.sys [103856 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [210864 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSNAHSL; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [58616 2015-06-19] (Panda Security, S.L.)
R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [112560 2015-12-10] (Panda Security, S.L.)
R1 NNSPIHSW; C:\WINDOWS\system32\DRIVERS\NNSPIHSW.sys [82864 2016-03-17] (Panda Security, S.L.)
R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [133552 2015-12-10] (Panda Security, S.L.)
R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [309680 2015-12-10] (Panda Security, S.L.)
R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [179632 2016-02-18] (Panda Security, S.L.)
R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [122800 2015-12-10] (Panda Security, S.L.)
R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [267184 2016-02-18] (Panda Security, S.L.)
R1 NNSTLSC; C:\WINDOWS\system32\DRIVERS\NNSTLSC.sys [115632 2015-12-10] (Panda Security, S.L.)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45cd741937df973e\nvlddmkm.sys [17195272 2018-06-02] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31016 2018-05-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [67432 2018-03-15] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [68112 2018-04-28] (NVIDIA Corporation)
R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [174000 2016-08-09] (Panda Security, S.L.)
R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [129456 2016-08-09] (Panda Security, S.L.)
R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [207272 2016-08-09] (Panda Security, S.L.)
R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [133544 2016-08-09] (Panda Security, S.L.)
R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [146864 2016-08-09] (Panda Security, S.L.)
R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [117168 2016-08-09] (Panda Security, S.L.)
R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [72112 2016-08-10] (Panda Security, S.L.)
R3 RfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\RfeCo10X64.sys [141480 2018-03-06] (Rivet Networks, LLC.)
S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [411712 2015-10-28] (Realsil Semiconductor Corporation)
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [33448 2015-10-28] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-10-28] (Synaptics Incorporated)
R3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2017-04-21] (The OpenVPN Project)
S3 TesSafe; C:\WINDOWS\system32\TesSafe.sys [1007928 2017-06-17] (TENCENT)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation)
R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] ()
S3 xhunter1; C:\WINDOWS\xhunter1.sys [48656 2018-05-10] (Wellbia.com Co., Ltd.)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-06-10 16:58 - 2018-06-10 16:58 - 000030117 _____ C:\Users\Laval Emmanuel\Downloads\FRST.txt
2018-06-10 16:57 - 2018-06-10 16:58 - 000000000 ____D C:\FRST
2018-06-10 16:57 - 2018-06-10 16:57 - 002413056 _____ (Farbar) C:\Users\Laval Emmanuel\Downloads\FRST64.exe
2018-06-09 21:51 - 2018-06-09 21:51 - 000002688 _____ C:\Users\Laval Emmanuel\Desktop\malwarebytes.txt
2018-06-09 21:47 - 2018-06-09 21:47 - 000000643 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-06-09 21:47 - 2018-06-09 21:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-06-09 21:47 - 2018-06-09 21:47 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-06-09 21:47 - 2018-05-24 06:55 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2018-06-09 21:46 - 2018-06-09 21:46 - 077309488 _____ (Malwarebytes ) C:\Users\Laval Emmanuel\Downloads\mb3-setup-consumer-3.5.1.2522-1.0.374-1.0.5402.exe
2018-06-09 19:16 - 2018-06-09 19:16 - 000001521 _____ C:\Users\Laval Emmanuel\Desktop\ZHPCleaner.txt
2018-06-09 19:08 - 2018-06-09 19:16 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\ZHP
2018-06-09 19:08 - 2018-06-09 19:08 - 003232128 _____ C:\Users\Laval Emmanuel\Downloads\ZHPCleaner (1).exe
2018-06-09 19:08 - 2018-06-09 19:08 - 000000894 _____ C:\Users\Laval Emmanuel\Desktop\ZHPCleaner.lnk
2018-06-09 18:48 - 2018-06-09 18:49 - 000000000 ____D C:\AdwCleaner
2018-06-09 18:48 - 2018-06-09 18:48 - 007372496 _____ (Malwarebytes) C:\Users\Laval Emmanuel\Downloads\adwcleaner_7.2.0.exe
2018-06-08 22:37 - 2018-06-08 22:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\7DaysToDie
2018-06-08 21:59 - 2018-06-08 21:59 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Contingent99
2018-06-08 21:45 - 2018-06-08 21:45 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-06-08 21:44 - 2018-06-08 21:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2018-06-08 21:42 - 2018-06-02 05:04 - 040346536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 035250624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 013727800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 011272944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 004349864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 003760392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 002014144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439811.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 001563224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 001468272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439811.