Manuu Posted June 9, 2018 ID:1249131 Share Posted June 9, 2018 Hello, I think i have a malware freezing my computer, but i'm not sure. The thing is, sometimes my desktop is like frozen, i cant click on anything until I open the task manager. For example, i'm using Discord and chrome at the same time, chrome works perfectly, i watch videos on youtube, but then, if I switch tabs to discord, i can't click on anything, nothing respond, i go on my desktop, same, but chrome keeps working well. I checked my CPU/GPU, and nothing seems abnormal. Again, i'm not sure if it's a malware or not, but better safe than sorry ! I tried adwCleanner/ZHPCleaner and antivirus.. Nothing detected. So if you can help, i'll appreciate it enormously. And sorry if my english is bad, i'm french and i'll do my best to not make too much grammatical errors. Link to post Share on other sites More sharing options...
Staff Malwarebytes Posted June 9, 2018 Staff ID:1249132 Share Posted June 9, 2018 ***This is an automated reply*** Hi, Thanks for posting in the Malware Removal for Windows Help forum. Being infected is not fun and can be very frustrating to resolve, but don't worry because we have a team of experts here help you!! Note: Please be patient. When the site is busy it can take up to 48 hours before a malware removal helper can assist you. If no one has replied to your new topic after 48 hours please contact an Administrator to let them know. First, if you haven't done so, please run a Threat Scan with the latest version of Malwarebytes. This may resolve your malware infection issue without the need for additional support. Click "Reveal Hidden Contents" below for details: Spoiler Malwarebytes can detect and remove most malware with no further actions required for free. If you do not have Malwarebytes, please download it here and install. Be sure to post back the log as shown below. Open Malwarebytes for Windows To the left, click Scan > Scan Types. Select Threat Scan. Threat Scan is the most thorough and recommended scan method available. Click Start Scan Next, if you're still experiencing issues after running Malwarebytes, then technical logs will be required to assist you. Click "Reveal Hidden Contents" below and follow the instructions to run the Farbar Recovery Scan Tool: Spoiler Don't use any temporary file cleaners unless requested - this can cause data loss and make a recovery difficult. Please download the Farbar Recovery Scan Tool here and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens click Yes to the disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach or copy and paste it to your reply. The first time the tool is run, it also makes another log (Addition.txt). If you've run it before it may not and you may need to select it manually. Finally, attach the Malwarebytes Threat Scan, FRST.txt and Additional.txt logs to your reply. Before submitting your reply, be sure to enable "Notify me of replies" like so: Click "Reveal Hidden Contents" below for details on how to add attachments to your post.Note: If you are unable to attach files, please copy and past the contents of the requested files in your Reply instead. Spoiler To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button. Please Note the Following: One of our expert helpers will give you one-on-one assistance when one becomes available. Refrain from making any further changes to your computer (such as Install/Uninstall programs, using special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. Do not 'bump' or add a reply to your topic once it is started. Topics which appear to have replies are considered to have a helper assisting them and may be overlooked, resulting in a longer waiting period for help If you're using Peer 2 Peer software such as uTorrent or similar, please completely disable it from running while being assisted here. Troubleshooting Tips FAQ - Malwarebytes won't run or failed to resolve my issues Groups authorized to help with Malware Removal for Windows logs Link to post Share on other sites More sharing options...
nasdaq Posted June 10, 2018 ID:1249240 Share Posted June 10, 2018 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File.Click the file you wish to Attach.Click Attach this file.Click the Add reply button. === Please post the logs for my review. Wait for further instructions. Link to post Share on other sites More sharing options...
Manuu Posted June 10, 2018 Author ID:1249243 Share Posted June 10, 2018 Hello and thanks for helping me ! Here's the content of the FRST.txt : Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 06.06.2018 01 Exécuté par Laval Emmanuel (administrateur) sur MSI (10-06-2018 16:58:14) Exécuté depuis C:\Users\Laval Emmanuel\Downloads Profils chargés: Laval Emmanuel (Profils disponibles: Laval Emmanuel) Platform: Windows 10 Home Version 1803 17134.48 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Edge) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\igfxCUIService.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\IntelCpHDCPSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Intel Corporation) C:\Windows\System32\ibtsiva.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe (Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\SCM\MSIService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Windscribe Limited) C:\Program Files (x86)\Windscribe\WindscribeService.exe (Microvirt Software Technology Co. Ltd.) D:\Microvirt\MEmu\MemuService.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\IntelCpHeciSvc.exe (Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\igfxEM.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe\HxTsr.exe () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Gaming Center\Dragon Gaming Center.exe (Nahimic) C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe () C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2Svc32.exe () C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2Svc64.exe () C:\Program Files (x86)\RocketDock\RocketDock.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (MSI) C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PDVD12Serv.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe (Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe (Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe (Discord Inc.) C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11804.1001.10.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9217016 2017-04-13] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-24] (Intel Corporation) HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [301056 2015-09-12] (MSI) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated) HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [1878016 2017-04-19] (WinZip) HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [124360 2017-04-19] (WinZip Computing, S.L.) HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2017-04-19] (WinZip Computing, S.L.) HKLM\...\Run: [Nahimic2UILauncher] => C:\Program Files\Nahimic\Nahimic2\UserInterface\Nahimic2UILauncher.exe [734296 2017-12-13] (Nahimic) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3920552 2015-10-28] (Synaptics Incorporated) HKLM-x32\...\Run: [SUPER CHARGER] => C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe [1047536 2014-02-21] (MSI) HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated) HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [109824 2016-08-05] (Panda Security, S.L.) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2018-05-30] (LogMeIn Inc.) HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3201312 2018-06-09] (Valve Corporation) HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [RocketDock] => C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] () HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1224520 2018-05-31] () HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832272 2017-08-25] (Skype Technologies S.A.) HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9772248 2017-05-05] (Piriform Ltd) HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Discord] => C:\Users\Laval Emmanuel\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.) HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [10601064 2017-05-09] (Windscribe Limited) HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [HP Officejet 4630 series (NET)] => C:\Program Files\HP\HP Officejet 4630 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP) HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [729704 2018-03-21] (Disc Soft Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-11-03] ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OCS Inventory NG Systray.lnk [2017-11-23] ShortcutTarget: OCS Inventory NG Systray.lnk -> C:\Program Files (x86)\OCS Inventory Agent\OcsSystray.exe (OCS Inventory NG) Startup: C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Officejet 4630 series.lnk [2018-05-21] ShortcutTarget: Alertes de surveillance de l'encre - HP Officejet 4630 series.lnk -> C:\Program Files\HP\HP Officejet 4630 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP) Startup: C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-08-03] ShortcutTarget: MEGAsync.lnk -> C:\Users\Laval Emmanuel\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\..