adier Posted June 24, 2018 ID:1252320 Share Posted June 24, 2018 <p>The attached screenshot is my issue <a class="ipsAttachLink ipsAttachLink_image" href="//content.invisioncic.com/Mmalware/monthly_11_2012/post-102723-0-80700800-1353797591.jpg" rel="external nofollow"><img src="//content.invisioncic.com/Mmalware/monthly_11_2012/post-102723-0-80700800-1353797591.jpg" data-fileid="88536" class="ipsImage ipsImage_thumbnailed" alt="post-102723-0-80700800-1353797591.jpg"></a>.</p><p>No internet connection... Keep with me and I apologize for the excessively large screenshots.</p><p>The error message caught my attention, though right after this scan. I couldn't "analyze this" I got the 'No internet connection available' pop up.</p><p>I began searching my PC for issues to resolve another issue that brings up the same internet error. The game League of Legends. I came across this error about 2 weeks ago out of random. I hopped back on my PC after not using it for maybe a month solid (I was using my laptop). And I ended up uninstalling and attempting to reinstall the game. And everytime i try and reinstall the game (even after a fresh client download) I get a very similar No internet connection error. Downloaded OTL by OldTimer to your desktop: http://oldtimer.geekstogo.com/OTL.exe Downloaded Security Check Here I attach : the contents of OTL.txt; =================== OTL logfile created on: 2018-06-24 15:47:49 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\adier\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.17134.0) Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd 15,19 Gb Total Physical Memory | 12,74 Gb Available Physical Memory | 83,87% Memory free 25,19 Gb Paging File | 22,75 Gb Available in Paging File | 90,31% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 672,03 Gb Total Space | 248,48 Gb Free Space | 36,98% Space Free | Partition Type: NTFS Drive D: | 24,04 Gb Total Space | 15,23 Gb Free Space | 63,38% Space Free | Partition Type: NTFS Computer Name: CHLAHBI | User Name: reida | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - File not found -- PRC - [2018-06-24 14:23:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\adier\Downloads\OTL.exe PRC - [2018-06-06 14:33:28 | 001,194,512 | ---- | M] (Garmin Ltd. or its subsidiaries) -- C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe PRC - [2018-05-18 03:54:50 | 000,288,848 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe PRC - [2018-04-12 00:34:51 | 000,661,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fontdrvhost.exe PRC - [2017-11-23 02:33:30 | 001,484,296 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe PRC - [2017-07-27 06:29:24 | 000,082,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2017-07-19 22:17:18 | 000,374,968 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe PRC - [2016-03-03 03:59:34 | 002,021,056 | ---- | M] (Adobe Systems, Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe PRC - [2015-07-03 22:21:48 | 001,402,624 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe PRC - [2015-07-03 22:21:48 | 000,303,360 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe PRC - [2014-10-13 06:57:46 | 000,743,688 | ---- | M] (DEVGURU Co., LTD.) -- C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe PRC - [2014-04-30 16:00:36 | 000,277,360 | ---- | M] (arvato digital services llc) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe ========== Modules (No Company Name) ========== MOD - [2017-07-23 20:24:24 | 000,108,032 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_thread-vc140-mt-1_62.dll MOD - [2017-07-23 20:24:24 | 000,064,000 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_date_time-vc140-mt-1_62.dll MOD - [2017-07-23 20:24:24 | 000,044,032 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_chrono-vc140-mt-1_62.dll MOD - [2017-07-23 20:24:24 | 000,035,840 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_system-vc140-mt-1_62.dll ========== Services (SafeList) ========== SRV:64bit: - File not found [Auto | Running] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp) SRV:64bit: - [2018-06-10 16:45:32 | 001,456,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WpcDesktopMonSvc.dll -- (WpcMonSvc) SRV:64bit: - [2018-06-10 16:45:30 | 000,835,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc) SRV:64bit: - [2018-06-10 16:45:27 | 003,086,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack) SRV:64bit: - [2018-06-10 16:45:27 | 000,847,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:64bit: - [2018-06-08 19:43:05 | 001,364,992 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\bcastdvruserservice.dll -- (BcastDVRUserService) SRV:64bit: - [2018-06-08 17:06:33 | 000,976,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Spectrum.exe -- (spectrum) SRV:64bit: - [2018-06-08 10:29:32 | 004,970,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository) SRV:64bit: - [2018-06-08 10:29:15 | 000,885,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV:64bit: - [2018-06-08 10:00:02 | 000,149,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc) SRV:64bit: - [2018-06-08 09:59:09 | 003,392,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:64bit: - [2018-06-08 09:59:09 | 000,673,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer) SRV:64bit: - [2018-06-08 09:58:51 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\CapabilityAccessManager.dll -- (camsvc) SRV:64bit: - [2018-06-08 09:57:19 | 001,485,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\InstallService.dll -- (InstallService) SRV:64bit: - [2018-06-08 09:56:52 | 000,684,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:64bit: - [2018-06-08 09:56:46 | 001,395,200 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TokenBroker.dll -- (TokenBroker) SRV:64bit: - [2018-06-08 09:56:37 | 000,858,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc) SRV:64bit: - [2018-06-08 09:55:25 | 002,248,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:64bit: - [2018-06-08 09:55:13 | 001,371,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc) SRV:64bit: - [2018-06-08 09:55:04 | 000,667,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:64bit: - [2018-04-12 00:35:21 | 000,681,984 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo) SRV:64bit: - [2018-04-12 00:35:21 | 000,427,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService) SRV:64bit: - [2018-04-12 00:35:21 | 000,400,896 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Windows.Devices.Picker.dll -- (DevicePickerUserSvc) SRV:64bit: - [2018-04-12 00:34:44 | 001,359,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lpasvc.dll -- (wlpasvc) SRV:64bit: - [2018-04-12 00:34:43 | 000,950,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:64bit: - [2018-04-12 00:34:43 | 000,824,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NaturalAuth.dll -- (NaturalAuthentication) SRV:64bit: - [2018-04-12 00:34:43 | 000,637,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WFDSConMgrSvc.dll -- (WFDSConMgrSvc) SRV:64bit: - [2018-04-12 00:34:43 | 000,590,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter) SRV:64bit: - [2018-04-12 00:34:43 | 000,121,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:64bit: - [2018-04-12 00:34:42 | 000,712,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SharedRealitySvc.dll -- (SharedRealitySvc) SRV:64bit: - [2018-04-12 00:34:41 | 000,761,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SecurityHealthService.exe -- (SecurityHealthService) SRV:64bit: - [2018-04-12 00:34:41 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV:64bit: - [2018-04-12 00:34:40 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:64bit: - [2018-04-12 00:34:39 | 000,219,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvc.dll -- (diagsvc) SRV:64bit: - [2018-04-12 00:34:38 | 000,671,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:64bit: - [2018-04-12 00:34:37 | 000,303,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService) SRV:64bit: - [2018-04-12 00:34:37 | 000,198,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:64bit: - [2018-04-12 00:34:34 | 001,273,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService) SRV:64bit: - [2018-04-12 00:34:33 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PrintWorkflowService.dll -- (PrintWorkflowUserSvc) SRV:64bit: - [2018-04-12 00:34:33 | 000,153,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc) SRV:64bit: - [2018-04-12 00:34:32 | 000,507,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:64bit: - [2018-04-12 00:34:25 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:64bit: - [2018-04-12 00:34:24 | 001,027,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager) SRV:64bit: - [2018-04-12 00:34:24 | 000,081,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:64bit: - [2018-04-12 00:34:24 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:64bit: - [2018-04-12 00:34:23 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:64bit: - [2018-04-12 00:34:23 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service) SRV:64bit: - [2018-04-12 00:34:22 | 000,773,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:64bit: - [2018-04-12 00:34:22 | 000,335,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc) SRV:64bit: - [2018-04-12 00:34:22 | 000,089,088 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PrintWorkflowUserSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicesFlowUserSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicePickerUserSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BluetoothUserService_5a7b6) SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BcastDVRUserService_5a7b6) SRV:64bit: - [2018-04-12 00:34:19 | 000,750,080 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\DevicesFlowBroker.dll -- (DevicesFlowUserSvc) SRV:64bit: - [2018-04-12 00:34:19 | 000,195,584 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc) SRV:64bit: - [2018-04-12 00:34:14 | 000,824,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV:64bit: - [2018-04-12 00:34:14 | 000,712,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService) SRV:64bit: - [2018-04-12 00:34:14 | 000,514,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BTAGService.dll -- (BTAGService) SRV:64bit: - [2018-04-12 00:34:14 | 000,395,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthAvctpSvc.dll -- (BthAvctpSvc) SRV:64bit: - [2018-04-12 00:34:14 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice) SRV:64bit: - [2018-04-12 00:34:14 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:64bit: - [2018-04-12 00:34:12 | 001,495,040 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc) SRV:64bit: - [2018-04-12 00:34:12 | 001,220,096 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,785,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,582,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,463,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:64bit: - [2018-04-12 00:34:12 | 000,392,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WaaSMedicSvc.dll -- (WaaSMedicSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,345,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,307,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,281,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:64bit: - [2018-04-12 00:34:12 | 000,280,576 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService) SRV:64bit: - [2018-04-12 00:34:12 | 000,241,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,176,128 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,096,768 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService) SRV:64bit: - [2018-04-12 00:34:12 | 000,091,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker) SRV:64bit: - [2018-04-12 00:34:12 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xboxgipsvc.dll -- (XboxGipSvc) SRV:64bit: - [2018-04-12 00:34:12 | 000,044,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc) SRV:64bit: - [2018-04-12 00:34:10 | 001,248,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SEMgrSvc.dll -- (SEMgrSvc) SRV:64bit: - [2018-04-12 00:34:10 | 000,376,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:64bit: - [2018-04-12 00:34:10 | 000,262,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PushToInstall.dll -- (PushToInstall) SRV:64bit: - [2018-04-12 00:34:10 | 000,048,640 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager) SRV:64bit: - [2018-04-12 00:34:10 | 000,033,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker) SRV:64bit: - [2018-04-12 00:34:08 | 001,458,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc) SRV:64bit: - [2018-04-12 00:34:08 | 001,308,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave) SRV:64bit: - [2018-04-12 00:34:08 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode) SRV:64bit: - [2018-04-12 00:34:08 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GraphicsPerfSvc.dll -- (GraphicsPerfSvc) SRV:64bit: - [2018-04-12 00:34:08 | 000,059,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xbgmsvc.exe -- (xbgm) SRV:64bit: - [2018-04-12 00:34:08 | 000,031,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.WARP.JITService.dll -- (WarpJITSvc) SRV:64bit: - [2018-04-12 00:34:07 | 001,115,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager) SRV:64bit: - [2018-04-12 00:34:07 | 000,092,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate) SRV:64bit: - [2018-04-12 00:34:06 | 001,033,584 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC) SRV:64bit: - [2018-04-12 00:34:06 | 000,632,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc) SRV:64bit: - [2018-04-12 00:34:06 | 000,453,120 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc) SRV:64bit: - [2018-04-12 00:34:06 | 000,235,008 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:64bit: - [2018-04-12 00:34:06 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter) SRV:64bit: - [2018-04-12 00:34:04 | 001,148,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc) SRV:64bit: - [2018-04-12 00:34:04 | 000,411,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vac.dll -- (VacSvc) SRV:64bit: - [2018-04-12 00:34:04 | 000,356,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dusmsvc.dll -- (DusmSvc) SRV:64bit: - [2018-04-12 00:34:04 | 000,199,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LanguageOverlayServer.dll -- (LxpSvc) SRV:64bit: - [2018-04-12 00:34:04 | 000,163,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SgrmBroker.exe -- (SgrmBroker) SRV:64bit: - [2018-04-12 00:34:04 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService) SRV:64bit: - [2018-04-12 00:34:02 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Microsoft.Bluetooth.UserService.dll -- (BluetoothUserService) SRV:64bit: - [2018-04-12 00:34:02 | 000,063,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipxlatcfg.dll -- (IpxlatCfgSvc) SRV:64bit: - [2018-04-12 00:33:54 | 002,197,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:64bit: - [2018-04-12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss) SRV:64bit: - [2018-04-12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv) SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession) SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:64bit: - [2018-04-12 00:33:54 | 000,060,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost) SRV:64bit: - [2018-04-12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:64bit: - [2018-04-10 22:05:00 | 000,324,608 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc) SRV:64bit: - [2018-03-10 19:20:00 | 000,495,616 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysNative\OpenSSH\ssh-agent.exe -- (ssh-agent) SRV:64bit: - [2017-11-22 11:45:03 | 000,332,216 | ---- | M] (HP Inc.) [Auto | Running] -- C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe -- (HPTouchpointAnalyticsService) SRV:64bit: - [2017-08-24 05:20:52 | 000,269,912 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe -- (SynTPEnhService) SRV:64bit: - [2017-07-23 20:24:24 | 001,129,928 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe -- (Platinum Host Service) SRV:64bit: - [2017-07-20 15:16:14 | 000,029,256 | ---- | M] (Apache Software Foundation) [Auto | Running] -- C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe -- (VisualSVNServer) SRV:64bit: - [2017-07-20 15:15:18 | 000,374,856 | ---- | M] (VisualSVN Software Ltd.) [Auto | Running] -- C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe -- (vsvnjobsvc) SRV:64bit: - [2017-07-20 15:15:14 | 000,104,008 | ---- | M] (VisualSVN Software Ltd.) [Disabled | Stopped] -- C:\Program Files\VisualSVN Server\bin\vdfssvc.exe -- (vdfssvc) SRV:64bit: - [2017-07-20 15:15:08 | 000,198,728 | ---- | M] (VisualSVN Software Ltd.) [On_Demand | Stopped] -- C:\Program Files\VisualSVN Server\bin\vrepocfgsvc.exe -- (vrepocfgsvc) SRV:64bit: - [2015-08-01 05:51:30 | 000,263,200 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2015-07-03 22:21:48 | 000,303,360 | ---- | M] (Realtek Semiconductor) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe -- (RtkAudioService) SRV:64bit: - [2014-10-13 06:57:46 | 000,743,688 | ---- | M] (DEVGURU Co., LTD.) [Auto | Running] -- C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe -- (ss_conn_service) SRV - [2018-06-23 21:39:53 | 000,195,024 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2018-06-08 10:09:43 | 004,469,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository) SRV - [2018-06-08 10:09:40 | 000,567,144 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar) SRV - [2018-06-08 09:54:26 | 000,729,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\FlightSettings.dll -- (wisvc) SRV - [2018-06-08 09:54:04 | 000,999,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\TokenBroker.dll -- (TokenBroker) SRV - [2018-06-08 09:53:53 | 001,108,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\InstallService.dll -- (InstallService) SRV - [2018-06-06 14:33:28 | 001,194,512 | ---- | M] (Garmin Ltd. or its subsidiaries) [Auto | Running] -- C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe -- (Garmin Device Interaction Service) SRV - [2018-06-02 15:03:49 | 004,682,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\NisSrv.exe -- (WdNisSvc) SRV - [2018-06-02 15:03:49 | 000,101,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MsMpEng.exe -- (WinDefend) SRV - [2018-05-02 07:29:50 | 000,332,656 | ---- | M] (HP Inc.