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 001418664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 001216424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 001092360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 000627056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2018-06-08 21:42 - 2018-06-02 05:04 - 000518000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 031278400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 025991456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 017784624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 015195256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 001347696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 001157216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 001063224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 000904720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 000814432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2018-06-08 21:42 - 2018-06-02 05:03 - 000652352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2018-06-08 21:34 - 2018-06-08 21:45 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2018-06-08 21:34 - 2018-06-08 21:34 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000004106 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003976 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-08 21:34 - 2018-06-08 21:34 - 000001453 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2018-06-08 21:34 - 2018-06-08 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-06-08 21:34 - 2018-05-20 19:33 - 002496296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2018-06-08 21:34 - 2018-05-20 19:33 - 002164008 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2018-06-08 21:34 - 2018-05-20 19:33 - 001312040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll
2018-06-08 21:34 - 2018-05-20 17:30 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2018-06-08 21:34 - 2018-04-28 02:25 - 000068112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2018-06-07 01:45 - 2018-06-07 01:45 - 000001932 _____ C:\Users\Laval Emmanuel\Downloads\countclick.php
2018-06-06 17:57 - 2018-06-06 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2018-06-06 17:57 - 2018-06-06 17:57 - 000000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2018-06-05 00:11 - 2018-06-09 23:13 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\D3DSCache
2018-06-04 20:59 - 2018-06-04 20:59 - 000001584 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AION Free-to-Play.lnk
2018-06-04 20:59 - 2018-06-04 20:59 - 000001572 _____ C:\Users\Public\Desktop\AION Free-to-Play.lnk
2018-06-04 20:59 - 2018-06-04 20:59 - 000000000 ____D C:\Program Files (x86)\Gameforge
2018-06-03 17:27 - 2018-06-03 17:27 - 000129045 _____ C:\Users\Laval Emmanuel\Downloads\soirée élèves 2018.pdf
2018-05-30 00:21 - 2018-05-30 00:21 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Agony
2018-05-29 18:36 - 2018-05-29 18:36 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\11BitStudios
2018-05-29 17:06 - 2018-05-29 17:06 - 000113827 _____ C:\Users\Laval Emmanuel\Downloads\cp-130425-MedicamentsSurveillanceRenforcee.pdf
2018-05-29 17:00 - 2018-05-29 17:00 - 000056157 _____ C:\Users\Laval Emmanuel\Downloads\Courrier_medoc_surveillance.pdf
2018-05-29 16:55 - 2018-05-29 16:55 - 000059510 _____ C:\Users\Laval Emmanuel\Downloads\CP-MédicamentsSurveillance.pdf
2018-05-27 23:25 - 2018-05-27 23:25 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Catmaze
2018-05-24 23:37 - 2018-05-24 23:37 - 005469281 _____ C:\Users\Laval Emmanuel\Downloads\e62.pptx
2018-05-24 16:36 - 2018-05-24 16:36 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Redbeet Interactive
2018-05-23 21:00 - 2018-05-23 21:00 - 000000000 ____D C:\Users\Laval Emmanuel\Documents\Elder Scrolls Online
2018-05-23 21:00 - 2018-05-23 21:00 - 000000000 ____D C:\ProgramData\Elder Scrolls Online
2018-05-23 18:02 - 2018-05-23 18:02 - 000000724 _____ C:\Users\Laval Emmanuel\Desktop\The Elder Scrolls Online .lnk
2018-05-23 18:02 - 2018-05-23 18:02 - 000000000 ___HD C:\Program Files (x86)\Zero G Registry
2018-05-23 18:02 - 2018-05-23 18:02 - 000000000 ____D C:\WINDOWS\jre
2018-05-23 18:02 - 2018-05-23 18:02 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online
2018-05-23 17:57 - 2018-05-23 17:57 - 000000000 ___HD C:\Users\Laval Emmanuel\InstallAnywhere
2018-05-22 15:12 - 2018-05-22 15:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\RivetNetworks
2018-05-22 15:12 - 2018-05-22 15:12 - 000000000 ____D C:\ProgramData\RivetNetworks
2018-05-22 15:11 - 2018-05-22 15:11 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2018-05-22 15:10 - 2018-06-09 18:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-05-22 15:10 - 2018-06-07 21:27 - 000004754 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-05-22 15:10 - 2018-06-07 21:27 - 000004558 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2018-05-22 15:10 - 2018-05-22 15:10 - 000003516 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-22 15:10 - 2018-05-22 15:10 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2018-05-22 15:10 - 2018-05-22 15:10 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-05-22 15:10 - 2018-05-22 15:10 - 000003244 _____ C:\WINDOWS\System32\Tasks\Overwolf Updater Task
2018-05-22 15:10 - 2018-05-22 15:10 - 000003114 _____ C:\WINDOWS\System32\Tasks\MSI_Help_Desk_Agent
2018-05-22 15:10 - 2018-05-22 15:10 - 000002764 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MSI-Laval Emmanuel
2018-05-22 15:10 - 2018-05-22 15:10 - 000002706 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP Officejet 4630 series
2018-05-22 15:10 - 2018-05-22 15:10 - 000002556 _____ C:\WINDOWS\System32\Tasks\WinZip Update Notifier
2018-05-22 15:10 - 2018-05-22 15:10 - 000002502 _____ C:\WINDOWS\System32\Tasks\MSI_Dragon Gaming Center
2018-05-22 15:10 - 2018-05-22 15:10 - 000002396 _____ C:\WINDOWS\System32\Tasks\Nahimic2UILauncherRun
2018-05-22 15:10 - 2018-05-22 15:10 - 000002384 _____ C:\WINDOWS\System32\Tasks\Nahimic2Svc64Run
2018-05-22 15:10 - 2018-05-22 15:10 - 000002376 _____ C:\WINDOWS\System32\Tasks\Nahimic2Svc32Run
2018-05-22 15:10 - 2018-05-22 15:10 - 000002242 _____ C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements
2018-05-22 15:10 - 2018-05-22 15:10 - 000002218 _____ C:\WINDOWS\System32\Tasks\PDVDServ12 Task