\Interfaces\{391d8f15-9d19-4b21-b61b-825d0fa40b75}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{be37cd19-5afc-4edb-ace2-f2e63f588c88}: [DhcpNameServer] 10.110.232.1 Tcpip\..\Interfaces\{f0193d4e-2215-4793-b76e-4d83175453da}: [DhcpNameServer] 10.187.88.5 10.187.88.10 8.8.8.8 Internet Explorer: ================== HKU\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem15.msn.com/?pc=NMTE HKU\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem15.msn.com/?pc=NMTE SearchScopes: HKU\S-1-5-21-1206140665-71179153-3832734882-1001 -> DefaultScope {1291C7EF-4B32-4620-B70B-57A036C671DD} URL = SearchScopes: HKU\S-1-5-21-1206140665-71179153-3832734882-1001 -> {1291C7EF-4B32-4620-B70B-57A036C671DD} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2018-02-13] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_161\bin\ssv.dll [2018-01-19] (Oracle Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2018-03-13] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-01-19] (Oracle Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-09-22] (Microsoft Corporation) FireFox: ======== FF DefaultProfile: 50juu56a.default FF ProfilePath: C:\Users\Laval Emmanuel\AppData\Roaming\TomTom\HOME\Profiles\pp53vacx.default [2017-10-10] FF ProfilePath: C:\Users\Laval Emmanuel\AppData\Roaming\Mozilla\Firefox\Profiles\50juu56a.default [2018-06-10] FF Homepage: Mozilla\Firefox\Profiles\50juu56a.default -> hxxps://www.google.com/ FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-07] () FF Plugin: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-01-19] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-01-19] (Oracle Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-07] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2017-09-21] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems) Chrome: ======= CHR DefaultSearchURL: Default -> hxxps://pandasecurity.mystart.com/results.php?pr=vmn&id=pandasafeweb&v=1_0_chromeextension_unknown__&searchfeed=web&hsimp=yhs-panda1&ent=ch_ss&q={searchTerms} CHR DefaultSearchKeyword: Default -> safeWeb CHR Profile: C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default [2018-06-10] CHR Extension: (Slides) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-04-30] CHR Extension: (BetterTTV) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2018-04-30] CHR Extension: (Docs) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-04-30] CHR Extension: (Google Drive) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-04-30] CHR Extension: (YouTube) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-04-30] CHR Extension: (Sheets) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-04-30] CHR Extension: (Google Docs hors connexion) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-04-30] CHR Extension: (AdBlock) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-05-25] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-30] CHR Extension: (Gmail) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-04-30] CHR Extension: (Chrome Media Router) - C:\Users\Laval Emmanuel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-04-30] CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [5745672 2018-04-28] () R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058392 2017-12-12] (Microsoft Corporation) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3663976 2018-03-21] (Disc Soft Ltd) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-09] (EasyAntiCheat Ltd) R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3346856 2018-05-30] (LogMeIn Inc.) R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4665168 2015-09-24] (SafeNet Inc.) U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-07-11] (Hi-Rez Studios) [Fichier non signé] R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-24] (Intel Corporation) R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [515768 2017-04-13] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé] S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-07] (Intel Corporation) R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2327488 2018-03-06] (Rivet Networks) R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [451072 2015-10-07] (Rivet Networks) [Fichier non signé] R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.) S2 MBAMService; D:\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes) R2 MEmusvc; D:\Microvirt\MEmu\MemuService.exe [269480 2017-05-26] (Microvirt Software Technology Co. Ltd.) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2015-09-12] (Micro-Star International Co., Ltd.) [Fichier non signé] R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe [162800 2014-02-21] (MSI) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-07-09] () R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [153096 2016-08-05] (Panda Security, S.L.) S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-11-14] (Hewlett-Packard) [Fichier non signé] S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [7986816 2016-11-06] (INCA Internet Co., Ltd.) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764712 2018-05-20] (NVIDIA Corporation) R3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764712 2018-05-20] (NVIDIA Corporation) S2 OCS Inventory Service; C:\Program Files (x86)\OCS Inventory Agent\OcsService.exe [786432 2017-10-30] (OCS Inventory NG) [Fichier non signé] S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1966408 2018-05-31] (Overwolf LTD) R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.) S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-11-14] (Hewlett-Packard) [Fichier non signé] R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [47096 2017-04-26] (Panda Security, S.L.) S3 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4451616 2018-04-12] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105344 2018-04-12] (Microsoft Corporation) R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [71272 2017-05-09] (Windscribe Limited) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-07-09] (Intel® Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 S2 NvStreamSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe" [X] R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bwcW10x64.sys [141896 2015-10-01] (Rivet Networks, LLC.) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-06-23] (Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-06-23] (Disc Soft Ltd) R3 Hamachi; C:\WINDOWS\System32\drivers\Hamdrv.sys [45680 2017-02-27] (LogMeIn Inc.) R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [350552 2015-09-24] (SafeNet Inc.) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [244744 2017-04-13] (Intel Corporation) R3 KillerEth; C:\WINDOWS\System32\drivers\e2xw10x64.sys [145920 2018-04-12] (Qualcomm Atheros, Inc.) R3 MEmuDrv; D:\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation) R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7689728 2018-04-12] (Intel Corporation) R1 NNSALPC; C:\WINDOWS\system32\DRIVERS\NNSALPC.sys [103856 2015-12-10] (Panda Security, S.L.) R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [210864 2015-12-10] (Panda Security, S.L.) R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [120240 2015-12-10] (Panda Security, S.L.) R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [120240 2015-12-10] (Panda Security, S.L.) R1 NNSNAHSL; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [58616 2015-06-19] (Panda Security, S.L.) R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [112560 2015-12-10] (Panda Security, S.L.) R1 NNSPIHSW; C:\WINDOWS\system32\DRIVERS\NNSPIHSW.sys [82864 2016-03-17] (Panda Security, S.L.) R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [133552 2015-12-10] (Panda Security, S.L.) R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [309680 2015-12-10] (Panda Security, S.L.) R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [179632 2016-02-18] (Panda Security, S.L.) R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [122800 2015-12-10] (Panda Security, S.L.) R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [267184 2016-02-18] (Panda Security, S.L.) R1 NNSTLSC; C:\WINDOWS\system32\DRIVERS\NNSTLSC.sys [115632 2015-12-10] (Panda Security, S.L.) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\SUPER CHARGER\NTIOLib_X64.sys [13368 2012-10-26] (MSI) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45cd741937df973e\nvlddmkm.sys [17195272 2018-06-02] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31016 2018-05-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [67432 2018-03-15] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [68112 2018-04-28] (NVIDIA Corporation) R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [174000 2016-08-09] (Panda Security, S.L.) R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [129456 2016-08-09] (Panda Security, S.L.) R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [207272 2016-08-09] (Panda Security, S.L.) R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [133544 2016-08-09] (Panda Security, S.L.) R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [146864 2016-08-09] (Panda Security, S.L.) R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [117168 2016-08-09] (Panda Security, S.L.) R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [72112 2016-08-10] (Panda Security, S.L.) R3 RfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\RfeCo10X64.sys [141480 2018-03-06] (Rivet Networks, LLC.) S3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [411712 2015-10-28] (Realsil Semiconductor Corporation) S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [33448 2015-10-28] (Synaptics Incorporated) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 2015-10-28] (Synaptics Incorporated) R3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2017-04-21] (The OpenVPN Project) S3 TesSafe; C:\WINDOWS\system32\TesSafe.sys [1007928 2017-06-17] (TENCENT) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Gaming Center\winio64.sys [15160 2010-06-07] () S3 xhunter1; C:\WINDOWS\xhunter1.sys [48656 2018-05-10] (Wellbia.com Co., Ltd.) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-06-10 16:58 - 2018-06-10 16:58 - 000030117 _____ C:\Users\Laval Emmanuel\Downloads\FRST.txt 2018-06-10 16:57 - 2018-06-10 16:58 - 000000000 ____D C:\FRST 2018-06-10 16:57 - 2018-06-10 16:57 - 002413056 _____ (Farbar) C:\Users\Laval Emmanuel\Downloads\FRST64.exe 2018-06-09 21:51 - 2018-06-09 21:51 - 000002688 _____ C:\Users\Laval Emmanuel\Desktop\malwarebytes.txt 2018-06-09 21:47 - 2018-06-09 21:47 - 000000643 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2018-06-09 21:47 - 2018-06-09 21:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2018-06-09 21:47 - 2018-06-09 21:47 - 000000000 ____D C:\ProgramData\Malwarebytes 2018-06-09 21:47 - 2018-05-24 06:55 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2018-06-09 21:46 - 2018-06-09 21:46 - 077309488 _____ (Malwarebytes ) C:\Users\Laval Emmanuel\Downloads\mb3-setup-consumer-3.5.1.2522-1.0.374-1.0.5402.exe 2018-06-09 19:16 - 2018-06-09 19:16 - 000001521 _____ C:\Users\Laval Emmanuel\Desktop\ZHPCleaner.txt 2018-06-09 19:08 - 2018-06-09 19:16 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\ZHP 2018-06-09 19:08 - 2018-06-09 19:08 - 003232128 _____ C:\Users\Laval Emmanuel\Downloads\ZHPCleaner (1).exe 2018-06-09 19:08 - 2018-06-09 19:08 - 000000894 _____ C:\Users\Laval Emmanuel\Desktop\ZHPCleaner.lnk 2018-06-09 18:48 - 2018-06-09 18:49 - 000000000 ____D C:\AdwCleaner 2018-06-09 18:48 - 2018-06-09 18:48 - 007372496 _____ (Malwarebytes) C:\Users\Laval Emmanuel\Downloads\adwcleaner_7.2.0.exe 2018-06-08 22:37 - 2018-06-08 22:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\7DaysToDie 2018-06-08 21:59 - 2018-06-08 21:59 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Contingent99 2018-06-08 21:45 - 2018-06-08 21:45 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2018-06-08 21:44 - 2018-06-08 21:44 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation 2018-06-08 21:42 - 2018-06-02 05:04 - 040346536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 035250624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 013727800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 011272944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 004349864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 003760392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 002014144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6439811.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 001563224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 001468272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6439811.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 001418664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 001216424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 001092360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 000627056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2018-06-08 21:42 - 2018-06-02 05:04 - 000518000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 031278400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 025991456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 017784624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 015195256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 001347696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 001157216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 001063224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 000904720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 000814432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2018-06-08 21:42 - 2018-06-02 05:03 - 000652352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2018-06-08 21:34 - 2018-06-08 21:45 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2018-06-08 21:34 - 2018-06-08 21:34 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000004106 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003976 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003926 _____ C:\WINDOWS\System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-06-08 21:34 - 2018-06-08 21:34 - 000001453 _____ C:\Users\Public\Desktop\GeForce Experience.lnk 2018-06-08 21:34 - 2018-06-08 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2018-06-08 21:34 - 2018-05-20 19:33 - 002496296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2018-06-08 21:34 - 2018-05-20 19:33 - 002164008 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2018-06-08 21:34 - 2018-05-20 19:33 - 001312040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll 2018-06-08 21:34 - 2018-05-20 17:30 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat 2018-06-08 21:34 - 2018-04-28 02:25 - 000068112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2018-06-07 01:45 - 2018-06-07 01:45 - 000001932 _____ C:\Users\Laval Emmanuel\Downloads\countclick.php 2018-06-06 17:57 - 2018-06-06 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2018-06-06 17:57 - 2018-06-06 17:57 - 000000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2018-06-05 00:11 - 2018-06-09 23:13 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\D3DSCache 2018-06-04 20:59 - 2018-06-04 20:59 - 000001584 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AION Free-to-Play.lnk 2018-06-04 20:59 - 2018-06-04 20:59 - 000001572 _____ C:\Users\Public\Desktop\AION Free-to-Play.lnk 2018-06-04 20:59 - 2018-06-04 20:59 - 000000000 ____D C:\Program Files (x86)\Gameforge 2018-06-03 17:27 - 2018-06-03 17:27 - 000129045 _____ C:\Users\Laval Emmanuel\Downloads\soirée élèves 2018.pdf 2018-05-30 00:21 - 2018-05-30 00:21 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Agony 2018-05-29 18:36 - 2018-05-29 18:36 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\11BitStudios 2018-05-29 17:06 - 2018-05-29 17:06 - 000113827 _____ C:\Users\Laval Emmanuel\Downloads\cp-130425-MedicamentsSurveillanceRenforcee.pdf 2018-05-29 17:00 - 2018-05-29 17:00 - 000056157 _____ C:\Users\Laval Emmanuel\Downloads\Courrier_medoc_surveillance.pdf 2018-05-29 16:55 - 2018-05-29 16:55 - 000059510 _____ C:\Users\Laval Emmanuel\Downloads\CP-MédicamentsSurveillance.pdf 2018-05-27 23:25 - 2018-05-27 23:25 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Catmaze 2018-05-24 23:37 - 2018-05-24 23:37 - 005469281 _____ C:\Users\Laval Emmanuel\Downloads\e62.pptx 2018-05-24 16:36 - 2018-05-24 16:36 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Redbeet Interactive 2018-05-23 21:00 - 2018-05-23 21:00 - 000000000 ____D C:\Users\Laval Emmanuel\Documents\Elder Scrolls Online 2018-05-23 21:00 - 2018-05-23 21:00 - 000000000 ____D C:\ProgramData\Elder Scrolls Online 2018-05-23 18:02 - 2018-05-23 18:02 - 000000724 _____ C:\Users\Laval Emmanuel\Desktop\The Elder Scrolls Online .lnk 2018-05-23 18:02 - 2018-05-23 18:02 - 000000000 ___HD C:\Program Files (x86)\Zero G Registry 2018-05-23 18:02 - 2018-05-23 18:02 - 000000000 ____D C:\WINDOWS\jre 2018-05-23 18:02 - 2018-05-23 18:02 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online 2018-05-23 17:57 - 2018-05-23 17:57 - 000000000 ___HD C:\Users\Laval Emmanuel\InstallAnywhere 2018-05-22 15:12 - 2018-05-22 15:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\RivetNetworks 2018-05-22 15:12 - 2018-05-22 15:12 - 000000000 ____D C:\ProgramData\RivetNetworks 2018-05-22 15:11 - 2018-05-22 15:11 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2018-05-22 15:10 - 2018-06-09 18:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-05-22 15:10 - 2018-06-07 21:27 - 000004754 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier 2018-05-22 15:10 - 2018-06-07 21:27 - 000004558 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2018-05-22 15:10 - 2018-05-22 15:10 - 000003516 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2018-05-22 15:10 - 2018-05-22 15:10 - 000003482 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2018-05-22 15:10 - 2018-05-22 15:10 