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe -- (HPSupportSolutionsFrameworkService) SRV - [2018-04-12 00:35:22 | 000,312,832 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Windows.Devices.Picker.dll -- (DevicePickerUserSvc) SRV - [2018-04-12 00:34:57 | 000,138,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\PrintWorkflowService.dll -- (PrintWorkflowUserSvc) SRV - [2018-04-12 00:34:48 | 000,592,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc) SRV - [2018-04-12 00:34:45 | 000,965,632 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc) SRV - [2018-04-12 00:34:45 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tzautoupdate.dll -- (tzautoupdate) SRV - [2018-04-12 00:34:45 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2018-04-12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2018-01-07 17:53:29 | 000,010,752 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe -- (SetupARService) SRV - [2017-07-27 06:29:24 | 000,082,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2016-06-03 22:08:04 | 001,031,704 | ---- | M] (HP) [On_Demand | Stopped] -- C:\Program Files (x86)\HP\Shared\hpqwmiex.exe -- (hpqcaslwmiex) SRV - [2016-03-03 03:59:34 | 002,021,056 | ---- | M] (Adobe Systems, Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe -- (AGSService) SRV - [2014-04-30 16:00:36 | 000,277,360 | ---- | M] (arvato digital services llc) [Auto | Running] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2012-11-08 11:39:36 | 000,174,176 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe -- (PACSPTISVR-Sound_Organizer) ========== Driver Services (SafeList) ========== DRV:64bit: - [2018-06-10 16:45:27 | 000,382,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:64bit: - [2018-06-10 16:45:27 | 000,105,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:64bit: - [2018-06-08 11:31:08 | 000,029,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:64bit: - [2018-06-08 10:31:16 | 000,226,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000) DRV:64bit: - [2018-06-08 10:30:50 | 000,565,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:64bit: - [2018-06-08 10:29:39 | 000,164,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:64bit: - [2018-06-08 10:29:22 | 001,921,952 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS) DRV:64bit: - [2018-06-08 10:29:06 | 000,945,568 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1) DRV:64bit: - [2018-06-08 09:58:46 | 000,781,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi) DRV:64bit: - [2018-06-02 15:03:50 | 000,313,384 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdFilter.sys -- (WdFilter) DRV:64bit: - [2018-06-02 15:03:50 | 000,061,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys -- (WdNisDrv) DRV:64bit: - [2018-06-02 15:03:49 | 000,046,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdBoot.sys -- (WdBoot) DRV:64bit: - [2018-05-11 17:37:46 | 000,034,944 | ---- | M] (HP) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WirelessButtonDriver64.sys -- (WirelessButtonDriver64) DRV:64bit: - [2018-04-26 21:50:08 | 000,132,512 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\TMUMH.sys -- (tmumh) DRV:64bit: - [2018-04-12 17:23:17 | 000,037,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:64bit: - [2018-04-12 17:23:15 | 000,057,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpatialGraphFilter.sys -- (SpatialGraphFilter) DRV:64bit: - [2018-04-12 17:23:13 | 000,030,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2018-04-12 00:34:43 | 000,119,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda) DRV:64bit: - [2018-04-12 00:34:40 | 000,091,544 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:64bit: - [2018-04-12 00:34:40 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bam.sys -- (bam) DRV:64bit: - [2018-04-12 00:34:32 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:64bit: - [2018-04-12 00:34:32 | 000,084,480 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:64bit: - [2018-04-12 00:34:32 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\afunix.sys -- (afunix) DRV:64bit: - [2018-04-12 00:34:32 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:64bit: - [2018-04-12 00:34:28 | 000,254,464 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:64bit: - [2018-04-12 00:34:25 | 000,088,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:64bit: - [2018-04-12 00:34:22 | 000,175,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx) DRV:64bit: - [2018-04-12 00:34:22 | 000,034,208 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2018-04-12 00:34:20 | 000,414,208 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\cldflt.sys -- (CldFlt) DRV:64bit: - [2018-04-12 00:34:20 | 000,217,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:64bit: - [2018-04-12 00:34:20 | 000,209,816 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof) DRV:64bit: - [2018-04-12 00:34:19 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr) DRV:64bit: - [2018-04-12 00:34:15 | 000,021,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdmCompanionFilter.sys -- (WdmCompanionFilter) DRV:64bit: - [2018-04-12 00:34:14 | 000,282,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000) DRV:64bit: - [2018-04-12 00:34:14 | 000,154,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:64bit: - [2018-04-12 00:34:14 | 000,152,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101) DRV:64bit: - [2018-04-12 00:34:14 | 000,151,960 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs) DRV:64bit: - [2018-04-12 00:34:14 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101) DRV:64bit: - [2018-04-12 00:34:14 | 000,082,944 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs) DRV:64bit: - [2018-04-12 00:34:14 | 000,075,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:64bit: - [2018-04-12 00:34:14 | 000,067,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000) DRV:64bit: - [2018-04-12 00:34:14 | 000,039,328 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist) DRV:64bit: - [2018-04-12 00:34:14 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd) DRV:64bit: - [2018-04-12 00:34:14 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshwnclx.sys -- (HwNClx0101) DRV:64bit: - [2018-04-12 00:34:14 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:64bit: - [2018-04-12 00:34:12 | 000,169,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:64bit: - [2018-04-12 00:34:12 | 000,092,056 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bindflt.sys -- (bindflt) DRV:64bit: - [2018-04-12 00:34:12 | 000,082,432 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt) DRV:64bit: - [2018-04-12 00:34:12 | 000,082,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:64bit: - [2018-04-12 00:34:12 | 000,072,232 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT) DRV:64bit: - [2018-04-12 00:34:12 | 000,055,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:64bit: - [2018-04-12 00:34:04 | 000,128,000 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:64bit: - [2018-04-12 00:34:04 | 000,063,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SgrmAgent.sys -- (SgrmAgent) DRV:64bit: - [2018-04-12 00:34:04 | 000,058,272 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate) DRV:64bit: - [2018-04-12 00:34:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS) DRV:64bit: - [2018-04-12 00:34:04 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv) DRV:64bit: - [2018-04-12 00:33:58 | 000,030,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:64bit: - [2018-04-12 00:33:54 | 000,227,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winnat.sys -- (WinNat) DRV:64bit: - [2018-04-12 00:33:54 | 000,140,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:64bit: - [2018-04-12 00:33:54 | 000,127,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:64bit: - [2018-04-12 00:33:54 | 000,073,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice) DRV:64bit: - [2018-04-12 00:33:54 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2018-04-12 00:33:54 | 000,055,808 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt) DRV:64bit: - [2018-04-12 00:33:54 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx) DRV:64bit: - [2018-04-12 00:33:54 | 000,039,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ramdisk.sys -- (Ramdisk) DRV:64bit: - [2018-04-12 00:33:54 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf) DRV:64bit: - [2018-04-12 00:33:54 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipt.sys -- (IPT) DRV:64bit: - [2018-04-12 00:33:52 | 000,434,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:64bit: - [2018-04-12 00:33:52 | 000,287,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2018-04-12 00:33:52 | 000,232,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:64bit: - [2018-04-12 00:33:52 | 000,097,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:64bit: - [2018-04-12 00:33:52 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi) DRV:64bit: - [2018-04-12 00:33:52 | 000,054,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:64bit: - [2018-04-12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:64bit: - [2018-04-12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt) DRV:64bit: - [2018-04-12 00:33:52 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid) DRV:64bit: - [2018-04-12 00:33:52 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter) DRV:64bit: - [2018-04-12 00:33:52 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:64bit: - [2018-04-12 00:33:52 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:64bit: - [2018-04-12 00:33:52 | 000,018,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy) DRV:64bit: - [2018-04-12 00:33:51 | 000,292,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip) DRV:64bit: - [2018-04-12 00:33:51 | 000,144,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys) DRV:64bit: - [2018-04-12 00:33:51 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:64bit: - [2018-04-12 00:33:51 | 000,098,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea) DRV:64bit: - [2018-04-12 00:33:51 | 000,086,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys -- (BthLEEnum) DRV:64bit: - [2018-04-12 00:33:51 | 000,029,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea) DRV:64bit: - [2018-04-12 00:33:51 | 000,028,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys) DRV:64bit: - [2018-04-12 00:33:51 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn) DRV:64bit: - [2018-04-12 00:33:49 | 001,836,952 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd) DRV:64bit: - [2018-04-12 00:33:49 | 000,885,144 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAVC.sys -- (iaStorAVC) DRV:64bit: - [2018-04-12 00:33:49 | 000,842,648 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus) DRV:64bit: - [2018-04-12 00:33:49 | 000,611,232 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:64bit: - [2018-04-12 00:33:49 | 000,526,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus) DRV:64bit: - [2018-04-12 00:33:49 | 000,505,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbhost.sys -- (mausbhost) DRV:64bit: - [2018-04-12 00:33:49 | 000,321,432 | ---- | M] (Chelsio Communications) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi) DRV:64bit: - [2018-04-12 00:33:49 | 000,305,560 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:64bit: - [2018-04-12 00:33:49 | 000,197,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc) DRV:64bit: - [2018-04-12 00:33:49 | 000,156,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:64bit: - [2018-04-12 00:33:49 | 000,128,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus) DRV:64bit: - [2018-04-12 00:33:49 | 000,108,952 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr) DRV:64bit: - [2018-04-12 00:33:49 | 000,105,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pmem.sys -- (pmem) DRV:64bit: - [2018-04-12 00:33:49 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvdimm.sys -- (nvdimm) DRV:64bit: - [2018-04-12 00:33:49 | 000,079,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:64bit: - [2018-04-12 00:33:49 | 000,075,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:64bit: - [2018-04-12 00:33:49 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:64bit: - [2018-04-12 00:33:49 | 000,064,920 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs) DRV:64bit: - [2018-04-12 00:33:49 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:64bit: - [2018-04-12 00:33:49 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:64bit: - [2018-04-12 00:33:49 | 000,061,848 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i) DRV:64bit: - [2018-04-12 00:33:49 | 000,058,776 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i) DRV:64bit: - [2018-04-12 00:33:49 | 000,056,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbip.sys -- (mausbip) DRV:64bit: - [2018-04-12 00:33:49 | 000,048,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs) DRV:64bit: - [2018-04-12 00:33:49 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:64bit: - [2018-04-12 00:33:49 | 000,038,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bttflt.sys -- (bttflt) DRV:64bit: - [2018-04-12 00:33:49 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2018-04-12 00:33:49 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:64bit: - [2018-04-12 00:33:49 | 000,033,184 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hvcrash.sys -- (hvcrash) DRV:64bit: - [2018-04-12 00:33:49 | 000,033,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SDFRd.sys -- (SDFRd) DRV:64bit: - [2018-04-12 00:33:49 | 000,032,152 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad) DRV:64bit: - [2018-04-12 00:33:49 | 000,031,128 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2018-04-12 00:33:49 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:64bit: - [2018-04-12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum) DRV:64bit: - [2018-04-12 00:33:49 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:64bit: - [2018-04-12 00:33:49 | 000,016,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume) DRV:64bit: - [2018-04-12 00:33:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:64bit: - [2018-04-12 00:33:49 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:64bit: - [2018-04-12 00:33:49 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:64bit: - [2018-04-12 00:33:49 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid) DRV:64bit: - [2018-04-12 00:33:48 | 003,419,032 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2018-04-12 00:33:48 | 002,537,984 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x) DRV:64bit: - [2018-04-12 00:33:48 | 001,135,520 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:64bit: - [2018-04-12 00:33:48 | 000,533,912 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2018-04-12 00:33:48 | 000,259,480 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2018-04-12 00:33:48 | 000,177,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:64bit: - [2018-04-12 00:33:48 | 000,145,816 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ItSas35i.sys -- (ItSas35i) DRV:64bit: - [2018-04-12 00:33:48 | 000,128,408 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i) DRV:64bit: - [2018-04-12 00:33:48 | 000,124,312 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i) DRV:64bit: - [2018-04-12 00:33:48 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg) DRV:64bit: - [2018-04-12 00:33:48 | 000,107,416 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:64bit: - [2018-04-12 00:33:48 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rhproxy.sys -- (rhproxy) DRV:64bit: - [2018-04-12 00:33:48 | 000,083,360 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2018-04-12 00:33:48 | 000,082,848 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:64bit: - [2018-04-12 00:33:48 | 000,082,328 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\megasas35i.sys -- (megasas35i) DRV:64bit: - [2018-04-12 00:33:48 | 000,075,160 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i) DRV:64bit: - [2018-04-12 00:33:48 | 000,064,408 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2018-04-12 00:33:48 | 000,063,904 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:64bit: - [2018-04-12 00:33:48 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:64bit: - [2018-04-12 00:33:48 | 000,027,032 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2018-04-12 00:33:48 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev) DRV:64bit: - [2018-04-12 00:33:48 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pnpmem.sys -- (PNPMEM) DRV:64bit: - [2018-04-12 00:33:48 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:64bit: - [2018-04-12 00:33:45 | 000,174,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_BXT_P.sys -- (iaLPSS2i_I2C_BXT_P) DRV:64bit: - [2018-04-12 00:33:45 | 000,171,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C) DRV:64bit: - [2018-04-12 00:33:45 | 000,118,680 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:64bit: - [2018-04-12 00:33:45 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:64bit: - [2018-04-12 00:33:45 | 000,091,648 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c) DRV:64bit: - [2018-04-12 00:33:45 | 000,088,576 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_BXT_P.sys -- (iaLPSS2i_GPIO2_BXT_P) DRV:64bit: - [2018-04-12 00:33:45 | 000,079,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2) DRV:64bit: - [2018-04-12 00:33:45 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAD.sys -- (CAD) DRV:64bit: - [2018-04-12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus) DRV:64bit: - [2018-04-12 00:33:45 | 000,036,864 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio) DRV:64bit: - [2018-04-10 20:25:00 | 000,141,432 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr) DRV:64bit: - [2018-04-10 20:24:58 | 000,454,264 | ---- | M] (Trend Micro Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm) DRV:64bit: - [2018-04-10 20:24:54 | 000,145,016 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon) DRV:64bit: - [2018-01-22 10:03:04 | 000,134,264 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmusa.sys -- (tmusa) DRV:64bit: - [2018-01-16 17:18:34 | 000,562,296 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tmnciesc.sys -- (tmnciesc) DRV:64bit: - [2017-12-18 15:00:58 | 000,039,936 | ---- | M] (HP) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:64bit: - [2017-12-18 15:00:56 | 000,053,760 | ---- | M] (HP) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:64bit: - [2017-08-24 05:20:50 | 000,707,672 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2017-05-10 08:46:18 | 000,147,672 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tmeevw.sys -- (tmeevw) DRV:64bit: - [2017-03-03 16:44:48 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:64bit: - [2016-09-29 02:51:22 | 000,110,104 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdWT6.sys -- (AtiHDAudioService) DRV:64bit: - [2016-09-07 09:51:04 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901) DRV:64bit: - [2016-09-05 06:47:20 | 000,165,504 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudserd.sys -- (ssudserd) DRV:64bit: - [2016-09-05 06:47:12 | 000,165,504 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm) DRV:64bit: - [2016-08-13 14:51:02 | 000,065,080 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:64bit: - [2016-03-28 12:41:34 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2016-01-05 04:35:34 | 000,072,504 | ---- | M] (Trend Micro Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TMEBC64.sys -- (TMEBC) DRV:64bit: - [2015-08-01 05:51:32 | 021,637,664 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:64bit: - [2015-08-01 05:51:32 | 000,682,016 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2015-06-23 03:49:48 | 000,039,056 | ---- | M] (Trend Micro Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\tmel.sys -- (tmel) DRV:64bit: - [2015-06-05 