2018-05-22 15:10 - 2018-05-22 15:10 - 000002216 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-05-22 15:10 - 2018-05-22 15:10 - 000000020 ___SH C:\Users\Laval Emmanuel\ntuser.ini
2018-05-22 15:10 - 2018-05-22 15:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-05-22 15:09 - 2018-05-22 15:10 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2018-05-22 15:09 - 2018-05-22 15:10 - 000007623 _____ C:\WINDOWS\diagerr.xml
2018-05-22 15:06 - 2018-06-09 18:56 - 002380820 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-05-22 15:03 - 2018-05-22 15:03 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-05-22 15:01 - 2018-06-09 03:01 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\LogMeIn Hamachi
2018-05-22 15:01 - 2018-05-23 18:02 - 000000000 ____D C:\Users\Laval Emmanuel
2018-05-22 15:01 - 2018-05-22 15:14 - 000002444 _____ C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Voisinage réseau
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Voisinage d'impression
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Modèles
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Mes documents
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Menu Démarrer
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Documents\Mes vidéos
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Documents\Mes images
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Documents\Ma musique
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\AppData\Local\Historique
2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 ____D C:\ProgramData\USOShared
2018-05-22 15:01 - 2018-01-10 11:42 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Macromedia
2018-05-22 15:01 - 2017-07-13 15:24 - 000000153 _____ C:\Users\Laval Emmanuel\BullseyeCoverageError.txt
2018-05-22 14:59 - 2018-06-02 05:05 - 000552200 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2018-05-22 14:59 - 2018-06-02 05:05 - 000457256 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2018-05-22 14:59 - 2018-04-12 01:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-05-22 14:58 - 2018-06-09 19:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-05-22 14:58 - 2018-06-09 18:50 - 005083944 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-05-21 23:11 - 2018-05-22 15:58 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-05-21 23:05 - 2018-05-21 23:11 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-05-21 23:00 - 2018-05-21 23:00 - 025848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 022707712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 022002688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 019399168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 012712960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 007583232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 006569952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 005782528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 001636352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 001454016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000786168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2018-05-21 23:00 - 2018-05-21 23:00 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000559968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-05-21 23:00 - 2018-05-21 23:00 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-05-21 22:59 - 2018-05-21 23:00 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 009159064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 007436624 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 003732800 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 003655168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 003440640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 003389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 003283400 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 002897408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 002835864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 002700800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 002486976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 002422168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 002170368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001664512 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001634800 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001456616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-05-21 22:59 - 2018-05-21 22:59 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 001191168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001174424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 001063320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-05-21 22:59 - 2018-05-21 22:59 - 001034624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000885848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000733992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000709816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2018-05-21 22:59 - 2018-05-21 22:59 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000567136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2018-05-21 22:59 - 2018-05-21 22:59 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000272288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000269216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-05-21 22:59 - 2018-05-21 22:59 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-05-21 22:59 - 2018-05-21 22:59 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim
2018-05-21 22:51 - 2018-06-09 18:56 - 000477760 _____ C:\WINDOWS\system32\perfh011.dat
2018-05-21 22:51 - 2018-06-09 18:56 - 000132870 _____ C:\WINDOWS\system32\perfc011.dat
2018-05-21 22:51 - 2018-05-21 22:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ja
2018-05-21 22:51 - 2018-05-21 22:51 - 000000000 ____D C:\WINDOWS\system32\ja