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2018-05-22 15:10 - 2018-05-22 15:10 - 000003244 _____ C:\WINDOWS\System32\Tasks\Overwolf Updater Task 2018-05-22 15:10 - 2018-05-22 15:10 - 000003114 _____ C:\WINDOWS\System32\Tasks\MSI_Help_Desk_Agent 2018-05-22 15:10 - 2018-05-22 15:10 - 000002764 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MSI-Laval Emmanuel 2018-05-22 15:10 - 2018-05-22 15:10 - 000002706 _____ C:\WINDOWS\System32\Tasks\HPCustParticipation HP Officejet 4630 series 2018-05-22 15:10 - 2018-05-22 15:10 - 000002556 _____ C:\WINDOWS\System32\Tasks\WinZip Update Notifier 2018-05-22 15:10 - 2018-05-22 15:10 - 000002502 _____ C:\WINDOWS\System32\Tasks\MSI_Dragon Gaming Center 2018-05-22 15:10 - 2018-05-22 15:10 - 000002396 _____ C:\WINDOWS\System32\Tasks\Nahimic2UILauncherRun 2018-05-22 15:10 - 2018-05-22 15:10 - 000002384 _____ C:\WINDOWS\System32\Tasks\Nahimic2Svc64Run 2018-05-22 15:10 - 2018-05-22 15:10 - 000002376 _____ C:\WINDOWS\System32\Tasks\Nahimic2Svc32Run 2018-05-22 15:10 - 2018-05-22 15:10 - 000002242 _____ C:\WINDOWS\System32\Tasks\Synaptics TouchPad Enhancements 2018-05-22 15:10 - 2018-05-22 15:10 - 000002218 _____ C:\WINDOWS\System32\Tasks\PDVDServ12 Task 2018-05-22 15:10 - 2018-05-22 15:10 - 000002216 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2018-05-22 15:10 - 2018-05-22 15:10 - 000000020 ___SH C:\Users\Laval Emmanuel\ntuser.ini 2018-05-22 15:10 - 2018-05-22 15:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2018-05-22 15:09 - 2018-05-22 15:10 - 000007623 _____ C:\WINDOWS\diagwrn.xml 2018-05-22 15:09 - 2018-05-22 15:10 - 000007623 _____ C:\WINDOWS\diagerr.xml 2018-05-22 15:06 - 2018-06-09 18:56 - 002380820 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-05-22 15:03 - 2018-05-22 15:03 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2018-05-22 15:01 - 2018-06-09 03:01 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\LogMeIn Hamachi 2018-05-22 15:01 - 2018-05-23 18:02 - 000000000 ____D C:\Users\Laval Emmanuel 2018-05-22 15:01 - 2018-05-22 15:14 - 000002444 _____ C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Voisinage réseau 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Voisinage d'impression 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Modèles 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Mes documents 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Menu Démarrer 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Documents\Mes vidéos 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Documents\Mes images 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\Documents\Ma musique 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 _SHDL C:\Users\Laval Emmanuel\AppData\Local\Historique 2018-05-22 15:01 - 2018-05-22 15:01 - 000000000 ____D C:\ProgramData\USOShared 2018-05-22 15:01 - 2018-01-10 11:42 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Macromedia 2018-05-22 15:01 - 2017-07-13 15:24 - 000000153 _____ C:\Users\Laval Emmanuel\BullseyeCoverageError.txt 2018-05-22 14:59 - 2018-06-02 05:05 - 000552200 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2018-05-22 14:59 - 2018-06-02 05:05 - 000457256 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2018-05-22 14:59 - 2018-04-12 01:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2018-05-22 14:58 - 2018-06-09 19:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-05-22 14:58 - 2018-06-09 18:50 - 005083944 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-05-21 23:11 - 2018-05-22 15:58 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate 2018-05-21 23:05 - 2018-05-21 23:11 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2018-05-21 23:00 - 2018-05-21 23:00 - 025848832 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 023862272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 022707712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 022002688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 020383720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 019399168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 012712960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 007583232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 006569952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 005782528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 002900992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 002242208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 001636352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 001454016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000786168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx 2018-05-21 23:00 - 2018-05-21 23:00 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000559968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-05-21 23:00 - 2018-05-21 23:00 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2018-05-21 22:59 - 2018-05-21 23:00 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 009159064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 007519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 007436624 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 003732800 _____ C:\WINDOWS\system32\Windows.Mirage.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 003655168 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 003440640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 003389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 003283400 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 002897408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 002835864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 002753040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 002700800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 002486976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 002422168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 002170368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001664512 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001634800 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001456616 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-05-21 22:59 - 2018-05-21 22:59 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001258280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 001191168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001174424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 001063320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2018-05-21 22:59 - 2018-05-21 22:59 - 001034624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000885848 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000733992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000709816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx 2018-05-21 22:59 - 2018-05-21 22:59 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000624128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000567136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2018-05-21 22:59 - 2018-05-21 22:59 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000272288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000269216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000170904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-05-21 22:59 - 2018-05-21 22:59 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000134552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2018-05-21 22:59 - 2018-05-21 22:59 - 000001312 _____ C:\WINDOWS\system32\tcbres.wim 2018-05-21 22:51 - 2018-06-09 18:56 - 000477760 _____ C:\WINDOWS\system32\perfh011.dat 2018-05-21 22:51 - 2018-06-09 18:56 - 000132870 _____ C:\WINDOWS\system32\perfc011.dat 2018-05-21 22:51 - 2018-05-21 22:51 - 000000000 ____D C:\WINDOWS\SysWOW64\ja 2018-05-21 22:51 - 2018-05-21 22:51 - 000000000 ____D C:\WINDOWS\system32\ja 2018-05-21 22:51 - 2018-05-21 22:50 - 000144624 _____ C:\WINDOWS\system32\perfi011.dat 2018-05-21 22:51 - 2018-05-21 22:50 - 000033402 _____ C:\WINDOWS\system32\perfd011.dat 2018-05-21 22:14 - 2018-05-21 22:14 - 007702016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Models0011.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 007406080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Data0011.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 007242240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NL7Data0011.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 006350848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 005487616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 002454528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NL7Lexicons0011.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 000712704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSWB70011.