03:12:54 | 000,310,528 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsP2Stor.sys -- (RSP2STOR) DRV:64bit: - [2015-06-03 06:27:02 | 001,219,200 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtbth.sys -- (rtbth) DRV:64bit: - [2014-08-08 17:31:10 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ptun0901.sys -- (ptun0901) DRV:64bit: - [2014-01-27 03:26:06 | 000,830,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168) DRV:64bit: - [2013-04-30 21:25:00 | 000,677,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA) DRV:64bit: - [2012-11-30 23:31:02 | 000,026,280 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata) DRV:64bit: - [2012-11-30 23:31:00 | 000,080,552 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata) DRV:64bit: - [2007-09-06 20:53:00 | 000,016,384 | ---- | M] (Silicon Laboratories) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DSI_SiUSBXp_3_1.sys -- (DSI_SiUSBXp_3_1) DRV - [2018-04-12 00:34:58 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\afunix.sys -- (afunix) DRV - [2018-04-12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum) DRV - [2018-04-12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus) DRV - [2017-08-01 01:27:53 | 000,027,552 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = C5 A8 56 71 A5 D8 D3 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error. IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback> ========== FireFox ========== FF - prefs.js..browser.search.countryCode: "MA" FF - prefs.js..browser.search.region: "MA" FF - prefs.js..browser.search.widget.inNavBar: true FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.144.2: C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.144.2: C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll (Oracle Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension.17@acrobat.adobe.com: C:\PROGRAM FILES (X86)\ADOBE\ACROBAT 11.0\ACROBAT\BROWSER\WCFIREFOXEXTN\WEBEXTN\SIGNED_EXTN\ADOBE_ACROBAT-1.0-WINDOWS.XPI [2017-11-01 08:27:32 | 000,467,624 | ---- | M] () 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fftmtoolbar@trendmicro.com: C:\PROGRAM FILES\TREND MICRO\TITANIUM\UIFRAMEWORK\TOOLBAR\FIREFOXEXTENSION [2018-06-24 15:36:49 | 000,000,000 | ---D | M] 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox Developer Edition 62.0\extensions\\Components: C:\PROGRAM FILES\FIREFOX DEVELOPER EDITION\COMPONENTS 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox Developer Edition 62.0\extensions\\Plugins: C:\PROGRAM FILES\FIREFOX DEVELOPER EDITION\PLUGINS 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 59.0\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 59.0\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension.17@acrobat.adobe.com: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01 08:27:32 | 000,467,624 | ---- | M] () FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fftmtoolbar@trendmicro.com: C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2018-06-24 15:36:49 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 56.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 56.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2018-01-07 03:58:01 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox Developer Edition 62.0\extensions\\Components: C:\Program Files\Firefox Developer Edition\components FF - HKEY_CURRENT_USER\software\mozilla\Firefox Developer Edition 62.0\extensions\\Plugins: C:\Program Files\Firefox Developer Edition\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 59.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 59.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017-03-03 22:22:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Extensions [2017-10-17 18:32:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\SystemExtensionsDev [2018-02-09 22:29:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\50nzwkok.default-1518211647119\browser-extension-data [2018-02-09 22:29:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\50nzwkok.default-1518211647119\browser-extension-data\screenshots@mozilla.org [2017-10-11 15:23:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\browser-extension-data [2017-10-11 15:23:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\browser-extension-data\screenshots@mozilla.org [2018-02-23 23:44:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\extensions [2017-10-11 16:00:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\storage\default\moz-extension+++3be0abaa-fabe-4d9b-8485-c155a06723ac [2018-06-24 15:33:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\storage\default\moz-extension+++3be0abaa-fabe-4d9b-8485-c155a06723ac\idb [2018-02-07 00:37:41 | 000,107,316 | ---- | M] () (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\firefox\profiles\t5ddyaf5.dev-edition-default\extensions\1b2383b324c8520974ee097e46301d5ca4e076de387c02886f1c6b1503671586@pokeinthe.io.xpi [2018-02-23 23:44:05 | 001,065,123 | ---- | M] () (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\firefox\profiles\t5ddyaf5.dev-edition-default\extensions\adbhelper@mozilla.org.xpi [2017-10-07 12:31:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2017-09-12 13:08:50 | 000,043,424 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll ========== Chrome ========== CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjhmfjbfdbeeekiijofbikifokdkfhcc\0.4.5_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ighdmehidhipcmcojjgiloacoafjmpfk\0.10.9_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.4_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf\12.0.0.1236_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\ CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6718.423.0.0_0\ O1 HOSTS File: ([2017-03-02 21:00:20 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Trend Micro Security Toolbar Helper) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll (Trend Micro Inc.) O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll (Oracle Corporation) O2:64bit: - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation) O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll (Oracle Corporation) O2:64bit: - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (HP Inc.) O2:64bit: - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (Trend Micro Security Toolbar Helper) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.) O2 - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (HP Inc.) O2 - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3:64bit: - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) O3:64bit: - HKLM\..\Toolbar: (Trend Micro Security Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll (Trend Micro Inc.) O3 - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Trend Micro Security Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {093F479D-712E-46CD-9E06-62E734A05F68} - No CLSID value found. O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:64bit: - HKLM..\Run: [CNAP2 Launcher] C:\Windows\SysNative\spool\drivers\x64\3\CNAP2LAK.EXE (CANON INC.) O4:64bit: - HKLM..\Run: [Platinum] C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe (Trend Micro Inc.) O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [SecurityHealth] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation) O4:64bit: - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.) O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" File not found O4 - HKCU..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M] O8:64bit: - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 File not found O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found O8:64bit: - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 File not found O8:64bit: - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found O9:64bit: - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.) O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.) O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.) O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0929f544-b324-4f88-ac20-f3a917509a0e}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18:64bit: - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll (Trend Micro Inc.) O18:64bit: - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.) O18:64bit: - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help - No CLSID value found O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.) O18 - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.) O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2018-06-24 15:31:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\TmSentry [2018-06-24 15:25:43 | 000,000,000 | -H-D | C] -- C:\TMRescueDisk [2018-06-24 15:22:38 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Antivirus+ [2018-06-24 15:21:07 | 000,147,672 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmeevw.sys [2018-06-24 15:21:06 | 000,562,296 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmnciesc.sys [2018-06-24 15:21:06 | 000,454,264 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmcomm.sys [2018-06-24 15:21:06 | 000,145,016 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmactmon.sys [2018-06-24 15:21:06 | 000,141,432 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmevtmgr.sys [2018-06-24 15:21:05 | 000,132,512 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\TMUMH.sys [2018-06-24 15:21:05 | 000,072,504 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\TMEBC64.sys [2018-06-24 15:21:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\tmumh [2018-06-24 15:21:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\tmumh [2018-06-24 15:21:04 | 000,134,264 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmusa.sys [2018-06-24 15:21:00 | 000,039,056 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmel.sys [2018-06-24 15:18:20 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2018-06-24 15:01:57 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Trend Micro [2018-06-24 14:48:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Trend Micro [2018-06-24 14:43:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Trend Micro Installer [2018-06-24 14:36:42 | 000,000,000 | ---D | C] -- C:\Users\adier\Desktop\TESTSECURITY [2018-06-23 19:43:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Packages [2018-06-13 22:59:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2018-06-13 00:47:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\PCHEALTH [2018-06-13 00:41:31 | 007,520,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll [2018-06-13 00:41:31 | 006,569,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll [2018-06-13 00:41:30 | 025,846,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2018-06-13 00:41:16 | 022,005,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2018-06-13 00:41:11 | 007,581,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll [2018-06-13 00:41:11 | 004,706,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll [2018-06-13 00:41:10 | 007,900,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll [2018-06-13 00:41:09 | 009,148,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2018-06-13 00:41:08 | 003,392,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll [2018-06-13 00:41:08 | 002,371,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll [2018-06-13 00:41:08 | 001,017,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2adec.dll [2018-06-13 00:41:07 | 002,331,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll [2018-06-13 00:41:06 | 000,861,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2adec.dll [2018-06-13 00:41:05 | 004,372,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeContent.dll [2018-06-13 00:41:04 | 004,867,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll [2018-06-13 00:41:03 | 004,392,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll [2018-06-13 00:41:03 | 001,611,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll [2018-06-13 00:41:03 | 001,380,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll [2018-06-13 00:41:02 | 006,817,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll [2018-06-13 00:41:01 | 005,780,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll [2018-06-13 00:41:01 | 003,653,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2018-06-13 00:41:00 | 004,788,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2018-06-13 00:41:00 | 003,296,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll [2018-06-13 00:41:00 | 002,364,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpcServices.dll [2018-06-13 00:40:59 | 006,527,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll [2018-06-13 00:40:59 | 004,403,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2018-06-13 00:40:59 | 003,283,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreUIComponents.dll [2018-06-13 00:40:59 | 002,248,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll [2018-06-13 00:40:59 | 001,784,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll [2018-06-13 00:40:58 | 001,709,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll [2018-06-13 00:40:58 | 001,676,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreShell.dll [2018-06-13 00:40:57 | 004,970,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll [2018-06-13 00:40:57 | 003,180,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll [2018-06-13 00:40:57 | 002,395,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVCORE.DLL [2018-06-13 00:40:57 | 001,798,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll [2018-06-13 00:40:56 | 006,032,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll [2018-06-13 00:40:56 | 003,320,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2018-06-13 00:40:56 | 002,570,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll [2018-06-13 00:40:55 | 004,469,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll [2018-06-13 00:40:55 | 002,479,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll [2018-06-13 00:40:54 | 001,020,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll [2018-06-13 00:40:53 | 004,563,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll [2018-06-13 00:40:53 | 002,900,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll [2018-06-13 00:40:53 | 002,417,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll [2018-06-13 00:40:53 | 001,034,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe [2018-06-13 00:40:52 | 000,457,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAudDecMFT.dll [2018-06-13 00:40:49 | 002,061,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll [2018-06-13 00:40:49 | 000,416,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAudDecMFT.dll [2018-06-13 00:40:48 | 003,999,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll [2018-06-13 00:40:48 | 001,461,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll [2018-06-13 00:40:48 | 001,395,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll [2018-06-13 00:40:48 | 001,371,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll [2018-06-13 00:40:48 | 001,364,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvruserservice.dll [2018-06-13 00:40:48 | 001,209,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll [2018-06-13 00:40:47 | 002,564,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll [2018-06-13 00:40:47 | 002,546,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UpdateAgent.dll [2018-06-13 00:40:47 | 002,486,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreUIComponents.dll [2018-06-13 00:40:47 | 001,613,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3D12.dll [2018-06-13 00:40:46 | 004,336,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll [2018-06-13 00:40:46 | 003,492,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll [2018-06-13 00:40:46 | 001,485,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallService.dll [2018-06-13 00:40:46 | 000,894,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll [2018-06-13 00:40:46 | 000,813,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll [2018-06-13 00:40:46 | 000,491,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll [2018-06-13 00:40:45 | 003,348,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll [2018-06-13 00:40:45 | 002,535,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll [2018-06-13 00:40:45 | 002,172,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll [2018-06-13 00:40:45 | 001,946,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2018-06-13 00:40:45 | 001,318,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ISM.dll [2018-06-13 00:40:45 | 000,748,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll [2018-06-13 00:40:44 | 001,934,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll [2018-06-13 00:40:44 | 001,148,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll [2018-06-13 00:40:44 | 001,128,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll [2018-06-13 00:40:44 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll [2018-06-13 00:40:44 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppReadiness.dll [2018-06-13 00:40:44 | 000,564,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll [2018-06-13 00:40:43 | 002,961,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll [2018-06-13 00:40:43 | 002,895,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys [2018-06-13 00:40:43 | 002,789,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll [2018-06-13 00:40:43 | 002,236,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2018-06-13 00:40:43 | 001,299,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3D12.dll [2018-06-13 00:40:43 | 001,285,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll [2018-06-13 00:40:43 | 000,944,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.Internal.dll [2018-06-13 00:40:42 | 001,792,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll [2018-06-13 00:40:42 | 001,190,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll [2018-06-13 00:40:42 | 001,171,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll [2018-06-13 00:40:42 | 000,916,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll [2018-06-13 00:40:41 | 001,634,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll [2018-06-13 00:40:41 | 001,457,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2018-06-13 00:40:41 | 000,684,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll [2018-06-13 00:40:41 | 000,669,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2018-06-13 00:40:41 | 000,594,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe [2018-06-13 00:40:39 | 002,401,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll [2018-06-13 00:40:39 | 001,719,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dui70.dll [2018-06-13 00:40:39 | 001,659,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsPrint.dll [2018-06-13 00:40:39 | 001,070,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll [2018-06-13 00:40:39 | 000,976,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Spectrum.exe [2018-06-13 00:40:39 | 000,950,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll [2018-06-13 00:40:39 | 