2018-05-21 22:51 - 2018-05-21 22:50 - 000144624 _____ C:\WINDOWS\system32\perfi011.dat
2018-05-21 22:51 - 2018-05-21 22:50 - 000033402 _____ C:\WINDOWS\system32\perfd011.dat
2018-05-21 22:14 - 2018-05-21 22:14 - 007702016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Models0011.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 007406080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 007242240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 006350848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 005487616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 002454528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Lexicons0011.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 000712704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll
2018-05-21 22:14 - 2018-05-21 22:14 - 000002060 _____ C:\WINDOWS\system32\noise.jpn
2018-05-21 22:13 - 2018-05-21 22:13 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-05-21 22:13 - 2018-05-21 22:13 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-05-21 22:13 - 2018-05-21 22:13 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2018-05-21 22:13 - 2018-05-21 22:13 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-05-21 22:13 - 2018-05-21 22:13 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2018-05-21 22:13 - 2018-05-21 22:13 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-05-21 22:13 - 2018-05-21 22:13 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2018-05-21 22:13 - 2018-05-21 22:13 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2018-05-21 22:12 - 2018-05-22 15:58 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-05-21 22:12 - 2018-05-21 23:13 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2018-05-21 22:12 - 2018-05-21 22:12 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-05-21 22:12 - 2018-05-21 22:12 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-05-21 22:12 - 2018-05-21 22:12 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-05-21 22:12 - 2018-05-21 22:12 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-05-21 22:12 - 2018-05-21 22:12 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-05-21 22:12 - 2018-05-21 22:12 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-05-21 22:12 - 2018-05-21 22:12 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-05-21 22:12 - 2018-05-21 22:12 - 000000000 ____D C:\Program Files\MSBuild
2018-05-21 22:12 - 2018-05-21 22:12 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-05-21 21:54 - 2018-05-21 21:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-05-21 21:06 - 2018-05-22 15:10 - 000000000 ___DC C:\WINDOWS\Panther
2018-05-21 19:47 - 2018-05-21 19:47 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\PlayfulCorp
2018-05-21 15:32 - 2018-06-04 14:57 - 000000730 _____ C:\Users\Laval Emmanuel\Desktop\Nouveau document texte.txt
2018-05-21 14:32 - 2018-05-21 14:32 - 000589573 _____ C:\Users\Laval Emmanuel\Downloads\mode-d-emploi_Forum alternance2018.pdf
2018-05-18 23:38 - 2018-05-18 23:38 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Lince Works
2018-05-17 18:44 - 2018-05-17 18:44 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\OnSkull Games
2018-05-17 18:31 - 2018-05-17 18:31 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\synthexyze
2018-05-17 11:17 - 2018-05-17 11:17 - 020672942 _____ C:\Users\Laval Emmanuel\Downloads\BTSSIO_Analyse-economique-juridique-et-manageriale-des-services-informatiques_2015.pdf
2018-05-16 11:55 - 2018-05-16 11:55 - 000030720 _____ C:\Users\Laval Emmanuel\Downloads\laval.emmanuel.e6synthese.xls
2018-05-16 11:27 - 2018-05-16 11:27 - 000053248 _____ C:\Users\Laval Emmanuel\Downloads\bts_sio_e6_tableau_synthese_2016..xls
2018-05-16 11:15 - 2018-05-16 11:15 - 000000000 ____D C:\Users\Public\Documents\Hewlett-Packard
2018-05-16 11:13 - 2018-05-16 11:13 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2018-05-16 11:13 - 2018-05-16 11:13 - 000000000 _____ C:\WINDOWS\HPMProp.INI
2018-05-16 11:13 - 2013-12-04 00:14 - 000601376 _____ (HP) C:\WINDOWS\SysWOW64\hpcdmc32.dll
2018-05-16 11:13 - 2013-12-04 00:14 - 000237344 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\hpmlm135.dll
2018-05-16 11:13 - 2013-12-04 00:13 - 000217376 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmml160.dll
2018-05-16 11:13 - 2013-12-04 00:13 - 000189728 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmpm081.dll
2018-05-16 11:13 - 2013-12-04 00:13 - 000162080 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmtp160.dll
2018-05-16 11:13 - 2013-12-04 00:13 - 000074016 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmpw081.dll
2018-05-16 11:13 - 2013-12-04 00:12 - 000199968 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmja160.dll
2018-05-16 11:13 - 2013-12-04 00:11 - 000447264 _____ (Hewlett-Packard Corporation) C:\WINDOWS\system32\hpcpn160.dll
2018-05-16 11:13 - 2013-12-04 00:11 - 000140064 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpcjpm.dll
2018-05-16 11:13 - 2013-12-04 00:07 - 000446240 _____ (Hewlett Packard Corporation) C:\WINDOWS\SysWOW64\hpcc3160.dll
2018-05-16 11:13 - 2011-02-11 14:23 - 000193592 _____ (Hewlett-Packard) C:\WINDOWS\system32\hppdcompio.dll
2018-05-16 11:13 - 2011-02-11 14:23 - 000167480 _____ (Hewlett-Packard) C:\WINDOWS\SysWOW64\hppccompio.dll
2018-05-16 11:13 - 2009-02-25 16:32 - 000060440 _____ (Hewlett-Packard) C:\WINDOWS\system32\FxCompChannel_x64.dll
2018-05-14 17:23 - 2018-05-22 15:03 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twitch Games
2018-05-14 17:21 - 2018-05-14 17:21 - 000000000 ____D C:\ProgramData\Twitch
2018-05-12 01:23 - 2018-05-12 01:23 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\RiverGame
2018-05-11 14:35 - 2018-05-11 14:35 - 000589285 _____ C:\Users\Laval Emmanuel\Downloads\edc14md.zip
2018-05-11 14:21 - 2018-05-11 14:21 - 000522692 _____ C:\Users\Laval Emmanuel\Downloads\edc16md (1).zip