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSWB70011.dll 2018-05-21 22:14 - 2018-05-21 22:14 - 000002060 _____ C:\WINDOWS\system32\noise.jpn 2018-05-21 22:13 - 2018-05-21 22:13 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2018-05-21 22:13 - 2018-05-21 22:13 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2018-05-21 22:13 - 2018-05-21 22:13 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll 2018-05-21 22:13 - 2018-05-21 22:13 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll 2018-05-21 22:13 - 2018-05-21 22:13 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll 2018-05-21 22:13 - 2018-05-21 22:13 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll 2018-05-21 22:13 - 2018-05-21 22:13 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml 2018-05-21 22:13 - 2018-05-21 22:13 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml 2018-05-21 22:12 - 2018-05-22 15:58 - 000000000 ____D C:\Program Files (x86)\MSBuild 2018-05-21 22:12 - 2018-05-21 23:13 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2018-05-21 22:12 - 2018-05-21 22:12 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2018-05-21 22:12 - 2018-05-21 22:12 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2018-05-21 22:12 - 2018-05-21 22:12 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2018-05-21 22:12 - 2018-05-21 22:12 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2018-05-21 22:12 - 2018-05-21 22:12 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2018-05-21 22:12 - 2018-05-21 22:12 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2018-05-21 22:12 - 2018-05-21 22:12 - 000000000 ____D C:\Program Files\Reference Assemblies 2018-05-21 22:12 - 2018-05-21 22:12 - 000000000 ____D C:\Program Files\MSBuild 2018-05-21 22:12 - 2018-05-21 22:12 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2018-05-21 21:54 - 2018-05-21 21:54 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2018-05-21 21:06 - 2018-05-22 15:10 - 000000000 ___DC C:\WINDOWS\Panther 2018-05-21 19:47 - 2018-05-21 19:47 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\PlayfulCorp 2018-05-21 15:32 - 2018-06-04 14:57 - 000000730 _____ C:\Users\Laval Emmanuel\Desktop\Nouveau document texte.txt 2018-05-21 14:32 - 2018-05-21 14:32 - 000589573 _____ C:\Users\Laval Emmanuel\Downloads\mode-d-emploi_Forum alternance2018.pdf 2018-05-18 23:38 - 2018-05-18 23:38 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Lince Works 2018-05-17 18:44 - 2018-05-17 18:44 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\OnSkull Games 2018-05-17 18:31 - 2018-05-17 18:31 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\synthexyze 2018-05-17 11:17 - 2018-05-17 11:17 - 020672942 _____ C:\Users\Laval Emmanuel\Downloads\BTSSIO_Analyse-economique-juridique-et-manageriale-des-services-informatiques_2015.pdf 2018-05-16 11:55 - 2018-05-16 11:55 - 000030720 _____ C:\Users\Laval Emmanuel\Downloads\laval.emmanuel.e6synthese.xls 2018-05-16 11:27 - 2018-05-16 11:27 - 000053248 _____ C:\Users\Laval Emmanuel\Downloads\bts_sio_e6_tableau_synthese_2016..xls 2018-05-16 11:15 - 2018-05-16 11:15 - 000000000 ____D C:\Users\Public\Documents\Hewlett-Packard 2018-05-16 11:13 - 2018-05-16 11:13 - 000000000 ____D C:\ProgramData\Hewlett-Packard 2018-05-16 11:13 - 2018-05-16 11:13 - 000000000 _____ C:\WINDOWS\HPMProp.INI 2018-05-16 11:13 - 2013-12-04 00:14 - 000601376 _____ (HP) C:\WINDOWS\SysWOW64\hpcdmc32.dll 2018-05-16 11:13 - 2013-12-04 00:14 - 000237344 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\hpmlm135.dll 2018-05-16 11:13 - 2013-12-04 00:13 - 000217376 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmml160.dll 2018-05-16 11:13 - 2013-12-04 00:13 - 000189728 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmpm081.dll 2018-05-16 11:13 - 2013-12-04 00:13 - 000162080 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmtp160.dll 2018-05-16 11:13 - 2013-12-04 00:13 - 000074016 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmpw081.dll 2018-05-16 11:13 - 2013-12-04 00:12 - 000199968 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpmja160.dll 2018-05-16 11:13 - 2013-12-04 00:11 - 000447264 _____ (Hewlett-Packard Corporation) C:\WINDOWS\system32\hpcpn160.dll 2018-05-16 11:13 - 2013-12-04 00:11 - 000140064 _____ (Hewlett-Packard) C:\WINDOWS\system32\hpcjpm.dll 2018-05-16 11:13 - 2013-12-04 00:07 - 000446240 _____ (Hewlett Packard Corporation) C:\WINDOWS\SysWOW64\hpcc3160.dll 2018-05-16 11:13 - 2011-02-11 14:23 - 000193592 _____ (Hewlett-Packard) C:\WINDOWS\system32\hppdcompio.dll 2018-05-16 11:13 - 2011-02-11 14:23 - 000167480 _____ (Hewlett-Packard) C:\WINDOWS\SysWOW64\hppccompio.dll 2018-05-16 11:13 - 2009-02-25 16:32 - 000060440 _____ (Hewlett-Packard) C:\WINDOWS\system32\FxCompChannel_x64.dll 2018-05-14 17:23 - 2018-05-22 15:03 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twitch Games 2018-05-14 17:21 - 2018-05-14 17:21 - 000000000 ____D C:\ProgramData\Twitch 2018-05-12 01:23 - 2018-05-12 01:23 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\RiverGame 2018-05-11 14:35 - 2018-05-11 14:35 - 000589285 _____ C:\Users\Laval Emmanuel\Downloads\edc14md.zip 2018-05-11 14:21 - 2018-05-11 14:21 - 000522692 _____ C:\Users\Laval Emmanuel\Downloads\edc16md (1).zip ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-06-10 16:43 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-06-10 15:15 - 2017-08-31 21:52 - 000000000 ____D C:\ProgramData\NVIDIA 2018-06-10 15:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-06-10 15:12 - 2017-05-04 17:26 - 000000000 __SHD C:\Users\Laval Emmanuel\IntelGraphicsProfiles 2018-06-10 02:00 - 2017-06-06 17:55 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Adobe 2018-06-09 22:16 - 2017-05-04 18:52 - 000000000 ____D C:\Program Files (x86)\Steam 2018-06-09 19:08 - 2018-04-30 13:45 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\ZHP 2018-06-09 18:59 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps 2018-06-09 18:56 - 2018-04-12 18:18 - 000792066 _____ C:\WINDOWS\system32\perfh00C.dat 2018-06-09 18:56 - 2018-04-12 18:18 - 000150060 _____ C:\WINDOWS\system32\perfc00C.dat 2018-06-09 18:56 - 2018-04-12 01:36 - 000000000 ____D C:\WINDOWS\INF 2018-06-09 18:50 - 2018-04-11 23:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-06-09 18:50 - 2017-09-11 17:28 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios 2018-06-09 18:50 - 2017-06-21 16:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-06-09 18:50 - 2017-06-21 16:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2018-06-09 18:49 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Registration 2018-06-09 15:57 - 2017-05-04 17:26 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\NVIDIA Corporation 2018-06-09 15:56 - 2017-12-14 18:35 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent 2018-06-09 15:55 - 2017-05-30 14:26 - 000000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi 2018-06-09 15:55 - 2017-05-30 14:26 - 000000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi 2018-06-08 23:54 - 2017-05-08 20:06 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\SmartSteamEmu 2018-06-08 23:33 - 2017-06-21 16:02 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\LocalLow\Mozilla 2018-06-08 23:31 - 2018-02-22 20:30 - 000000001 _____ C:\Users\Public\Documents\dgc.txt 2018-06-08 23:28 - 2017-06-21 16:02 - 000001238 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2018-06-08 22:37 - 2017-08-23 01:11 - 000000000 ____D C:\Users\Laval Emmanuel\ansel 2018-06-08 22:01 - 2017-08-31 21:52 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2018-06-08 21:45 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2018-06-08 21:45 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2018-06-08 21:45 - 2017-05-05 21:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\NVIDIA 2018-06-08 21:34 - 2017-05-04 17:26 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\NVIDIA 2018-06-07 21:50 - 2018-04-12 01:30 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-06-07 21:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2018-06-07 21:27 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Macromed 2018-06-06 01:29 - 2018-04-12 01:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-06-06 01:29 - 2018-04-12 01:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-06-04 21:37 - 2017-05-05 21:37 - 000000000 ____D C:\Program Files (x86)\Overwolf 2018-06-04 20:59 - 2017-05-04 17:39 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Skype 2018-06-04 14:58 - 2018-04-16 21:42 - 000015913 _____ C:\Users\Laval Emmanuel\Desktop\Lettre motivation alternance.odt 2018-06-04 14:22 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2018-06-02 05:03 - 2017-06-26 08:54 - 004855032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2018-06-02 05:03 - 2017-06-26 08:54 - 004125056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2018-06-01 12:16 - 2017-06-26 05:42 - 000044277 _____ C:\WINDOWS\system32\nvinfo.pb 2018-06-01 10:39 - 2017-08-31 21:52 - 005947976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2018-06-01 10:39 - 2017-08-31 21:52 - 002612352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2018-06-01 10:39 - 2017-08-31 21:52 - 001767552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2018-06-01 10:39 - 2017-08-31 21:52 - 000634152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2018-06-01 10:39 - 2017-08-31 21:52 - 