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-06-10 16:43 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-10 15:15 - 2017-08-31 21:52 - 000000000 ____D C:\ProgramData\NVIDIA
2018-06-10 15:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-10 15:12 - 2017-05-04 17:26 - 000000000 __SHD C:\Users\Laval Emmanuel\IntelGraphicsProfiles
2018-06-10 02:00 - 2017-06-06 17:55 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Adobe
2018-06-09 22:16 - 2017-05-04 18:52 - 000000000 ____D C:\Program Files (x86)\Steam
2018-06-09 19:08 - 2018-04-30 13:45 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\ZHP
2018-06-09 18:59 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-09 18:56 - 2018-04-12 18:18 - 000792066 _____ C:\WINDOWS\system32\perfh00C.dat
2018-06-09 18:56 - 2018-04-12 18:18 - 000150060 _____ C:\WINDOWS\system32\perfc00C.dat
2018-06-09 18:56 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF
2018-06-09 18:50 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-06-09 18:50 - 2017-09-11 17:28 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2018-06-09 18:50 - 2017-06-21 16:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-06-09 18:50 - 2017-06-21 16:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-06-09 18:49 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Registration
2018-06-09 15:57 - 2017-05-04 17:26 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\NVIDIA Corporation
2018-06-09 15:56 - 2017-12-14 18:35 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent
2018-06-09 15:55 - 2017-05-30 14:26 - 000000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2018-06-09 15:55 - 2017-05-30 14:26 - 000000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2018-06-08 23:54 - 2017-05-08 20:06 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\SmartSteamEmu
2018-06-08 23:33 - 2017-06-21 16:02 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Mozilla
2018-06-08 23:31 - 2018-02-22 20:30 - 000000001 _____ C:\Users\Public\Documents\dgc.txt
2018-06-08 23:28 - 2017-06-21 16:02 - 000001238 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-06-08 22:37 - 2017-08-23 01:11 - 000000000 ____D C:\Users\Laval Emmanuel\ansel
2018-06-08 22:01 - 2017-08-31 21:52 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-06-08 21:45 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-06-08 21:45 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-06-08 21:45 - 2017-05-05 21:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\NVIDIA
2018-06-08 21:34 - 2017-05-04 17:26 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\NVIDIA
2018-06-07 21:50 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-07 21:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2018-06-07 21:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Macromed
2018-06-06 01:29 - 2018-04-12 01:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-06 01:29 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-04 21:37 - 2017-05-05 21:37 - 000000000 ____D C:\Program Files (x86)\Overwolf
2018-06-04 20:59 - 2017-05-04 17:39 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Skype
2018-06-04 14:58 - 2018-04-16 21:42 - 000015913 _____ C:\Users\Laval Emmanuel\Desktop\Lettre motivation alternance.odt
2018-06-04 14:22 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-06-02 05:03 - 2017-06-26 08:54 - 004855032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2018-06-02 05:03 - 2017-06-26 08:54 - 004125056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2018-06-01 12:16 - 2017-06-26 05:42 - 000044277 _____ C:\WINDOWS\system32\nvinfo.pb
2018-06-01 10:39 - 2017-08-31 21:52 - 005947976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2018-06-01 10:39 - 2017-08-31 21:52 - 002612352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2018-06-01 10:39 - 2017-08-31 21:52 - 001767552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2018-06-01 10:39 - 2017-08-31 21:52 - 000634152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2018-06-01 10:39 - 2017-08-31 21:52 - 000450856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2018-06-01 10:39 - 2017-08-31 21:52 - 000124304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2018-06-01 10:39 - 2017-08-31 21:52 - 000083528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2018-05-31 13:21 - 2017-05-04 22:43 - 000000000 ____D C:\Users\Laval Emmanuel\Documents\Jeux
2018-05-31 11:44 - 2017-08-31 21:52 - 008193252 _____ C:\WINDOWS\system32\nvcoproc.bin
2018-05-30 00:21 - 2017-05-14 15:18 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\UnrealEngine
2018-05-29 15:42 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-05-24 23:11 - 2017-05-05 21:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\TS3Client
2018-05-24 19:44 - 2017-08-31 21:52 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2018-05-24 16:36 - 2018-03-11 22:34 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\CreamAPI
2018-05-23 17:12 - 2018-02-14 19:04 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\PlaceholderTileLogoFolder
2018-05-23 03:23 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\appcompat
2018-05-22 21:35 - 2017-10-20 19:41 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Packages
2018-05-22 19:35 - 2017-07-28 01:25 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\discord
2018-05-22 15:58 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2018-05-22 15:58 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\WCN
2018-05-22 15:58 - 2018-04-12 01:41 - 000000000 ____D C:\WINDOWS\Setup
2018-05-22 15:58 - 2018-04-12 01:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\spool
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\IME
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Help
2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-05-22 15:58 - 2018-02-10 17:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dying Light [GOG.com]
2018-05-22 15:58 - 2018-02-05 15:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nahimic 2+ Audio Driver
2018-05-22 15:58 - 2018-01-16 23:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.6.3p1 (32-bit)
2018-05-22 15:58 - 2018-01-16 22:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 2017.3.0f3 (64-bit)
2018-05-22 15:58 - 2017-12-31 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2017 Tools for Unity
2018-05-22 15:58 - 2017-12-31 15:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.6.3p1 (64-bit)
2018-05-22 15:58 - 2017-11-21 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2018-05-22 15:58 - 2017-11-15 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2018-05-22 15:58 - 2017-11-09 12:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2018-05-22 15:58 - 2017-10-18 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe
2018-05-22 15:58 - 2017-10-17 13:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Global Protection
2018-05-22 15:58 - 2017-10-10 14:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2018-05-22 15:58 - 2017-10-05 17:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2
2018-05-22 15:58 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-05-22 15:58 - 2017-09-23 14:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divinity - Original Sin 2 [GOG.com]
2018-05-22 15:58 - 2017-09-21 14:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2018-05-22 15:58 - 2017-09-12 01:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tekken 7
2018-05-22 15:58 - 2017-09-11 17:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2018-05-22 15:58 - 2017-09-09 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightning Warrior Raidy
2018-05-22 15:58 - 2017-09-06 00:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2018-05-22 15:58 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\Intel
2018-05-22 15:58 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files (x86)\Intel
2018-05-22 15:58 - 2017-08-29 16:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Darkwood [GOG.com]
2018-05-22 15:58 - 2017-08-22 21:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert Online
2018-05-22 15:58 - 2017-08-17 03:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.7
2018-05-22 15:58 - 2017-08-17 03:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMouseAutoClicker
2018-05-22 15:58 - 2017-08-03 22:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaDownloader
2018-05-22 15:58 - 2017-07-17 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2018-05-22 15:58 - 2017-07-07 20:57 - 000000000 ____D C:\Program Files\UNP
2018-05-22 15:58 - 2017-06-27 10:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2018-05-22 15:58 - 2017-06-21 12:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 21.5
2018-05-22 15:58 - 2017-06-07 10:19 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2018-05-22 15:58 - 2017-05-11 12:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win'Design
2018-05-22 15:58 - 2017-05-11 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0
2018-05-22 15:58 - 2017-05-08 15:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans
2018-05-22 15:58 - 2017-05-08 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2018-05-22 15:58 - 2017-05-08 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-05-22 15:58 - 2017-05-07 12:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2018-05-22 15:58 - 2017-05-06 20:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-05-22 15:58 - 2017-05-06 02:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2018-05-22 15:58 - 2017-05-04 22:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock
2018-05-22 15:58 - 2017-05-04 22:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-22 15:58 - 2017-05-04 18:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2018-05-22 15:58 - 2015-11-03 03:45 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 12
2018-05-22 15:58 - 2015-11-03 03:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnRecovery
2018-05-22 15:58 - 2015-11-03 03:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2018-05-22 15:58 - 2015-11-03 03:18 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles
2018-05-22 15:58 - 2015-11-03 03:13 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2018-05-22 15:58 - 2015-11-03 03:10 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2018-05-22 15:50 - 2017-05-09 10:09 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\ConnectedDevicesPlatform
2018-05-22 15:14 - 2017-05-04 17:30 - 000000000 ___RD C:\Users\Laval Emmanuel\OneDrive
2018-05-22 15:10 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\windows nt
2018-05-22 15:10 - 2017-10-20 20:01 - 000000000 ___RD C:\Users\Laval Emmanuel\3D Objects
2018-05-22 15:10 - 2016-11-21 08:40 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-05-22 15:06 - 2018-04-30 16:01 - 000002309 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-22 15:06 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-05-22 15:06 - 2017-05-09 09:53 - 000023208 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-05-22 15:06 - 2015-11-03 03:13 - 002375792 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2018-05-22 15:03 - 2017-10-07 18:00 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEmu
2018-05-22 15:03 - 2017-08-02 23:58 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
2018-05-22 15:03 - 2017-06-06 16:42 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
2018-05-22 15:03 - 2017-05-30 20:19 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTP Expert 3
2018-05-22 15:03 - 2017-05-05 21:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2018-05-22 15:03 - 2017-05-05 16:31 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.6
2018-05-22 15:03 - 2017-05-04 22:27 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-22 15:02 - 2018-01-01 22:00 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender
2018-05-22 15:02 - 2017-07-28 01:25 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2018-05-22 15:02 - 2017-05-12 12:48 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pichat
2018-05-22 15:01 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\USOPrivate
2018-05-22 14:59 - 2017-08-31 21:52 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-05-22 14:59 - 2017-08-31 21:52 - 000000000 ____D C:\WINDOWS\system32\DAX3
2018-05-22 14:59 - 2017-08-31 21:52 - 000000000 ____D C:\WINDOWS\system32\DAX2
2018-05-22 14:59 - 2017-05-09 09:46 - 000000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2018-05-21 23:22 - 2018-04-12 01:38 - 000000000 __RHD C:\Users\Public\Libraries
2018-05-21 23:13 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2018-05-21 23:13 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2018-05-21 23:13 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-05-21 23:12 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\winrm
2018-05-21 23:12 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\slmgr
2018-05-21 23:12 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\F12
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\dsc
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\MUI
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\et-EE
2018-05-21 23:12 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-05-21 23:11 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\OCR
2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\system
2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-05-21 23:11 - 2017-12-31 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017
2018-05-21 23:11 - 2017-08-31 21:52 - 000000000 ____D C:\ProgramData\Synaptics
2018-05-21 23:11 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\Synaptics
2018-05-21 23:11 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\Realtek
2018-05-21 23:11 - 2017-07-19 21:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hammerwatch [GOG.com]
2018-05-21 23:11 - 2017-07-09 20:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2018-05-21 23:11 - 2017-05-25 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lovers in a Dangerous Spacetime [GOG.com]
2018-05-21 23:11 - 2017-05-14 19:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT
2018-05-21 23:11 - 2017-05-14 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest
2018-05-21 23:11 - 2015-11-03 03:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking
2018-05-21 23:07 - 2017-05-21 18:21 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\ElevatedDiagnostics
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\ta-in
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\si-lk
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\am-et
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Provisioning
2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\com
2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\migwiz
2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\com
2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Defender
2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2018-05-21 22:51 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2018-05-21 22:51 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\servicing
2018-05-21 22:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-05-21 22:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2018-05-21 22:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-05-21 22:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\es-MX
2018-05-21 14:40 - 2018-04-12 13:14 - 000041230 _____ C:\Users\Laval Emmanuel\Desktop\CV_emmanuel_laval.pdf
2018-05-21 13:41 - 2017-05-05 12:48 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\CrashDumps
2018-05-17 18:08 - 2017-08-22 21:50 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\BlackDesertOnline
2018-05-16 11:24 - 2017-09-21 14:32 - 000000000 ____D C:\Program Files\Microsoft Office 15
2018-05-14 20:00 - 2017-09-08 14:27 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-05-14 17:21 - 2017-09-12 21:10 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Twitch