000450856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2018-06-01 10:39 - 2017-08-31 21:52 - 000124304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2018-06-01 10:39 - 2017-08-31 21:52 - 000083528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2018-05-31 13:21 - 2017-05-04 22:43 - 000000000 ____D C:\Users\Laval Emmanuel\Documents\Jeux 2018-05-31 11:44 - 2017-08-31 21:52 - 008193252 _____ C:\WINDOWS\system32\nvcoproc.bin 2018-05-30 00:21 - 2017-05-14 15:18 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\UnrealEngine 2018-05-29 15:42 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2018-05-24 23:11 - 2017-05-05 21:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\TS3Client 2018-05-24 19:44 - 2017-08-31 21:52 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2018-05-24 16:36 - 2018-03-11 22:34 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\CreamAPI 2018-05-23 17:12 - 2018-02-14 19:04 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\PlaceholderTileLogoFolder 2018-05-23 03:23 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\appcompat 2018-05-22 21:35 - 2017-10-20 19:41 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\Packages 2018-05-22 19:35 - 2017-07-28 01:25 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\discord 2018-05-22 15:58 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN 2018-05-22 15:58 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\WCN 2018-05-22 15:58 - 2018-04-12 01:41 - 000000000 ____D C:\WINDOWS\Setup 2018-05-22 15:58 - 2018-04-12 01:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\spool 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\oobe 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\NDF 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\IME 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Help 2018-05-22 15:58 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2018-05-22 15:58 - 2018-02-10 17:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dying Light [GOG.com] 2018-05-22 15:58 - 2018-02-05 15:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nahimic 2+ Audio Driver 2018-05-22 15:58 - 2018-01-16 23:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.6.3p1 (32-bit) 2018-05-22 15:58 - 2018-01-16 22:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 2017.3.0f3 (64-bit) 2018-05-22 15:58 - 2017-12-31 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2017 Tools for Unity 2018-05-22 15:58 - 2017-12-31 15:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.6.3p1 (64-bit) 2018-05-22 15:58 - 2017-11-21 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2018-05-22 15:58 - 2017-11-15 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP 2018-05-22 15:58 - 2017-11-09 12:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git 2018-05-22 15:58 - 2017-10-18 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe 2018-05-22 15:58 - 2017-10-17 13:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Global Protection 2018-05-22 15:58 - 2017-10-10 14:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom 2018-05-22 15:58 - 2017-10-05 17:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2 2018-05-22 15:58 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2018-05-22 15:58 - 2017-09-23 14:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Divinity - Original Sin 2 [GOG.com] 2018-05-22 15:58 - 2017-09-21 14:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2018-05-22 15:58 - 2017-09-12 01:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tekken 7 2018-05-22 15:58 - 2017-09-11 17:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2018-05-22 15:58 - 2017-09-09 01:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightning Warrior Raidy 2018-05-22 15:58 - 2017-09-06 00:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft 2018-05-22 15:58 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\Intel 2018-05-22 15:58 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files (x86)\Intel 2018-05-22 15:58 - 2017-08-29 16:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Darkwood [GOG.com] 2018-05-22 15:58 - 2017-08-22 21:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert Online 2018-05-22 15:58 - 2017-08-17 03:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.7 2018-05-22 15:58 - 2017-08-17 03:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMouseAutoClicker 2018-05-22 15:58 - 2017-08-03 22:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaDownloader 2018-05-22 15:58 - 2017-07-17 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager 2018-05-22 15:58 - 2017-07-07 20:57 - 000000000 ____D C:\Program Files\UNP 2018-05-22 15:58 - 2017-06-27 10:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2018-05-22 15:58 - 2017-06-21 12:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 21.5 2018-05-22 15:58 - 2017-06-07 10:19 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2018-05-22 15:58 - 2017-05-11 12:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win'Design 2018-05-22 15:58 - 2017-05-11 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0 2018-05-22 15:58 - 2017-05-08 15:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans 2018-05-22 15:58 - 2017-05-08 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2018-05-22 15:58 - 2017-05-08 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2018-05-22 15:58 - 2017-05-07 12:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2018-05-22 15:58 - 2017-05-06 20:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2018-05-22 15:58 - 2017-05-06 02:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2018-05-22 15:58 - 2017-05-04 22:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock 2018-05-22 15:58 - 2017-05-04 22:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2018-05-22 15:58 - 2017-05-04 18:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam 2018-05-22 15:58 - 2015-11-03 03:45 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 12 2018-05-22 15:58 - 2015-11-03 03:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnRecovery 2018-05-22 15:58 - 2015-11-03 03:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI 2018-05-22 15:58 - 2015-11-03 03:18 - 000000000 ___HD C:\WINDOWS\system32\WLANProfiles 2018-05-22 15:58 - 2015-11-03 03:13 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2018-05-22 15:58 - 2015-11-03 03:10 - 000000000 ____D C:\WINDOWS\SysWOW64\sda 2018-05-22 15:50 - 2017-05-09 10:09 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\ConnectedDevicesPlatform 2018-05-22 15:14 - 2017-05-04 17:30 - 000000000 ___RD C:\Users\Laval Emmanuel\OneDrive 2018-05-22 15:10 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\windows nt 2018-05-22 15:10 - 2017-10-20 20:01 - 000000000 ___RD C:\Users\Laval Emmanuel\3D Objects 2018-05-22 15:10 - 2016-11-21 08:40 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-05-22 15:06 - 2018-04-30 16:01 - 000002309 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-05-22 15:06 - 2018-04-12 01:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2018-05-22 15:06 - 2017-05-09 09:53 - 000023208 _____ C:\WINDOWS\system32\emptyregdb.dat 2018-05-22 15:06 - 2015-11-03 03:13 - 002375792 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2018-05-22 15:03 - 2017-10-07 18:00 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEmu 2018-05-22 15:03 - 2017-08-02 23:58 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync 2018-05-22 15:03 - 2017-06-06 16:42 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 2018-05-22 15:03 - 2017-05-30 20:19 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTP Expert 3 2018-05-22 15:03 - 2017-05-05 21:37 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2018-05-22 15:03 - 2017-05-05 16:31 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.6 2018-05-22 15:03 - 2017-05-04 22:27 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2018-05-22 15:02 - 2018-01-01 22:00 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender 2018-05-22 15:02 - 2017-07-28 01:25 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc 2018-05-22 15:02 - 2017-05-12 12:48 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pichat 2018-05-22 15:01 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\USOPrivate 2018-05-22 14:59 - 2017-08-31 21:52 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2018-05-22 14:59 - 2017-08-31 21:52 - 000000000 ____D C:\WINDOWS\system32\DAX3 2018-05-22 14:59 - 2017-08-31 21:52 - 000000000 ____D C:\WINDOWS\system32\DAX2 2018-05-22 14:59 - 2017-05-09 09:46 - 000000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2018-05-21 23:22 - 2018-04-12 01:38 - 000000000 __RHD C:\Users\Public\Libraries 2018-05-21 23:13 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm 2018-05-21 23:13 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr 2018-05-21 23:13 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE 2018-05-21 23:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2018-05-21 23:12 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\winrm 2018-05-21 23:12 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\slmgr 2018-05-21 23:12 - 2018-04-12 18:18 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\F12 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\dsc 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\MUI 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2018-05-21 23:12 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\et-EE 2018-05-21 23:12 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\Dism 2018-05-21 23:11 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\OCR 2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Common Files\system 2018-05-21 23:11 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2018-05-21 23:11 - 2017-12-31 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017 2018-05-21 23:11 - 2017-08-31 21:52 - 000000000 ____D C:\ProgramData\Synaptics 2018-05-21 23:11 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\Synaptics 2018-05-21 23:11 - 2017-08-31 21:52 - 000000000 ____D C:\Program Files\Realtek 2018-05-21 23:11 - 2017-07-19 21:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hammerwatch [GOG.com] 2018-05-21 23:11 - 2017-07-09 20:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com 2018-05-21 23:11 - 2017-05-25 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lovers in a Dangerous Spacetime [GOG.com] 2018-05-21 23:11 - 2017-05-14 19:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCSOFT 2018-05-21 23:11 - 2017-05-14 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCWest 2018-05-21 23:11 - 2015-11-03 03:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking 2018-05-21 23:07 - 2017-05-21 18:21 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\ElevatedDiagnostics 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\zu-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\yo-NG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\xh-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\wo-SN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\vi-VN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ur-PK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ug-CN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tt-RU 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tn-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tk-TM 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ti-ET 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\te-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sw-KE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sq-AL 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\rw-RW 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\quz-PE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\prs-AF 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\pa-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\or-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\nso-ZA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\nn-NO 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ne-NP 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mt-MT 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mr-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mn-MN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ml-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mk-MK 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\mi-NZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\lo-LA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\lb-LU 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ky-KG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\kok-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\kn-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\km-KH 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\kk-KZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ka-GE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\is-IS 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ig-NG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\id-ID 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\hy-AM 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\gu-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\gd-GB 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ga-IE 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\fil-PH 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\fa-IR 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\cy-GB 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\bn-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\bn-BD 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\be-BY 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\as-IN 2018-05-21 23:01 - 2018-04-12 18:22 - 000000000 ____D C:\WINDOWS\system32\af-ZA 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\TextInput 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\ta-in 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\si-lk 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\setup 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\appraiser 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\am-et 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\Provisioning 2018-05-21 23:01 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\bcastdvr 2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\com 2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\migwiz 2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\com 2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files\Windows Defender 2018-05-21 22:51 - 2018-04-12 01:38 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2018-05-21 22:51 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2018-05-21 22:51 - 2018-04-11 23:04 - 000000000 ____D C:\WINDOWS\servicing 2018-05-21 22:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\en-GB 2018-05-21 22:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX 2018-05-21 22:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB 2018-05-21 22:13 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\es-MX 2018-05-21 14:40 - 2018-04-12 13:14 - 000041230 _____ C:\Users\Laval Emmanuel\Desktop\CV_emmanuel_laval.pdf 2018-05-21 13:41 - 2017-05-05 12:48 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\CrashDumps 2018-05-17 18:08 - 2017-08-22 21:50 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Local\BlackDesertOnline 2018-05-16 11:24 - 2017-09-21 14:32 - 000000000 ____D C:\Program Files\Microsoft Office 15 2018-05-14 20:00 - 2017-09-08 14:27 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-05-14 17:21 - 2017-09-12 21:10 - 000000000 ____D C:\Users\Laval Emmanuel\AppData\Roaming\Twitch ==================== Fichiers à la racine de certains dossiers ======= 2017-05-31 21:23 - 2017-06-17 14:15 - 000000204 _____ () C:\ProgramData\DP0004.dat 2017-11-07 01:06 - 2018-02-09 20:28 - 000000096 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\LauncherSettings_live.cfg 2017-05-30 20:20 - 2018-01-12 12:05 - 000012288 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\Settings.cfg 2017-11-07 00:47 - 2017-11-07 23:58 - 000011613 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\TheHunterSettings_live.bin 2017-11-07 00:39 - 2017-11-07 00:48 - 000000042 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\TheHunterSettings_steam_live.cfg 2017-05-09 10:41 - 2017-05-09 18:09 - 000000600 _____ () C:\Users\Laval Emmanuel\AppData\Roaming\winscp.rnd Certains fichiers dans TEMP: ==================== 2018-06-04 20:58 - 2018-06-04 20:58 - 058834376 _____ (Skype Technologies S.A.) C:\Users\Laval Emmanuel\AppData\Local\Temp\SkypeSetup.exe ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2018-05-22 14:58 ==================== Fin de FRST.txt ============================ Addition.txt Link to post Share on other sites More sharing options...
nasdaq Posted June 10, 2018 ID:1249269 Share Posted June 10, 2018 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Your logs are clean of malware. ATTENTION: System Restore is disabled Turn System Restore On for Drives in Windows 10http://www.tenforums.com/tutorials/4533-system-protection-turn-off-drives-windows-10-a.html === ==================== MSCONFIG/TASK MANAGER éléments désactivés == HKU\S-1-5-21-1206140665-71179153-3832734882-1001\...\StartupApproved\Run: => "Discord" Check the status of Discord. If disabled change it to enabled. === Check the integrity of the operating system files. How to run sfc /Scannowhttp://support.microsoft.com/kb/929833 When completed refer to the Microsoft article again and follow the instructions to view details of the System File Checker process Post the contents of the sfcdetails.txt file for my review. Let me know if the problem persists. <<<>> Link to post Share on other sites More sharing options...
Manuu Posted June 10, 2018 Author ID:1249276 Share Posted June 10, 2018 Ok i did what you said and attached the sfcdetails.txt file. I really don't know where this can come from, maybe i'll try to stop using discord and see. I'll let you know if the problem persists. At least i have no malwares ! Thanks for the help sfcdetails.txt Link to post Share on other sites More sharing options...