==================== Fichiers à la racine de certains dossiers =======

2017-05-31 21:23 - 2017-06-17 14:15 - 000000204 _____ () C:\ProgramData\DP0004.dat
2017-11-07 01:06 - 2018-02-09 20:28 - 000000096 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\LauncherSettings_live.cfg
2017-05-30 20:20 - 2018-01-12 12:05 - 000012288 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\Settings.cfg
2017-11-07 00:47 - 2017-11-07 23:58 - 000011613 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\TheHunterSettings_live.bin
2017-11-07 00:39 - 2017-11-07 00:48 - 000000042 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\TheHunterSettings_steam_live.cfg
2017-05-09 10:41 - 2017-05-09 18:09 - 000000600 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\winscp.rnd

Certains fichiers dans TEMP:
====================
2018-06-04 20:58 - 2018-06-04 20:58 - 058834376 _____ (Skype Technologies S.A.) C:\Users\Laval Emmanuel\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2018-05-22 14:58

==================== Fin de FRST.txt ============================

Addition.txt

Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Your logs are clean of malware.

ATTENTION: System Restore is disabled
Turn System Restore On for Drives in Windows 10
http://www.tenforums.com/tutorials/4533-system-protection-turn-off-drives-windows-10-a.html
===

==================== MSCONFIG/TASK MANAGER éléments désactivés ==
HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\StartupApproved\Run: => "Discord"

Check the status of Discord.

If disabled change it to enabled.

===

Check the integrity of the operating system files.
How to run sfc /Scannow
http://support.microsoft.com/kb/929833

When completed refer to the Microsoft article again and follow the instructions to view details of the System File Checker process

Post the contents of the sfcdetails.txt file for my review.

Let me know if the problem persists.
<<<>>

Link to post
Share on other sites

Hi,

--RogueKiller--

  • Download & SAVE to your Desktop Download RogueKiller
  • Quit all programs that you may have started.
  • Please disconnect any USB or external drives from the computer before you run this scan!
  • For Vista or above, right-click the program file and select "Run as Administrator"
  • Accept the user agreements.
  • Execute the scan and wait until it has finished.
  • If a Windows opens to explain what [PUM's] are, read about it.
  • Click the RoguKiller icon on your taksbar to return to the report.
  • Click open the Report
  • Click Export TXT button
  • Save the file as ReportRogue.txt
  • Click the Remove button to delete the items in RED  
  • Click Finish and close the program.
  • Locate the ReportRogue.txt file on your Desktop and copy/paste the contents in your next.

If nothing is found then I suggest you reinstall discord
https://discordapp.com/

Keep me posted.

Link to post
Share on other sites

Hi,

Here's what rogue killer found :

 

RogueKiller V12.12.21.0 (x64) [Jun 11 2018] (Gratuit) par Adlice Software
email : http://www.adlice.com/fr/contact/
Remontées : https://forum.adlice.com
Site web : http://www.adlice.com/fr/download/roguekiller/
Blog : http://www.adlice.com/fr/

Système d'exploitation : Windows 10 (10.0.17134) 64 bits version
Démarré en  : Mode normal
Utilisateur : Laval Emmanuel [Administrateur]
Démarré depuis : C:\Program Files\RogueKiller\RogueKiller64.exe
Mode : Scan -- Date : 06/11/2018 16:21:41 (Durée : 00:41:38)
Commutateurs : -refid

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 6 ¤¤¤
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem15.msn.com/?pc=NMTE  -> Trouvé(e)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem15.msn.com/?pc=NMTE  -> Trouvé(e)
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem15.msn.com/?pc=NMTE  -> Trouvé(e)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem15.msn.com/?pc=NMTE  -> Trouvé(e)
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{be37cd19-5afc-4edb-ace2-f2e63f588c88} | DhcpNameServer : 10.110.232.1 ([X])  -> Trouvé(e)
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{f0193d4e-2215-4793-b76e-4d83175453da} | DhcpNameServer : 10.187.88.5 10.187.88.10 8.8.8.8 ([X][X][-])  -> Trouvé(e)

¤¤¤ Tâches : 0 ¤¤¤

¤¤¤ Fichiers : 4 ¤¤¤
[PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe -> Trouvé(e)
[PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.5.0_44294\utorrentie.exe -> Trouvé(e)
[PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe -> Trouvé(e)
[PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.5.3_44358\utorrentie.exe -> Trouvé(e)

¤¤¤ WMI : 0 ¤¤¤

¤¤¤ Fichier Hosts : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Chargé) ¤¤¤

¤¤¤ Navigateurs web : 2 ¤¤¤
[PUM.SearchEngine][Firefox:Config] 50juu56a.default : user_pref("browser.search.selectedEngine", "Bing®"); -> Trouvé(e)
[PUM.SearchEngine][Firefox:Config] 50juu56a.default : user_pref("browser.search.defaultenginename", "Bing®"); -> Trouvé(e)

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: TOSHIBA THNSNJ128G8NY +++++
--- User ---
[MBR] 33dd326ab464b93921b1e02f46510452
[BSP] 067d5e99a1f678f21c9156d9d545f1db : Empty MBR Code
Partition table:
0 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2048 | Size: 300 MB
1 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 616448 | Size: 128 MB
2 - Basic data partition | Offset (sectors): 878592 | Size: 120704 MB
3 - [SYSTEM][MAN-MOUNT]  | Offset (sectors): 248082432 | Size: 970 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: WDC WD10JPVX-22JC3T0 +++++
--- User ---
[MBR] 2168f0293a5e25554cc34a01f530d157
[BSP] d76febb611d7da9b8b79dc7ec115891b : Empty MBR Code
Partition table:
0 - Basic data partition | Offset (sectors): 2048 | Size: 933579 MB
1 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 1911971840 | Size: 20289 MB
User = LL1 ... OK
User = LL2 ... OK

 

I don't know if this solved the problem, all the utorrent files has been deleted. If the problem persist, i'll let you know.

Thanks again for the help

Link to post
Share on other sites

Hi again,

It worked all yesterday night but it just happened again, this time i just opened a game that i play for a long time and i couldn't click anywhere, desktop or taskbar. 

I reinstalled discord and did a CCleaner registry cleanup

I'm starting to think that's only my computer, but he's only 1 year old and never had any shock..

Link to post
Share on other sites

The thing is it happens randomly, and discord wasn't even on, so i don't know, if that happens again until tomorrow, i'll let you know. ( Discord is disabled now )

Plus, if there's no more malwares, i don't wanna bother you more.

Link to post
Share on other sites

  • 1 month later...
Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.