Manuu Posted June 10, 2018 Author ID:1249298 Share Posted June 10, 2018 Well problem still here, i dont know what to do Link to post Share on other sites More sharing options...
nasdaq Posted June 11, 2018 ID:1249412 Share Posted June 11, 2018 Hi, --RogueKiller-- Download & SAVE to your Desktop Download RogueKiller Quit all programs that you may have started. Please disconnect any USB or external drives from the computer before you run this scan! For Vista or above, right-click the program file and select "Run as Administrator" Accept the user agreements. Execute the scan and wait until it has finished. If a Windows opens to explain what [PUM's] are, read about it. Click the RoguKiller icon on your taksbar to return to the report. Click open the Report Click Export TXT button Save the file as ReportRogue.txt Click the Remove button to delete the items in RED Click Finish and close the program. Locate the ReportRogue.txt file on your Desktop and copy/paste the contents in your next. If nothing is found then I suggest you reinstall discordhttps://discordapp.com/ Keep me posted. Link to post Share on other sites More sharing options...
Manuu Posted June 11, 2018 Author ID:1249434 Share Posted June 11, 2018 Hi, Here's what rogue killer found : RogueKiller V12.12.21.0 (x64) [Jun 11 2018] (Gratuit) par Adlice Software email : http://www.adlice.com/fr/contact/ Remontées : https://forum.adlice.com Site web : http://www.adlice.com/fr/download/roguekiller/ Blog : http://www.adlice.com/fr/ Système d'exploitation : Windows 10 (10.0.17134) 64 bits version Démarré en : Mode normal Utilisateur : Laval Emmanuel [Administrateur] Démarré depuis : C:\Program Files\RogueKiller\RogueKiller64.exe Mode : Scan -- Date : 06/11/2018 16:21:41 (Durée : 00:41:38) Commutateurs : -refid ¤¤¤ Processus : 0 ¤¤¤ ¤¤¤ Registre : 6 ¤¤¤ [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1206140665-71179153-3832734882-1001\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://oem15.msn.com/?pc=NMTE -> Trouvé(e) [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{be37cd19-5afc-4edb-ace2-f2e63f588c88} | DhcpNameServer : 10.110.232.1 ([X]) -> Trouvé(e) [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{f0193d4e-2215-4793-b76e-4d83175453da} | DhcpNameServer : 10.187.88.5 10.187.88.10 8.8.8.8 ([X][X][-]) -> Trouvé(e) ¤¤¤ Tâches : 0 ¤¤¤ ¤¤¤ Fichiers : 4 ¤¤¤ [PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.4.5_41073\utorrentie.exe -> Trouvé(e) [PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.5.0_44294\utorrentie.exe -> Trouvé(e) [PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe -> Trouvé(e) [PUP.uTorrentAds][Fichier] C:\Users\Laval Emmanuel\AppData\Roaming\uTorrent\updates\3.5.3_44358\utorrentie.exe -> Trouvé(e) ¤¤¤ WMI : 0 ¤¤¤ ¤¤¤ Fichier Hosts : 0 ¤¤¤ ¤¤¤ Antirootkit : 0 (Driver: Chargé) ¤¤¤ ¤¤¤ Navigateurs web : 2 ¤¤¤ [PUM.SearchEngine][Firefox:Config] 50juu56a.default : user_pref("browser.search.selectedEngine", "Bing®"); -> Trouvé(e) [PUM.SearchEngine][Firefox:Config] 50juu56a.default : user_pref("browser.search.defaultenginename", "Bing®"); -> Trouvé(e) ¤¤¤ Vérification MBR : ¤¤¤ +++++ PhysicalDrive0: TOSHIBA THNSNJ128G8NY +++++ --- User --- [MBR] 33dd326ab464b93921b1e02f46510452 [BSP] 067d5e99a1f678f21c9156d9d545f1db : Empty MBR Code Partition table: 0 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2048 | Size: 300 MB 1 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 616448 | Size: 128 MB 2 - Basic data partition | Offset (sectors): 878592 | Size: 120704 MB 3 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 248082432 | Size: 970 MB User = LL1 ... OK User = LL2 ... OK +++++ PhysicalDrive1: WDC WD10JPVX-22JC3T0 +++++ --- User --- [MBR] 2168f0293a5e25554cc34a01f530d157 [BSP] d76febb611d7da9b8b79dc7ec115891b : Empty MBR Code Partition table: 0 - Basic data partition | Offset (sectors): 2048 | Size: 933579 MB 1 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 1911971840 | Size: 20289 MB User = LL1 ... OK User = LL2 ... OK I don't know if this solved the problem, all the utorrent files has been deleted. If the problem persist, i'll let you know. Thanks again for the help Link to post Share on other sites More sharing options...
nasdaq Posted June 11, 2018 ID:1249476 Share Posted June 11, 2018 Hi, I suggest you reinstall discord. Link to post Share on other sites More sharing options...
Manuu Posted June 12, 2018 Author ID:1249640 Share Posted June 12, 2018 Hi again, It worked all yesterday night but it just happened again, this time i just opened a game that i play for a long time and i couldn't click anywhere, desktop or taskbar. I reinstalled discord and did a CCleaner registry cleanup I'm starting to think that's only my computer, but he's only 1 year old and never had any shock.. Link to post Share on other sites More sharing options...
nasdaq Posted June 12, 2018 ID:1249660 Share Posted June 12, 2018 Hi Try the game with discord disabled.https://support.discordapp.com/hc/en-us/articles/211339918-How-do-I-disable-auto-start-on-launch- Any change. Link to post Share on other sites More sharing options...
Manuu Posted June 12, 2018 Author ID:1249681 Share Posted June 12, 2018 The thing is it happens randomly, and discord wasn't even on, so i don't know, if that happens again until tomorrow, i'll let you know. ( Discord is disabled now ) Plus, if there's no more malwares, i don't wanna bother you more. Link to post Share on other sites More sharing options...
nasdaq Posted June 12, 2018 ID:1249700 Share Posted June 12, 2018 Keep me posted. Link to post Share on other sites More sharing options...
Manuu Posted June 13, 2018 Author ID:1249903 Share Posted June 13, 2018 Hi, Well happened again 3 times today, so i don't know. Last time i just left google chrome opened, and when i came back, impossible to use taskbar/desktop, but could continue to use chrome. Link to post Share on other sites More sharing options...
Manuu Posted June 13, 2018 Author ID:1249908 Share Posted June 13, 2018 Nvm i found out why. It's when i plug/unplug mouse or other usb on my computer. weirdly i can't use the window below the one i'm using when i do that. Link to post Share on other sites More sharing options...
nasdaq Posted June 14, 2018 ID:1250124 Share Posted June 14, 2018 Hi, Glad that all is well. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 27, 2018 Root Admin ID:1259255 Share Posted July 27, 2018 Since this issue is resolved the topic will now be closed to prevent others from posting here. If you need assistance please start your own new topic and someone will be happy to assist you. Thanks Link to post Share on other sites More sharing options...
Recommended Posts