000,550,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll [2018-06-13 00:40:39 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgeIso.dll [2018-06-13 00:40:38 | 003,293,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll [2018-06-13 00:40:38 | 001,675,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll [2018-06-13 00:40:38 | 001,550,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll [2018-06-13 00:40:38 | 001,363,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll [2018-06-13 00:40:38 | 001,288,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll [2018-06-13 00:40:38 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll [2018-06-13 00:40:38 | 001,150,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll [2018-06-13 00:40:38 | 001,112,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfds.dll [2018-06-13 00:40:38 | 000,652,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActivationManager.dll [2018-06-13 00:40:38 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcGenral.dll [2018-06-13 00:40:37 | 002,307,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVDECOD.DLL [2018-06-13 00:40:37 | 001,364,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webservices.dll [2018-06-13 00:40:37 | 001,258,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2018-06-13 00:40:37 | 001,140,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2018-06-13 00:40:37 | 001,097,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll [2018-06-13 00:40:37 | 000,988,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll [2018-06-13 00:40:37 | 000,908,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSMPEG2ENC.DLL [2018-06-13 00:40:37 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll [2018-06-13 00:40:37 | 000,770,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfds.dll [2018-06-13 00:40:37 | 000,722,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll [2018-06-13 00:40:37 | 000,678,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll [2018-06-13 00:40:36 | 001,586,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll [2018-06-13 00:40:36 | 001,174,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe [2018-06-13 00:40:36 | 001,077,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webservices.dll [2018-06-13 00:40:36 | 000,999,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll [2018-06-13 00:40:36 | 000,983,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2018-06-13 00:40:36 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CPFilters.dll [2018-06-13 00:40:36 | 000,553,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll [2018-06-13 00:40:35 | 001,543,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll [2018-06-13 00:40:35 | 001,462,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dui70.dll [2018-06-13 00:40:35 | 001,454,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll [2018-06-13 00:40:35 | 001,121,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll [2018-06-13 00:40:35 | 001,046,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll [2018-06-13 00:40:35 | 001,033,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll [2018-06-13 00:40:35 | 001,012,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe [2018-06-13 00:40:35 | 000,880,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll [2018-06-13 00:40:35 | 000,858,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll [2018-06-13 00:40:35 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll [2018-06-13 00:40:35 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SppExtComObj.Exe [2018-06-13 00:40:35 | 000,567,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe [2018-06-13 00:40:35 | 000,506,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe [2018-06-13 00:40:35 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll [2018-06-13 00:40:35 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll [2018-06-13 00:40:35 | 000,329,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovs.dll [2018-06-13 00:40:35 | 000,266,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll [2018-06-13 00:40:35 | 000,084,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageOverlayUtil.dll [2018-06-13 00:40:34 | 001,397,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVP9DEC.dll [2018-06-13 00:40:34 | 001,108,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallService.dll [2018-06-13 00:40:34 | 000,917,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll [2018-06-13 00:40:34 | 000,673,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FrameServer.dll [2018-06-13 00:40:34 | 000,565,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS [2018-06-13 00:40:34 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DXP.dll [2018-06-13 00:40:34 | 000,356,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcryptprimitives.dll [2018-06-13 00:40:34 | 000,264,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovs.dll [2018-06-13 00:40:33 | 001,708,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSPhotography.dll [2018-06-13 00:40:33 | 001,605,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll [2018-06-13 00:40:33 | 001,129,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll [2018-06-13 00:40:33 | 000,873,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll [2018-06-13 00:40:33 | 000,593,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll [2018-06-13 00:40:33 | 000,313,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsensorgroup.dll [2018-06-13 00:40:33 | 000,194,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\skci.dll [2018-06-13 00:40:33 | 000,064,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LanguageOverlayUtil.dll [2018-06-13 00:40:32 | 001,180,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll [2018-06-13 00:40:32 | 001,063,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi [2018-06-13 00:40:32 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll [2018-06-13 00:40:32 | 000,723,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll [2018-06-13 00:40:32 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll [2018-06-13 00:40:32 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll [2018-06-13 00:40:32 | 000,615,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll [2018-06-13 00:40:32 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll [2018-06-13 00:40:32 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll [2018-06-13 00:40:32 | 000,260,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll [2018-06-13 00:40:32 | 000,164,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wfplwfs.sys [2018-06-13 00:40:32 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vertdll.dll [2018-06-13 00:40:32 | 000,057,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kernel.appcore.dll [2018-06-13 00:40:32 | 000,050,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kernel.appcore.dll [2018-06-13 00:40:31 | 002,590,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVDECOD.DLL [2018-06-13 00:40:31 | 001,921,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refs.sys [2018-06-13 00:40:31 | 001,466,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll [2018-06-13 00:40:31 | 001,242,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll [2018-06-13 00:40:31 | 000,871,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.BackgroundMediaPlayback.dll [2018-06-13 00:40:31 | 000,869,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.BackgroundMediaPlayer.dll [2018-06-13 00:40:31 | 000,661,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GenValObj.exe [2018-06-13 00:40:31 | 000,646,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll [2018-06-13 00:40:31 | 000,607,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll [2018-06-13 00:40:31 | 000,567,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll [2018-06-13 00:40:31 | 000,527,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe [2018-06-13 00:40:31 | 000,413,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll [2018-06-13 00:40:31 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll [2018-06-13 00:40:31 | 000,269,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave_secure.dll [2018-06-13 00:40:31 | 000,029,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\uefi.sys [2018-06-13 00:40:30 | 003,640,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstsc.exe [2018-06-13 00:40:30 | 003,444,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe [2018-06-13 00:40:30 | 001,213,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe [2018-06-13 00:40:30 | 001,032,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsPrint.dll [2018-06-13 00:40:30 | 000,945,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys [2018-06-13 00:40:30 | 000,885,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll [2018-06-13 00:40:30 | 000,842,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll [2018-06-13 00:40:30 | 000,715,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll [2018-06-13 00:40:30 | 000,659,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StateRepository.Core.dll [2018-06-13 00:40:30 | 000,568,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryPS.dll [2018-06-13 00:40:30 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll [2018-06-13 00:40:30 | 000,272,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave.dll [2018-06-13 00:40:30 | 000,134,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll [2018-06-13 00:40:30 | 000,094,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll [2018-06-13 00:40:29 | 000,792,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys [2018-06-13 00:40:29 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FlightSettings.dll [2018-06-13 00:40:29 | 000,713,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVideoDSP.dll [2018-06-13 00:40:29 | 000,625,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll [2018-06-13 00:40:29 | 000,413,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys [2018-06-13 00:40:29 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FSClient.dll [2018-06-13 00:40:29 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FSClient.dll [2018-06-13 00:40:29 | 000,226,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Ucx01000.sys [2018-06-13 00:40:29 | 000,137,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcrypt.dll [2018-06-13 00:40:28 | 001,825,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.dll [2018-06-13 00:40:28 | 001,361,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSPhotography.dll [2018-06-13 00:40:28 | 000,908,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll [2018-06-13 00:40:28 | 000,857,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPEG2ENC.DLL [2018-06-13 00:40:28 | 000,849,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.MediaPlayer.dll [2018-06-13 00:40:28 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll [2018-06-13 00:40:28 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.BackgroundMediaPlayback.dll [2018-06-13 00:40:28 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll [2018-06-13 00:40:28 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserexport.exe [2018-06-13 00:40:28 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcredprov.dll [2018-06-13 00:40:28 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAC3ENC.DLL [2018-06-13 00:40:28 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\easwrt.dll [2018-06-13 00:40:28 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhosdeployment.dll [2018-06-13 00:40:28 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidparse.sys [2018-06-13 00:40:27 | 002,084,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl [2018-06-13 00:40:27 | 001,008,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MixedRealityCapture.dll [2018-06-13 00:40:27 | 000,906,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.PhoneNumberFormatting.dll [2018-06-13 00:40:27 | 000,868,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MixedRealityCapture.dll [2018-06-13 00:40:27 | 000,781,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys [2018-06-13 00:40:27 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcext.dll [2018-06-13 00:40:27 | 000,466,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll [2018-06-13 00:40:27 | 000,456,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDEServer.exe [2018-06-13 00:40:27 | 000,340,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msexcl40.dll [2018-06-13 00:40:27 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TDLMigration.dll [2018-06-13 00:40:27 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll [2018-06-13 00:40:27 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll [2018-06-13 00:40:27 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallServiceTasks.dll [2018-06-13 00:40:27 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryUpgrade.dll [2018-06-13 00:40:26 | 002,019,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll [2018-06-13 00:40:26 | 002,016,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl [2018-06-13 00:40:26 | 001,560,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdt.exe [2018-06-13 00:40:26 | 001,508,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdt.exe [2018-06-13 00:40:26 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll [2018-06-13 00:40:26 | 000,401,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll [2018-06-13 00:40:26 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll [2018-06-13 00:40:26 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidcredprov.dll [2018-06-13 00:40:26 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SIHClient.exe [2018-06-13 00:40:26 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManager.dll [2018-06-13 00:40:26 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerCsp.dll [2018-06-13 00:40:26 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryUpgrade.dll [2018-06-13 00:40:26 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dssvc.dll [2018-06-13 00:40:26 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManagerClient.dll [2018-06-13 00:40:26 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usoapi.dll [2018-06-13 00:40:26 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll [2018-06-13 00:40:26 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edpnotify.exe [2018-06-13 00:40:26 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tbauth.dll [2018-06-13 00:40:26 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryCore.dll [2018-06-13 00:40:26 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tbauth.dll [2018-06-13 00:40:26 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerCookies.exe [2018-06-13 00:40:26 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerCookies.exe [2018-06-13 00:40:25 | 001,348,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpcServices.dll [2018-06-12 02:07:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin [2018-06-11 00:09:13 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\PlaceholderTileLogoFolder [2018-06-10 22:37:55 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\D3DSCache [2018-06-10 18:37:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents [2018-06-10 18:37:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data [2018-06-10 18:10:16 | 000,000,000 | --SD | C] -- C:\Users\adier\AppData\Roaming\Microsoft [2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell [2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools [2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Voisinage réseau [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Voisinage d'impression [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\AppData\Local\Temporary Internet Files [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\SendTo [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Recent [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Modèles [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Documents\Mes vidéos [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Documents\Mes images [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Mes documents [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Menu Démarrer [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Documents\Ma musique [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Local Settings [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\AppData\Local\Historique [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Cookies [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Application Data [2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\AppData\Local\Application Data [2018-06-10 18:10:16 | 000,000,000 | -H-D | C] -- C:\Users\adier\AppData [2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Temp [2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Microsoft Help [2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Microsoft [2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Roaming\Macromedia [2018-06-10 18:08:37 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared [2018-06-10 18:08:28 | 002,752,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll [2018-06-10 18:06:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2018-06-10 18:00:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy [2018-06-10 16:59:42 | 000,000,000 | -HSD | C] -- C:\Recovery [2018-06-10 16:49:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles [2018-06-10 16:49:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Microsoft [2018-06-10 16:45:42 | 013,570,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll [2018-06-10 16:45:42 | 012,500,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll [2018-06-10 16:45:42 | 001,559,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll [2018-06-10 16:45:42 | 001,307,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVPXENC.dll [2018-06-10 16:45:42 | 001,295,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVPXENC.dll [2018-06-10 16:45:42 | 001,034,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll [2018-06-10 16:45:42 | 001,017,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll [2018-06-10 16:45:42 | 000,861,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll [2018-06-10 16:45:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSHEIF.dll [2018-06-10 16:45:41 | 001,947,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll [2018-06-10 16:45:41 | 001,012,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll [2018-06-10 16:45:41 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll [2018-06-10 16:45:41 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll [2018-06-10 16:45:41 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll [2018-06-10 16:45:41 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSHEIF.dll [2018-06-10 16:45:40 | 023,862,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Hydrogen.dll [2018-06-10 16:45:40 | 019,525,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramCompositor.dll [2018-06-10 16:45:40 | 007,987,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll [2018-06-10 16:45:40 | 001,271,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloSI.PCShell.dll [2018-06-10 16:45:40 | 000,788,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DHolographicDisplay.dll [2018-06-10 16:45:40 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MixedReality.Broker.dll [2018-06-10 16:45:40 | 000,238,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloShellRuntime.dll [2018-06-10 16:45:40 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Analog.dll [2018-06-10 16:45:32 | 013,873,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2018-06-10 16:45:32 | 006,661,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll [2018-06-10 16:45:32 | 006,044,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll [2018-06-10 16:45:32 | 002,699,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2018-06-10 16:45:32 | 001,665,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll [2018-06-10 16:45:32 | 001,456,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcDesktopMonSvc.dll [2018-06-10 16:45:32 | 001,426,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxPackaging.dll [2018-06-10 16:45:32 | 001,380,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll [2018-06-10 16:45:32 | 001,235,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpbase.dll [2018-06-10 16:45:32 | 001,036,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll [2018-06-10 16:45:32 | 001,005,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll [2018-06-10 16:45:32 | 000,992,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Vpn.dll [2018-06-10 16:45:32 | 000,864,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmsys.cpl [2018-06-10 16:45:32 | 000,863,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasdlg.dll [2018-06-10 16:45:32 | 000,747,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SndVolSSO.dll [2018-06-10 16:45:32 | 000,653,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll [2018-06-10 16:45:32 | 000,581,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hhctrl.ocx [2018-06-10 16:45:32 | 000,560,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll [2018-06-10 16:45:32 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasplap.dll [2018-06-10 16:45:32 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWfdProvider.dll [2018-06-10 16:45:32 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Phoneutil.dll [2018-06-10 16:45:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallServiceTasks.dll [2018-06-10 16:45:32 | 000,101,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rmclient.dll [2018-06-10 16:45:32 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll [2018-06-10 16:45:32 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ApiSetHost.AppExecutionAlias.dll [2018-06-10 16:45:32 | 000,077,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CompPkgSup.dll [2018-06-10 16:45:31 | 002,366,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll [2018-06-10 16:45:31 | 001,665,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll [2018-06-10 16:45:31 | 001,649,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll [2018-06-10 16:45:31 | 000,947,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmsys.cpl [2018-06-10 16:45:31 | 000,899,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll [2018-06-10 16:45:31 | 000,804,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SndVolSSO.dll [2018-06-10 16:45:31 | 000,695,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hhctrl.ocx [2018-06-10 16:45:31 | 000,677,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HeadTrackerStorage.dll [2018-06-10 16:45:31 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RasMediaManager.dll [2018-06-10 16:45:31 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedPCCSP.dll [2018-06-10 16:45:31 | 000,088,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\crashdmp.sys [2018-06-10 16:45:30 | 008,623,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll [2018-06-10 16:45:30 | 000,941,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasdlg.dll [2018-06-10 16:45:30 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll [2018-06-10 16:45:30 | 000,835,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll [2018-06-10 16:45:30 | 000,759,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll [2018-06-10 16:45:30 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll [2018-06-10 16:45:30 | 000,486,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasplap.dll [2018-06-10 16:45:30 | 000,308,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll [2018-06-10 16:45:30 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUser.dll [2018-06-10 16:45:27 | 016,592,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2018-06-10 16:45:27 | 008,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll [2018-06-10 16:45:27 | 007,436,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll [2018-06-10 16:45:27 | 005,951,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll [2018-06-10 16:45:27 | 004,929,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll [2018-06-10 16:45:27 | 004,070,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll [2018-06-10 16:45:27 | 003,392,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2018-06-10 16:45:27 | 003,086,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll [2018-06-10 16:45:27 | 002,178,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll [2018-06-10 16:45:27 | 001,565,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxPackaging.dll [2018-06-10 16:45:27 | 001,534,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2018-06-10 16:45:27 | 001,421,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpbase.dll [2018-06-10 16:45:27 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll [2018-06-10 16:45:27 | 001,303,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Vpn.dll [2018-06-10 16:45:27 | 001,292,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe [2018-06-10 16:45:27 | 001,210,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll [2018-06-10 16:45:27 | 000,917,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll [2018-06-10 16:45:27 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2018-06-10 16:45:27 | 000,836,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll [2018-06-10 16:45:27 | 000,788,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll [2018-06-10 16:45:27 | 000,783,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyHrtfEnc.dll [2018-06-10 16:45:27 | 000,776,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll [2018-06-10 16:45:27 | 000,735,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll [2018-06-10 16:45:27 | 000,665,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll [2018-06-10 16:45:27 | 000,625,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll [2018-06-10 16:45:27 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs4.dll [2018-06-10 16:45:27 | 000,604,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\securekernel.exe [2018-06-10 16:45:27 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll [2018-06-10 16:45:27 | 000,585,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs3.dll [2018-06-10 16:45:27 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PerceptionSimulationExtensions.dll [2018-06-10 16:45:27 | 000,494,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WerFault.exe [2018-06-10 16:45:27 | 000,474,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs2.dll [2018-06-10 16:45:27 | 000,473,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll [2018-06-10 16:45:27 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs1.dll [2018-06-10 16:45:27 | 000,434,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WerFault.exe [2018-06-10 16:45:27 | 000,384,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Phoneutil.dll [2018-06-10 16:45:27 | 000,382,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\clfs.sys [2018-06-10 16:45:27 | 000,347,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll [2018-06-10 16:45:27 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.th.dll [2018-06-10 16:45:27 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win81.dll [2018-06-10 16:45:27 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wevtutil.exe [2018-06-10 16:45:27 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyMATEnc.dll [2018-06-10 16:45:27 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\HoloShellRuntime.dll [2018-06-10 16:45:27 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wevtutil.exe [2018-06-10 16:45:27 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2018-06-10 16:45:27 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win8rtm.dll [2018-06-10 16:45:27 | 000,131,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rmclient.dll [2018-06-10 16:45:27 | 000,130,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvsocket.sys [2018-06-10 16:45:27 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll [2018-06-10 16:45:27 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppHostRegistrationVerifier.exe [2018-06-10 16:45:27 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApiSetHost.AppExecutionAlias.dll [2018-06-10 16:45:27 | 000,105,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys [2018-06-10 16:45:27 | 000,089,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompPkgSup.dll [2018-06-10 16:45:27 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcimage.dll [2018-06-10 16:38:42 | 003,398,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe [2018-06-10 16:38:42 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsFilt.dll [2018-06-10 16:38:41 | 004,492,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe [2018-06-10 16:38:41 | 000,925,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsFilt.dll [2018-06-10 16:38:41 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XPSSHHDR.dll [2018-06-10 16:38:41 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XPSSHHDR.dll [2018-06-10 16:38:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer [2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies [2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies [2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild [2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild [2018-06-10 16:37:47 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll [2018-06-10 16:37:47 | 000,035,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe [2018-06-10 16:37:46 | 000,124,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll [2018-06-10 16:37:46 | 000,103,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2018-06-10 16:37:45 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll [2018-06-10 16:37:45 | 000,035,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe [2018-06-10 16:35:52 | 006,350,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsData0009.dll [2018-06-10 16:35:52 | 005,739,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\prm0009.dll [2018-06-10 16:35:52 | 002,629,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsLexicons0009.dll [2018-06-09 01:04:13 | 000,000,000 | ---D | C] -- C:\Camunda_Home [2018-06-07 22:13:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther [2018-06-01 02:46:00 | 000,000,000 | ---D | C] -- C:\Users\adier\Desktop\backup [2014-08-25 00:49:49 | 006,735,816 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_replication_as93.exe [2014-08-25 00:49:21 | 027,976,104 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_dbserver_as93.exe [2014-08-25 00:49:08 | 011,596,872 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_connectors_as93.exe [2014-08-25 00:48:57 | 007,413,576 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_edbplus_as93.exe [2014-08-25 00:48:46 | 008,099,752 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_mtk_as93.exe [2014-08-25 00:47:41 | 064,780,416 | ---- | C] (EnterpriseDB) -- C:\Users\adier\pem_client.exe [2014-08-25 00:47:27 | 013,841,144 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgbouncer9.3.exe [2014-08-25 00:47:16 | 011,480,448 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_sbp_as93.exe [2014-08-23 20:26:13 | 057,544,368 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_94.exe-20140823152710 [2014-08-23 20:26:13 | 056,287,640 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_94.exe [2014-08-23 20:24:38 | 056,552,816 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_93.exe [2014-08-23 20:24:38 | 054,726,880 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_93.exe-20140823152526 [2014-08-23 20:23:00 | 055,789,672 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_92.exe [2014-08-23 20:23:00 | 053,958,208 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_92.exe-20140823152349 [2014-08-23 20:21:33 | 053,293,336 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_91.exe [2014-08-23 20:21:33 | 050,609,952 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_91.exe-20140823152217 [2014-08-23 20:18:28 | 051,895,176 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_90.exe [2014-08-23 20:18:28 | 050,072,528 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_90.exe-20140823151910 [2014-08-23 20:17:49 | 043,754,240 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_84.exe [2014-08-23 20:16:46 | 035,072,224 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_xdb.exe [2014-08-23 20:16:24 | 024,802,288 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_updatemonitor.exe [2014-08-23 20:16:03 | 011,395,296 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_sqlprotect_pg91.exe [2014-08-23 20:16:03 | 010,918,640 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_sqlprotect_pg91.exe-20140823151612 [2014-08-23 20:15:58 | 006,382,424 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_slony_i_pg91.exe [2014-08-23 20:15:36 | 013,468,632 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_psqlodbc.exe [2014-08-23 20:15:36 | 012,812,240 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_psqlodbc.exe-20140823151546 [2014-08-23 20:15:28 | 007,177,744 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_phppgadmin.exe [2014-08-23 20:15:22 | 007,084,280 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgjdbc.exe [2014-08-23 20:15:09 | 014,490,424 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgbouncer.exe [2014-08-23 20:14:56 | 012,967,360 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgagent.exe [2014-08-23 20:14:41 | 006,200,448 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_sqlprofiler_pg91.exe [2014-08-23 20:14:41 | 006,199,288 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_sqlprofiler_pg91.exe-20140823151448 [2014-08-23 20:12:18 | 168,476,544 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_server.exe [2014-08-23 20:11:21 | 064,780,416 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_client.exe [2014-08-23 20:11:07 | 013,558,376 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_agent.exe [2014-08-23 20:11:00 | 007,711,840 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_npgsql.exe [2014-08-23 20:10:45 | 017,175,824 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_mtk.exe [2014-08-23 20:10:10 | 039,414,096 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_apachephp.exe ========== Files - Modified Within 30 Days ========== [2018-06-24 15:47:50 | 001,766,594 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2018-06-24 15:47:50 | 000,791,208 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat [2018-06-24 15:47:50 | 000,700,140 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2018-06-24 15:47:50 | 000,149,704 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat [2018-06-24 15:47:50 | 000,133,080 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2018-06-24 15:42:37 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2018-06-24 15:40:35 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2018-06-24 15:39:42 | 000,065,536 | ---- | M] () -- C:\WINDOWS\SysNative\spu_storage.bin [2018-06-24 15:22:56 | 000,001,373 | ---- | M] () -- C:\Users\adier\Desktop\Trend Micro Antivirus+.lnk [2018-06-24 15:19:05 | 000,000,059 | ---- | M] () -- C:\WINDOWS\SysNative\SupportTool.exe.bat [2018-06-24 14:46:53 | 000,000,036 | ---- | M] () -- C:\Users\adier\AppData\Local\housecall.guid.cache [2018-06-24 13:37:04 | 000,000,348 | ---- | M] () -- C:\WINDOWS\tasks\HPCeeScheduleForreida.job [2018-06-21 15:54:03 | 000,000,600 | ---- | M] () -- C:\Users\adier\AppData\Local\PUTTY.RND [2018-06-19 17:09:15 | 000,089,275 | ---- | M] () -- C:\Users\adier\Documents\1.png [2018-06-14 00:03:31 | 000,002,265 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2018-06-13 23:09:51 | 000,517,816 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2018-06-13 00:49:48 | 133,315,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MRT-KB890830.exe [2018-06-12 02:07:49 | 000,001,970 | ---- | M] () -- C:\Users\Public\Desktop\Garmin Express.lnk [2018-06-10 18:41:46 | 000,001,417 | ---- | M] () -- C:\Users\adier\Desktop\Microsoft Edge.lnk [2018-06-10 18:40:15 | 000,002,365 | ---- | M] () -- C:\Users\adier\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2018-06-10 18:36:41 | 000,011,433 | ---- | M] () -- C:\WINDOWS\diagwrn.xml [2018-06-10 18:36:41 | 000,011,433 | ---- | M] () -- C:\WINDOWS\diagerr.xml [2018-06-10 18:27:01 | 000,023,208 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat [2018-06-10 16:45:42 | 013,570,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll [2018-06-10 16:45:42 | 012,500,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll [2018-06-10 16:45:42 | 001,559,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll [2018-06-10 16:45:42 | 001,307,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVPXENC.dll [2018-06-10 16:45:42 | 001,295,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVPXENC.dll [2018-06-10 16:45:42 | 001,034,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll [2018-06-10 16:45:42 | 001,017,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll [2018-06-10 16:45:42 | 000,861,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll [2018-06-10 16:45:42 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSHEIF.dll [2018-06-10 16:45:41 | 001,947,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll [2018-06-10 16:45:41 | 001,012,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll [2018-06-10 16:45:41 | 000,726,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll [2018-06-10 16:45:41 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll [2018-06-10 16:45:41 | 000,154,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll [2018-06-10 16:45:41 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSHEIF.dll [2018-06-10 16:45:40 | 023,862,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Hydrogen.dll [2018-06-10 16:45:40 | 019,525,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramCompositor.dll [2018-06-10 16:45:40 | 007,987,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll [2018-06-10 16:45:40 | 001,271,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloSI.PCShell.dll [2018-06-10 16:45:40 | 000,788,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DHolographicDisplay.dll [2018-06-10 16:45:40 | 000,256,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MixedReality.Broker.dll [2018-06-10 16:45:40 | 000,238,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloShellRuntime.dll [2018-06-10 16:45:40 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Analog.dll [2018-06-10 16:45:40 | 000,018,716 | ---- | M] () -- C:\WINDOWS\SysWow64\srms-apr.dat [2018-06-10 16:45:32 | 013,873,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll [2018-06-10 16:45:32 | 006,661,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll [2018-06-10 16:45:32 | 006,044,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll [2018-06-10 16:45:32 | 002,699,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll [2018-06-10 16:45:32 | 001,665,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll [2018-06-10 16:45:32 | 001,456,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcDesktopMonSvc.dll [2018-06-10 16:45:32 | 001,426,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxPackaging.dll [2018-06-10 16:45:32 | 001,380,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll [2018-06-10 16:45:32 | 001,235,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpbase.dll [2018-06-10 16:45:32 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll [2018-06-10 16:45:32 | 001,005,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll [2018-06-10 16:45:32 | 000,992,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Vpn.dll [2018-06-10 16:45:32 | 000,864,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmsys.cpl [2018-06-10 16:45:32 | 000,863,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasdlg.dll [2018-06-10 16:45:32 | 000,747,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SndVolSSO.dll [2018-06-10 16:45:32 | 000,653,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll [2018-06-10 16:45:32 | 000,581,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hhctrl.ocx [2018-06-10 16:45:32 | 000,560,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll [2018-06-10 16:45:32 | 000,461,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasplap.dll [2018-06-10 16:45:32 | 000,356,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWfdProvider.dll [2018-06-10 16:45:32 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Phoneutil.dll [2018-06-10 16:45:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallServiceTasks.dll [2018-06-10 16:45:32 | 000,101,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rmclient.dll [2018-06-10 16:45:32 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll [2018-06-10 16:45:32 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ApiSetHost.AppExecutionAlias.dll [2018-06-10 16:45:32 | 000,077,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CompPkgSup.dll [2018-06-10 16:45:32 | 000,018,716 | ---- | M] () -- C:\WINDOWS\SysNative\srms-apr.dat [2018-06-10 16:45:31 | 002,366,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll [2018-06-10 16:45:31 | 001,665,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll [2018-06-10 16:45:31 | 001,649,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll [2018-06-10 16:45:31 | 000,947,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmsys.cpl [2018-06-10 16:45:31 | 000,899,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll [2018-06-10 16:45:31 | 000,804,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SndVolSSO.dll [2018-06-10 16:45:31 | 000,695,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hhctrl.ocx [2018-06-10 16:45:31 | 000,677,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HeadTrackerStorage.dll [2018-06-10 16:45:31 | 000,344,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RasMediaManager.dll [2018-06-10 16:45:31 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedPCCSP.dll [2018-06-10 16:45:31 | 000,088,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\crashdmp.sys [2018-06-10 16:45:30 | 008,623,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll [2018-06-10 16:45:30 | 000,941,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasdlg.dll [2018-06-10 16:45:30 | 000,933,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll [2018-06-10 16:45:30 | 000,835,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll [2018-06-10 16:45:30 | 000,759,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll [2018-06-10 16:45:30 | 000,543,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll [2018-06-10 16:45:30 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasplap.dll [2018-06-10 16:45:30 | 000,308,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll [2018-06-10 16:45:30 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUser.dll [2018-06-10 16:45:27 | 016,592,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll [2018-06-10 16:45:27 | 008,188,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll [2018-06-10 16:45:27 | 007,436,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll [2018-06-10 16:45:27 | 005,951,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll [2018-06-10 16:45:27 | 004,929,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll [2018-06-10 16:45:27 | 004,070,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll [2018-06-10 16:45:27 | 003,392,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll [2018-06-10 16:45:27 | 003,086,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll [2018-06-10 16:45:27 | 002,178,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll [2018-06-10 16:45:27 | 001,953,280 | ---- | M] () -- C:\WINDOWS\SysNative\rdpnano.dll [2018-06-10 16:45:27 | 001,565,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxPackaging.dll [2018-06-10 16:45:27 | 001,534,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll [2018-06-10 16:45:27 | 001,421,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpbase.dll [2018-06-10 16:45:27 | 001,371,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll [2018-06-10 16:45:27 | 001,303,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Vpn.dll [2018-06-10 16:45:27 | 001,292,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe [2018-06-10 16:45:27 | 001,210,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll [2018-06-10 16:45:27 | 000,917,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll [2018-06-10 16:45:27 | 000,847,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll [2018-06-10 16:45:27 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll [2018-06-10 16:45:27 | 000,788,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll [2018-06-10 16:45:27 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyHrtfEnc.dll [2018-06-10 16:45:27 | 000,776,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll [2018-06-10 16:45:27 | 000,735,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll [2018-06-10 16:45:27 | 000,665,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll [2018-06-10 16:45:27 | 000,625,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll [2018-06-10 16:45:27 | 000,613,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs4.dll [2018-06-10 16:45:27 | 000,604,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\securekernel.exe [2018-06-10 16:45:27 | 000,596,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll [2018-06-10 16:45:27 | 000,585,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs3.dll [2018-06-10 16:45:27 | 000,553,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PerceptionSimulationExtensions.dll [2018-06-10 16:45:27 | 000,494,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WerFault.exe [2018-06-10 16:45:27 | 000,474,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs2.dll [2018-06-10 16:45:27 | 000,473,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll [2018-06-10 16:45:27 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs1.dll [2018-06-10 16:45:27 | 000,434,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WerFault.exe [2018-06-10 16:45:27 | 000,384,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Phoneutil.dll [2018-06-10 16:45:27 | 000,382,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\clfs.sys [2018-06-10 16:45:27 | 000,347,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll [2018-06-10 16:45:27 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.th.dll [2018-06-10 16:45:27 | 000,241,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win81.dll [2018-06-10 16:45:27 | 000,236,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wevtutil.exe [2018-06-10 16:45:27 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyMATEnc.dll [2018-06-10 16:45:27 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\HoloShellRuntime.dll [2018-06-10 16:45:27 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wevtutil.exe [2018-06-10 16:45:27 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll [2018-06-10 16:45:27 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win8rtm.dll [2018-06-10 16:45:27 | 000,131,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rmclient.dll [2018-06-10 16:45:27 | 000,130,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvsocket.sys [2018-06-10 16:45:27 | 000,119,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll [2018-06-10 16:45:27 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppHostRegistrationVerifier.exe [2018-06-10 16:45:27 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApiSetHost.AppExecutionAlias.dll [2018-06-10 16:45:27 | 000,105,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys [2018-06-10 16:45:27 | 000,089,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompPkgSup.dll [2018-06-10 16:45:27 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcimage.dll [2018-06-10 16:38:42 | 003,398,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe [2018-06-10 16:38:42 | 000,575,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsFilt.dll [2018-06-10 16:38:42 | 000,076,060 | ---- | M] () -- C:\WINDOWS\SysWow64\xpsrchvw.xml [2018-06-10 16:38:41 | 004,492,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe [2018-06-10 16:38:41 | 000,925,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsFilt.dll [2018-06-10 16:38:41 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XPSSHHDR.dll [2018-06-10 16:38:41 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XPSSHHDR.dll [2018-06-10 16:38:41 | 000,076,060 | ---- | M] () -- C:\WINDOWS\SysNative\xpsrchvw.xml [2018-06-10 16:37:47 | 000,778,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll [2018-06-10 16:37:47 | 000,103,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll [2018-06-10 16:37:47 | 000,035,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe [2018-06-10 16:37:46 | 000,124,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll [2018-06-10 16:37:45 | 001,166,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll [2018-06-10 16:37:45 | 000,035,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe [2018-06-10 16:35:53 | 002,629,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsLexicons0009.dll [2018-06-10 16:35:52 | 006,350,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsData0009.dll [2018-06-10 16:35:52 | 005,739,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\prm0009.dll [2018-06-08 20:07:06 | 000,506,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe [2018-06-08 20:05:19 | 000,094,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll [2018-06-08 20:02:55 | 000,661,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GenValObj.exe [2018-06-08 20:02:19 | 001,634,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll [2018-06-08 20:01:46 | 002,395,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVCORE.DLL [2018-06-08 20:01:11 | 001,046,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll [2018-06-08 19:48:47 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll [2018-06-08 19:46:37 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll [2018-06-08 19:45:54 | 004,392,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll [2018-06-08 19:45:53 | 000,808,960 | ---- | M] () -- C:\WINDOWS\SysNative\MBR2GPT.EXE [2018-06-08 19:45:39 | 001,560,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdt.exe [2018-06-08 19:44:44 | 000,285,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidcredprov.dll [2018-06-08 19:44:40 | 000,340,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcGenral.dll [2018-06-08 19:44:27 | 000,625,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll [2018-06-08 19:44:03 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll [2018-06-08 19:43:24 | 001,719,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dui70.dll [2018-06-08 19:43:20 | 001,659,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsPrint.dll [2018-06-08 19:43:11 | 003,640,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstsc.exe [2018-06-08 19:43:06 | 001,543,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll [2018-06-08 19:43:05 | 001,364,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvruserservice.dll [2018-06-08 19:42:57 | 001,605,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll [2018-06-08 19:42:50 | 003,999,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll [2018-06-08 19:42:39 | 003,653,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys [2018-06-08 19:42:21 | 002,084,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl [2018-06-08 19:42:01 | 000,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcext.dll [2018-06-08 19:41:45 | 000,878,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CPFilters.dll [2018-06-08 19:41:22 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\easwrt.dll [2018-06-08 19:41:16 | 000,758,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll [2018-06-08 19:41:13 | 000,577,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SppExtComObj.Exe [2018-06-08 19:41:06 | 002,019,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll [2018-06-08 19:41:02 | 001,180,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll [2018-06-08 19:40:48 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DXP.dll [2018-06-08 18:04:16 | 001,454,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll [2018-06-08 17:58:40 | 000,917,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll [2018-06-08 17:50:10 | 001,508,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdt.exe [2018-06-08 17:47:51 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcredprov.dll [2018-06-08 17:47:50 | 001,032,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsPrint.dll [2018-06-08 17:47:31 | 002,895,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys [2018-06-08 17:47:30 | 003,492,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll [2018-06-08 17:47:19 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll [2018-06-08 17:47:12 | 001,462,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dui70.dll [2018-06-08 17:46:55 | 000,908,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll [2018-06-08 17:46:41 | 002,016,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl [2018-06-08 17:46:35 | 003,444,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe [2018-06-08 17:45:51 | 002,401,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll [2018-06-08 17:06:33 | 000,976,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Spectrum.exe [2018-06-08 17:05:59 | 000,944,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.Internal.dll [2018-06-08 17:05:24 | 001,008,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MixedRealityCapture.dll [2018-06-08 15:00:19 | 000,658,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll [2018-06-08 15:00:16 | 000,868,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MixedRealityCapture.dll [2018-06-08 11:37:27 | 002,417,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll [2018-06-08 11:35:09 | 001,613,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3D12.dll [2018-06-08 11:34:40 | 000,748,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll [2018-06-08 11:34:21 | 001,299,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3D12.dll [2018-06-08 11:31:54 | 003,180,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll [2018-06-08 11:31:39 | 007,900,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll [2018-06-08 11:31:08 | 000,029,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\uefi.sys [2018-06-08 10:34:40 | 001,140,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi [2018-06-08 10:34:11 | 000,983,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe [2018-06-08 10:33:58 | 001,034,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe [2018-06-08 10:33:53 | 001,213,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe [2018-06-08 10:33:24 | 000,272,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave.dll [2018-06-08 10:33:22 | 000,269,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave_secure.dll [2018-06-08 10:31:16 | 000,226,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Ucx01000.sys [2018-06-08 10:31:07 | 001,012,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe [2018-06-08 10:31:00 | 001,174,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe [2018-06-08 10:30:55 | 000,491,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll [2018-06-08 10:30:55 | 000,134,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll [2018-06-08 10:30:53 | 001,063,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi [2018-06-08 10:30:52 | 000,567,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe [2018-06-08 10:30:50 | 000,565,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS [2018-06-08 10:30:49 | 000,194,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\skci.dll [2018-06-08 10:30:41 | 000,723,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll [2018-06-08 10:30:37 | 000,527,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe [2018-06-08 10:30:32 | 001,798,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll [2018-06-08 10:30:31 | 001,017,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2adec.dll [2018-06-08 10:30:15 | 000,722,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll [2018-06-08 10:30:08 | 003,296,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll [2018-06-08 10:30:06 | 001,363,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll [2018-06-08 10:30:03 | 000,137,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcrypt.dll [2018-06-08 10:30:01 | 009,148,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe [2018-06-08 10:29:45 | 002,546,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UpdateAgent.dll [2018-06-08 10:29:39 | 000,164,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wfplwfs.sys [2018-06-08 10:29:38 | 001,946,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll [2018-06-08 10:29:36 | 000,594,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe [2018-06-08 10:29:35 | 001,934,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll [2018-06-08 10:29:34 | 001,792,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll [2018-06-08 10:29:33 | 001,457,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi [2018-06-08 10:29:33 | 001,209,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll [2018-06-08 10:29:32 | 004,970,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll [2018-06-08 10:29:31 | 000,413,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll [2018-06-08 10:29:26 | 006,817,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll [2018-06-08 10:29:25 | 002,570,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll [2018-06-08 10:29:25 | 002,371,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll [2018-06-08 10:29:23 | 000,792,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys [2018-06-08 10:29:22 | 002,564,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll [2018-06-08 10:29:22 | 001,921,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refs.sys [2018-06-08 10:29:21 | 004,403,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll [2018-06-08 10:29:20 | 002,590,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVDECOD.DLL [2018-06-08 10:29:20 | 001,288,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll [2018-06-08 10:29:20 | 001,097,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll [2018-06-08 10:29:20 | 000,678,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll [2018-06-08 10:29:20 | 000,057,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kernel.appcore.dll [2018-06-08 10:29:19 | 001,611,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll [2018-06-08 10:29:19 | 000,413,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys [2018-06-08 10:29:18 | 000,416,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAudDecMFT.dll [2018-06-08 10:29:17 | 001,784,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll [2018-06-08 10:29:17 | 001,112,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfds.dll [2018-06-08 10:29:15 | 003,283,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreUIComponents.dll [2018-06-08 10:29:15 | 001,190,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll [2018-06-08 10:29:15 | 001,148,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll [2018-06-08 10:29:15 | 000,885,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll [2018-06-08 10:29:13 | 001,364,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webservices.dll [2018-06-08 10:29:11 | 007,520,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll [2018-06-08 10:29:11 | 000,659,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StateRepository.Core.dll [2018-06-08 10:29:11 | 000,266,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll [2018-06-08 10:29:10 | 000,260,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll [2018-06-08 10:29:07 | 001,150,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll [2018-06-08 10:29:07 | 000,084,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageOverlayUtil.dll [2018-06-08 10:29:06 | 000,945,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys [2018-06-08 10:29:04 | 000,313,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsensorgroup.dll [2018-06-08 10:29:04 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vertdll.dll [2018-06-08 10:29:03 | 001,258,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe [2018-06-08 10:13:12 | 025,846,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll [2018-06-08 10:12:04 | 000,861,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2adec.dll [2018-06-08 10:11:59 | 000,550,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll [2018-06-08 10:11:05 | 001,461,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll [2018-06-08 10:10:35 | 002,479,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll [2018-06-08 10:10:32 | 000,880,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll [2018-06-08 10:10:31 | 000,457,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAudDecMFT.dll [2018-06-08 10:10:25 | 002,331,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll [2018-06-08 10:10:19 | 001,397,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVP9DEC.dll [2018-06-08 10:10:09 | 002,307,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVDECOD.DLL [2018-06-08 10:09:55 | 000,356,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcryptprimitives.dll [2018-06-08 10:09:54 | 000,553,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll [2018-06-08 10:09:51 | 001,077,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webservices.dll [2018-06-08 10:09:48 | 006,569,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll [2018-06-08 10:09:47 | 004,788,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll [2018-06-08 10:09:46 | 002,535,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll [2018-06-08 10:09:44 | 001,380,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll [2018-06-08 10:09:44 | 001,020,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll [2018-06-08 10:09:43 | 006,527,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll [2018-06-08 10:09:43 | 004,469,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll [2018-06-08 10:09:43 | 001,709,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll [2018-06-08 10:09:43 | 000,988,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll [2018-06-08 10:09:41 | 002,486,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreUIComponents.dll [2018-06-08 10:09:41 | 000,770,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfds.dll [2018-06-08 10:09:40 | 000,567,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll [2018-06-08 10:09:40 | 000,050,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kernel.appcore.dll [2018-06-08 10:09:37 | 001,129,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll [2018-06-08 10:09:32 | 000,607,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll [2018-06-08 10:09:31 | 000,568,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryPS.dll [2018-06-08 10:09:31 | 000,064,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LanguageOverlayUtil.dll [2018-06-08 10:04:02 | 004,706,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll [2018-06-08 10:03:35 | 022,005,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll [2018-06-08 10:03:34 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryCore.dll [2018-06-08 10:03:12 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallServiceTasks.dll [2018-06-08 10:03:07 | 000,906,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.PhoneNumberFormatting.dll [2018-06-08 10:02:51 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usoapi.dll [2018-06-08 10:02:35 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edpnotify.exe [2018-06-08 10:02:00 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerCookies.exe [2018-06-08 10:01:56 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerCsp.dll [2018-06-08 10:01:54 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserexport.exe [2018-06-08 10:01:46 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tbauth.dll [2018-06-08 10:01:36 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidparse.sys [2018-06-08 10:01:30 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FSClient.dll [2018-06-08 10:01:10 | 002,961,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll [2018-06-08 10:01:07 | 000,209,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll [2018-06-08 10:01:03 | 004,563,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll [2018-06-08 10:01:01 | 000,294,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TDLMigration.dll [2018-06-08 10:00:55 | 001,285,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll [2018-06-08 10:00:30 | 000,329,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovs.dll [2018-06-08 10:00:23 | 004,372,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeContent.dll [2018-06-08 10:00:19 | 003,320,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll [2018-06-08 10:00:19 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManagerClient.dll [2018-06-08 10:00:02 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dssvc.dll [2018-06-08 10:00:01 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SIHClient.exe [2018-06-08 09:59:55 | 000,564,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll [2018-06-08 09:59:47 | 000,456,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDEServer.exe [2018-06-08 09:59:43 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhosdeployment.dll [2018-06-08 09:59:39 | 001,318,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ISM.dll [2018-06-08 09:59:32 | 004,867,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll [2018-06-08 09:59:20 | 006,032,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll [2018-06-08 09:59:19 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryUpgrade.dll [2018-06-08 09:59:09 | 003,392,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll [2018-06-08 09:59:09 | 000,673,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FrameServer.dll [2018-06-08 09:58:58 | 000,894,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll [2018-06-08 09:58:51 | 000,266,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManager.dll [2018-06-08 09:58:46 | 000,781,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys [2018-06-08 09:58:41 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerCookies.exe [2018-06-08 09:58:40 | 000,898,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll [2018-06-08 09:58:17 | 000,239,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FSClient.dll [2018-06-08 09:58:07 | 007,581,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll [2018-06-08 09:58:05 | 000,813,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll [2018-06-08 09:58:00 | 001,676,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreShell.dll [2018-06-08 09:57:57 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tbauth.dll [2018-06-08 09:57:51 | 000,150,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryUpgrade.dll [2018-06-08 09:57:20 | 001,708,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSPhotography.dll [2018-06-08 09:57:19 | 001,485,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallService.dll [2018-06-08 09:57:17 | 002,172,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll [2018-06-08 09:57:17 | 000,310,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll [2018-06-08 09:57:01 | 000,483,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll [2018-06-08 09:57:00 | 003,348,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll [2018-06-08 09:56:52 | 005,780,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll [2018-06-08 09:56:52 | 000,684,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll [2018-06-08 09:56:49 | 004,336,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll [2018-06-08 09:56:49 | 000,264,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovs.dll [2018-06-08 09:56:46 | 001,395,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll [2018-06-08 09:56:42 | 001,550,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll [2018-06-08 09:56:37 | 000,858,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll [2018-06-08 09:56:36 | 001,361,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSPhotography.dll [2018-06-08 09:56:26 | 002,900,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll [2018-06-08 09:56:24 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll [2018-06-08 09:56:23 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.BackgroundMediaPlayer.dll [2018-06-08 09:56:23 | 000,331,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll [2018-06-08 09:56:21 | 000,908,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSMPEG2ENC.DLL [2018-06-08 09:56:20 | 000,916,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll [2018-06-08 09:56:17 | 000,615,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll [2018-06-08 09:56:14 | 002,364,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpcServices.dll [2018-06-08 09:56:09 | 000,871,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.BackgroundMediaPlayback.dll [2018-06-08 09:56:08 | 000,715,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll [2018-06-08 09:56:01 | 003,293,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll [2018-06-08 09:56:01 | 000,466,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll [2018-06-08 09:55:57 | 001,242,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll [2018-06-08 09:55:54 | 001,192,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll [2018-06-08 09:55:48 | 001,171,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll [2018-06-08 09:55:41 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll [2018-06-08 09:55:41 | 000,401,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll [2018-06-08 09:55:40 | 001,070,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll [2018-06-08 09:55:34 | 002,236,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys [2018-06-08 09:55:31 | 000,849,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.MediaPlayer.dll [2018-06-08 09:55:28 | 000,630,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll [2018-06-08 09:55:26 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll [2018-06-08 09:55:25 | 002,248,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll [2018-06-08 09:55:13 | 001,371,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll [2018-06-08 09:55:12 | 000,776,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll [2018-06-08 09:55:04 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppReadiness.dll [2018-06-08 09:55:01 | 000,652,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActivationManager.dll [2018-06-08 09:55:00 | 002,061,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll [2018-06-08 09:54:59 | 001,586,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll [2018-06-08 09:54:58 | 000,842,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll [2018-06-08 09:54:57 | 000,646,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll [2018-06-08 09:54:53 | 000,505,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgeIso.dll [2018-06-08 09:54:52 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll [2018-06-08 09:54:51 | 000,857,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPEG2ENC.DLL [2018-06-08 09:54:51 | 000,375,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll [2018-06-08 09:54:49 | 001,348,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpcServices.dll [2018-06-08 09:54:26 | 000,729,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FlightSettings.dll [2018-06-08 09:54:25 | 002,789,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll [2018-06-08 09:54:22 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll [2018-06-08 09:54:20 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll [2018-06-08 09:54:13 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAC3ENC.DLL [2018-06-08 09:54:12 | 000,593,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll [2018-06-08 09:54:07 | 000,950,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll [2018-06-08 09:54:04 | 000,999,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll [2018-06-08 09:53:59 | 000,873,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll [2018-06-08 09:53:57 | 000,677,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll [2018-06-08 09:53:53 | 001,108,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallService.dll [2018-06-08 09:53:47 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.BackgroundMediaPlayback.dll [2018-06-08 09:53:45 | 001,675,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll [2018-06-08 09:53:27 | 001,466,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll [2018-06-08 09:53:19 | 000,528,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll [2018-06-08 09:53:15 | 000,669,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll [2018-06-08 08:41:12 | 000,001,310 | ---- | M] () -- C:\WINDOWS\SysNative\tcbres.wim [2018-06-06 19:57:40 | 003,733,320 | ---- | M] () -- C:\WINDOWS\SysNative\Windows.Mirage.dll [2018-06-06 05:20:40 | 002,841,312 | ---- | M] () -- C:\WINDOWS\SysWow64\Windows.Mirage.dll [2018-06-06 00:29:25 | 000,835,056 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe [2018-06-06 00:29:25 | 000,179,704 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl [2018-06-05 17:20:47 | 000,000,951 | ---- | M] () -- C:\Users\adier\Desktop\TouchPad - Raccourci.lnk [2018-06-05 17:19:59 | 000,000,096 | ---- | M] () -- C:\Users\adier\Desktop\TouchPad.bat [2018-06-04 23:35:19 | 000,086,132 | ---- | M] () -- C:\Users\adier\Desktop\Tree.javaBackup [2018-06-02 15:03:50 | 000,313,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdFilter.sys [2018-06-02 15:03:50 | 000,061,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdNisDrv.sys [2018-06-02 15:03:49 | 000,046,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdBoot.sys [2018-06-02 00:24:40 | 000,713,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVideoDSP.dll [2018-06-01 23:54:24 | 001,825,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.dll [2018-06-01 00:13:54 | 000,337,385 | ---- | M] () -- C:\Users\adier\Desktop\plan_3.png [2018-05-31 23:18:50 | 000,247,981 | ---- | M] () -- C:\Users\adier\Desktop\plan_2.png [2018-05-31 16:48:09 | 000,333,762 | ---- | M] () -- C:\Users\adier\Desktop\plan_1.png [2018-05-31 01:05:46 | 000,231,892 | ---- | M] () -- C:\Users\adier\Desktop\plan.png ========== Files Created - No Company Name ========== [2018-06-24 15:22:37 | 000,001,373 | ---- | C] () -- C:\Users\adier\Desktop\Trend Micro Antivirus+.lnk [2018-06-24 15:19:05 | 000,000,059 | ---- | C] () -- C:\WINDOWS\SysNative\SupportTool.exe.bat [2018-06-24 14:46:52 | 000,000,036 | ---- | C] () -- C:\Users\adier\AppData\Local\housecall.guid.cache [2018-06-19 17:09:15 | 000,089,275 | ---- | C] () -- C:\Users\adier\Documents\1.png [2018-06-13 00:41:02 | 003,733,320 | ---- | C] () -- C:\WINDOWS\SysNative\Windows.Mirage.dll [2018-06-13 00:40:53 | 002,841,312 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Mirage.dll [2018-06-13 00:40:28 | 000,808,960 | ---- | C] () -- C:\WINDOWS\SysNative\MBR2GPT.EXE [2018-06-13 00:40:26 | 000,001,310 | ---- | C] () -- C:\WINDOWS\SysNative\tcbres.wim [2018-06-12 02:07:49 | 000,001,970 | ---- | C] () -- C:\Users\Public\Desktop\Garmin Express.lnk [2018-06-10 18:41:46 | 000,001,417 | ---- | C] () -- C:\Users\adier\Desktop\Microsoft Edge.lnk [2018-06-10 18:35:33 | 000,011,433 | ---- | C] () -- C:\WINDOWS\diagwrn.xml [2018-06-10 18:35:33 | 000,011,433 | ---- | C] () -- C:\WINDOWS\diagerr.xml [2018-06-10 18:21:00 | 001,766,594 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2018-06-10 18:13:45 | 000,001,576 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2018-06-10 18:10:16 | 000,001,105 | ---- | C] () -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk [2018-06-10 18:10:16 | 000,000,352 | ---- | C] () -- C:\Users\adier\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2018-06-10 18:10:16 | 000,000,334 | ---- | C] () -- C:\Users\adier\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2018-06-10 18:00:27 | 000,517,816 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2018-06-10 16:50:37 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2018-06-10 16:45:40 | 000,018,716 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr.dat [2018-06-10 16:45:32 | 000,018,716 | ---- | C] () -- C:\WINDOWS\SysNative\srms-apr.dat [2018-06-10 16:45:27 | 001,953,280 | ---- | C] () -- C:\WINDOWS\SysNative\rdpnano.dll [2018-06-10 16:38:42 | 000,076,060 | ---- | C] () -- C:\WINDOWS\SysWow64\xpsrchvw.xml [2018-06-10 16:38:41 | 000,076,060 | ---- | C] () -- C:\WINDOWS\SysNative\xpsrchvw.xml [2018-06-05 17:20:36 | 000,000,951 | ---- | C] () -- C:\Users\adier\Desktop\TouchPad - Raccourci.lnk [2018-06-05 17:19:58 | 000,000,096 | ---- | C] () -- C:\Users\adier\Desktop\TouchPad.bat [2018-06-04 23:35:19 | 000,086,132 | ---- | C] () -- C:\Users\adier\Desktop\Tree.javaBackup [2018-06-01 00:13:53 | 000,337,385 | ---- | C] () -- C:\Users\adier\Desktop\plan_3.png [2018-05-31 23:18:49 | 000,247,981 | ---- | C] () -- C:\Users\adier\Desktop\plan_2.png [2018-05-31 16:48:09 | 000,333,762 | ---- | C] () -- C:\Users\adier\Desktop\plan_1.png [2018-05-31 01:05:46 | 000,231,892 | ---- | C] () -- C:\Users\adier\Desktop\plan.png [2018-04-12 00:38:34 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2018-04-12 00:38:34 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2018-04-12 00:34:55 | 000,518,144 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2018-04-12 00:34:50 | 000,054,272 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2018-04-12 00:34:49 | 000,002,404 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini [2018-04-12 00:34:47 | 000,364,200 | ---- | C] () -- C:\WINDOWS\SysWow64\InputHost.dll [2018-04-12 00:34:46 | 003,575,808 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.Analysis.dll [2018-04-12 00:34:46 | 000,025,600 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.WARP.JITService.exe [2018-04-12 00:34:45 | 000,329,216 | ---- | C] () -- C:\WINDOWS\SysWow64\ssdm.dll [2018-04-12 00:34:45 | 000,223,232 | ---- | C] () -- C:\WINDOWS\SysWow64\HeatCore.dll [2018-04-12 00:34:45 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat [2018-04-12 00:34:45 | 000,111,616 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowsDefaultHeatProcessor.dll [2018-04-12 00:34:45 | 000,055,808 | ---- | C] () -- C:\WINDOWS\SysWow64\xboxgipsynthetic.dll [2018-04-12 00:34:36 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2018-04-12 00:34:30 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [2017-08-10 00:35:00 | 000,000,087 | ---- | C] () -- C:\Users\reida\.jboss-cli-history [2017-08-10 00:35:00 | 000,000,000 | ---- | C] () -- C:\Users\reida\.aesh_aliases [2017-07-27 00:00:58 | 006,990,107 | ---- | C] () -- C:\Users\adier\Video_1501113658.wmv [2017-06-06 00:30:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2017-04-23 04:18:08 | 000,004,557 | ---- | C] () -- C:\Users\reida\.bash_history [2017-04-21 17:13:47 | 000,000,600 | ---- | C] () -- C:\Users\adier\AppData\Roaming\winscp.rnd [2017-04-21 16:32:23 | 000,000,050 | ---- | C] () -- C:\Users\reida\.j2e [2017-04-13 22:26:53 | 000,000,746 | ---- | C] () -- C:\Users\adier\AppData\Local\recently-used.xbel [2017-04-05 15:20:36 | 000,000,066 | ---- | C] () -- C:\Users\reida\.gitconfig [2017-03-25 22:05:24 | 000,000,600 | ---- | C] () -- C:\Users\adier\AppData\Local\PUTTY.RND [2017-03-24 21:24:35 | 000,007,605 | ---- | C] () -- C:\Users\adier\AppData\Local\Resmon.ResmonCfg [2017-03-22 02:49:32 | 000,000,347 | ---- | C] () -- C:\Users\adier\MyProject.komodoproject [2017-03-21 18:11:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MinGW.INI [2017-03-21 01:38:48 | 002,525,184 | ---- | C] () -- C:\Users\adier\prevayler.EAP [2014-12-14 02:32:24 | 000,000,144 | ---- | C] () -- C:\Users\reida\.appletviewer [2014-08-23 20:17:16 | 021,017,439 | ---- | C] () -- C:\Users\adier\postgis_2_0_pg91.exe [2014-08-23 20:17:16 | 018,184,980 | ---- | C] () -- C:\Users\adier\postgis_2_0_pg91.exe-20140823151731 [2014-06-06 22:50:41 | 000,000,096 | ---- | C] () -- C:\Users\reida\.asadminpass ========== ZeroAccess Check ========== [2018-06-12 02:08:05 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\windows.storage.dll -- [2018-06-10 16:45:27 | 007,436,632 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\windows.storage.dll -- [2018-06-10 16:45:32 | 006,044,104 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2018-04-12 00:34:40 | 000,973,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2018-04-12 00:34:55 | 000,785,408 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2018-04-12 00:34:40 | 000,524,288 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== LOP Check ========== [2017-04-21 19:01:08 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\ActiveState [2017-07-28 14:22:03 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\AMD [2018-02-14 17:18:04 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\AVAST Software [2018-02-14 17:15:00 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\AVG [2017-03-20 17:03:06 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\calibre [2017-08-09 00:22:15 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\camunda-modeler [2017-03-04 01:14:13 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Base64 [2017-03-04 01:14:10 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft MAC Scanner Pro [2017-03-04 01:14:13 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Packet Builder [2017-03-04 01:14:12 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Packet Player [2017-03-04 01:14:11 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Ping Tool [2017-03-25 01:03:30 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2017-08-01 02:05:54 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Dashlane [2018-01-16 14:35:49 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Dev-Cpp [2017-04-21 17:00:57 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Far Manager [2018-06-24 15:48:17 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\FileZilla [2018-02-01 00:32:56 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Garmin [2017-04-09 01:54:55 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Innovative Solutions [2017-08-01 01:27:22 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\IObit [2017-08-08 23:57:06 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\LogExpert [2018-03-30 21:33:11 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\MusicBrainz [2017-07-28 15:39:11 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\MySQL [2017-08-21 13:17:19 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Neo4j Community Edition [2018-03-25 23:58:45 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Notepad++ [2017-03-03 20:58:18 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\PDAppFlex [2017-08-01 01:25:29 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\ProductData [2017-03-11 21:06:24 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\SolidDocuments [2017-03-21 01:36:04 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Sparx Systems [2017-03-15 20:57:33 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Subversion [2017-03-25 23:25:40 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\SumatraPDF [2018-02-09 23:37:29 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Synaptics [2017-07-17 17:44:01 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\TeamViewer [2017-03-15 21:37:00 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Triana4 [2017-04-10 02:50:51 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\uTorrent [2017-04-13 21:01:50 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Wireshark [2017-04-08 20:41:01 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Youtomato ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 94 bytes -> C:\Users\adier\SkyDrive:ms-properties @Alternate Data Stream - 57 bytes -> C:\Users\adier\SkyDrive.old:ms-properties < End of report > the contents of Extras.txt ==================== OTL Extras logfile created on: 2018-06-24 15:47:49 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\adier\Downloads 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.17134.0) Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd 15,19 Gb Total Physical Memory | 12,74 Gb Available Physical Memory | 83,87% Memory free 25,19 Gb Paging File | 22,75 Gb Available in Paging File | 90,31% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 672,03 Gb Total Space | 248,48 Gb Free Space | 36,98% Space Free | Partition Type: NTFS Drive D: | 24,04 Gb Total Space | 15,23 Gb Free Space | 63,38% Space Free | Partition Type: NTFS Computer Name: CHLAHBI | User Name: reida | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation) Directory [UpdateEncryptionSettings] -- Reg Error: Key error. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- Reg Error: Key error. http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation) Directory [UpdateEncryptionSettings] -- Reg Error: Key error. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = B1 64 EF 9C E1 00 D4 01 [binary data] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M] "EnableFirewall" = 1 "DefaultOutboundAction" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M] "DefaultInboundAction" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M] "EnableFirewall" = 1 "DefaultOutboundAction" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M] "DefaultInboundAction" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M] "EnableFirewall" = 1 "DefaultOutboundAction" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M] "DefaultInboundAction" = 1 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{1E7A5A01-829F-4FDA-A07C-DD03B7FB26FA}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{ED2DBBA0-88B5-41DA-B32B-841A712E94F8}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{06140242-66FD-43AD-8DAE-E12A9E4650EB}" = dir=in | name=@{microsoft.zunevideo_10.18041.14611.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{0875B103-5516-442F-8010-60A2EFFFB660}" = dir=in | name=@{microsoft.zunemusic_10.18052.11111.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{091C0447-793B-4599-8506-37F806A160A8}" = dir=in | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{0A731057-0186-4E94-A13D-8364295C2B55}" = dir=out | name=@{microsoft.bingnews_4.24.11382.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | "{0B718ADC-F59B-4319-9DE1-DF6392A12CB1}" = dir=in | name=@{microsoft.microsoftofficehub_17.9328.1700.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{0CDCFC91-122D-44F3-BB07-EB16560B8F1A}" = dir=in | name=xbox | "{134D4055-57A0-4B3B-BF13-5C40E114D325}" = protocol=6 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | "{137B8CB6-94BB-4132-8966-1C7868D5611D}" = dir=out | name=@{microsoft.commsphone_3.34.12002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | "{1450C5EB-F817-4CEC-A775-57E0206579CB}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "{15D483F1-6B28-4A94-B071-6C2933A7F6D0}" = dir=out | name=@{microsoft.zunemusic_10.18052.11111.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{172AFC2F-15FB-4742-99AB-4755483BE22D}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{17666B0A-C923-4849-9B27-FA45A7177E93}" = dir=out | name=@{microsoft.windowscamera_2018.227.30.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/resources/appstorename} | "{19262755-70D6-491E-9C64-2CB719203BFB}" = dir=out | name=twitter | "{1C083B1F-807E-4BE6-A98B-0E8BA653BDF8}" = dir=out | name=microsoft sticky notes | "{1C94A922-06CF-4EE2-935F-3169091C47B4}" = protocol=6 | dir=in | app=c:\program files\driverscloud.com\driverscloud.exe | "{2354D357-5589-48D0-BF2F-C85C63904EB2}" = dir=out | name=@{microsoft.bingweather_4.24.11294.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | "{24A48F74-4D8E-4A70-B234-2C5ED851C599}" = dir=in | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{262C890B-FA6C-4D98-B868-E918DBCCDECC}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | "{29829991-B0F5-4D61-828F-210B0375C48F}" = dir=out | name=win32webviewhost | "{2E651961-5A53-4AB8-A046-B3652147646E}" = dir=out | name=xbox | "{2ECE696D-9A3D-40E4-9B3C-19A5BF9C62AC}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x8\programs64\coreldrw.exe | "{33E3B00F-077A-421B-82E8-753584C91ED9}" = dir=out | name=tunein radio | "{363025C9-35E6-4739-939F-B72B2C52BF8A}" = dir=out | name=@{microsoft.mspaint_4.1805.15037.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | "{372328AB-4FE3-41E9-9F01-402C8F1C8CF2}" = dir=out | name=@{microsoft.windows.cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{39210061-2B7D-4B12-B85F-BFD0BDCC1B10}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{3BF92005-77D9-4FF3-909A-757E0EF973AD}" = dir=out | name=microsoft pay | "{3EC9E632-C908-4A56-AE1F-F510888C5BAB}" = dir=out | name=@{microsoft.microsoftofficehub_17.9328.1700.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | "{41216D34-C945-4ABA-B338-43789E6975EB}" = dir=in | name=netflix | "{4352D5F6-2034-465C-93FC-A19FADB20A42}" = dir=out | name=shell input application | "{4478A886-E168-4D86-9117-8EBF38582D1B}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{48FB3836-9266-47AE-A152-D95D4806A77B}" = dir=out | name=windows_ie_ac_001 | "{4BAD3205-0331-4106-8332-830A09AC41DB}" = dir=out | name=@{microsoft.lockapp_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | "{4CE74E69-D7DF-4CD9-A7E0-05BC32D0AAB8}" = dir=out | name=@{microsoft.storepurchaseapp_11805.1001.5.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | "{5166BD89-56BE-4DF8-8EFC-15B8F155EA29}" = dir=out | name=xbox gaming overlay | "{533C5749-DA36-47B9-AF19-ECBF1A44BB19}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{53BD0097-7678-43F0-9302-58884B383668}" = dir=out | name=@{microsoft.gethelp_10.1706.10952.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | "{55B0B1A2-EE5E-4927-9D81-6AC847582346}" = dir=out | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{55EA6460-A2B2-4F28-9AFE-1AA600AEB72E}" = dir=out | name=caesars slots | "{5B302737-F53D-459B-A500-AF665939D192}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{5C42C92A-C8F1-459D-934E-F4D6ED383EA5}" = protocol=6 | dir=in | app=c:\users\adier\appdata\local\programs\fiddler\fiddler.exe | "{5D7FD56D-DDE4-4698-B400-041F7E646B1D}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{5E2EF255-5159-4426-8368-003F0F0A3EAD}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | "{5E4308E5-2173-4C4A-BDCD-F69AB52E8A96}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{5F3A9AD3-6E45-4D36-A40F-BA5F0F11173D}" = protocol=17 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | "{61775D98-E72E-470E-9817-39BAF82CDD8E}" = dir=out | name=@{microsoft.windowscalculator_10.1805.1201.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | "{660FF480-0486-4514-A087-FE4AFFFBACD2}" = dir=out | name=@{microsoft.microsoft3dviewer_4.1804.19012.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | "{68F5C19D-956F-44C6-9E9A-45BED9159DC1}" = dir=out | name=candy crush soda saga | "{6A097C64-B072-4695-87DB-4E00EFC764D8}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{6A906B88-EE54-48AD-ABE8-93EFC37A23A7}" = dir=in | name=@{microsoft.messaging_3.38.22001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{6AAE7BAC-ED24-4A14-85F9-429075BC913D}" = dir=out | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{6B5442C2-5C14-44FC-B663-EF64EF8EC795}" = dir=in | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{708688E0-C146-48B9-BCAC-E52B4C376D2D}" = dir=out | name=@{microsoft.windows.holographicfirstrun_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.holographicfirstrun/resources/pkgdisplayname} | "{74E0860C-C289-47D7-B90F-B7F362CDCE2A}" = dir=out | name=xbox tcui | "{761C7655-598E-4026-A445-498F471ADD4C}" = dir=in | name=win32webviewhost | "{76D5218E-838E-4FE4-90A7-2EE67071B9C1}" = dir=in | name=print 3d | "{772C2D19-636F-45F1-82DA-F41FF3FCD7E2}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | "{77A5EDBE-7E85-4504-A5A3-0487E6694183}" = dir=out | name=@{microsoft.messaging_3.38.22001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | "{7DA9281C-D361-4DF6-8FA5-C7327EEE4F90}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | "{7EBC605B-712F-4B8E-A880-A169B0492455}" = protocol=6 | dir=in | app=c:\program files\visualsvn server\bin\visualsvnserver.exe | "{8074B55D-CAB1-4FC0-A376-D9FBF60E21F4}" = dir=out | name=@{microsoft.windowsmaps_5.1805.1431.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | "{89A45E04-C600-47BF-8173-30CA7084E638}" = dir=out | name=@{microsoft.oneconnect_4.1805.1291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | "{8A18CDAE-E67D-4C81-8D9A-51FB6B3413E3}" = dir=in | name=minecraft for windows 10 | "{8B0FD9E8-3683-4FE3-87E7-C20960C018A6}" = dir=out | name=@{microsoft.windows.photos_2018.18041.15530.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{8B9A1F74-1CC1-4345-9415-2E9D7F4DBDD7}" = dir=in | name=@{microsoft.windows.photos_2018.18041.15530.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | "{8CA7253F-093F-4840-B893-29612E44E9A3}" = dir=out | name=@{microsoft.getstarted_6.10.10872.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | "{8F941917-2561-4E9E-A282-DEA2A65B4067}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1712.1141.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{8FD34F82-7C0F-437F-AEA3-641A8BB0E4AD}" = protocol=17 | dir=in | app=c:\program files\driverscloud.com\driverscloud.exe | "{90AA489A-FFA6-4300-B781-5540B86FF310}" = dir=out | name=@{microsoft.zunevideo_10.18041.14611.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{91516225-1C5D-4257-9A96-7F2FA1F8B949}" = dir=out | name=@{microsoft.skypeapp_12.1815.209.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | "{938B879F-A4B0-4337-8068-B578B75269E8}" = dir=out | app=c:\program files (x86)\iobit\advanced systemcare\surfing protection\ffnativemessage.exe | "{94270236-53AB-40B7-9ACA-511D8EE0A2AD}" = dir=out | name=@{microsoft.people_10.1805.1361.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | "{94BC41D3-D152-496F-91A9-01E9FD6184AA}" = dir=out | name=@{microsoft.windowsstore_11805.1001.42.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{972B8D52-2903-41F0-89CC-871B4FD17610}" = dir=out | name=@{microsoft.microsoftedge_42.17134.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{9756E662-A1FC-4FB2-B399-F67EAC6B4AF3}" = dir=in | name=@{microsoft.skypeapp_12.1815.209.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | "{97838A83-6114-43D2-8C4C-48EAF66FAF94}" = dir=out | name=minecraft for windows 10 | "{9B25DD43-7335-443A-92B8-7FF5EBCF6385}" = dir=in | name=@{microsoft.oneconnect_4.1805.1291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | "{9E8557FA-FB4C-41D4-AC7D-0B518716E799}" = dir=out | name=@{microsoft.accountscontrol_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | "{A23A5B18-DFC5-4D93-8272-191CF9443FA0}" = dir=in | name=tunein radio | "{B527A8DA-763D-43CE-8C65-71A378812D62}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{B7C3EC26-5F71-4564-BC11-7B09A06DD284}" = dir=out | name=print 3d | "{B91BBD4C-F0DA-4D01-AA9E-F6811F9AAF4D}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | "{BA26BC4B-4F19-4F3E-82DD-932E03BFBFBF}" = dir=out | name=@{microsoft.xboxidentityprovider_12.41.24002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | "{BCAB4E34-58DA-4622-AF33-CB2CD8D25725}" = dir=out | name=3d builder | "{BDB7758B-E22B-4171-B7A9-06559084D6BD}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.20921.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | "{BE3BF079-4486-4EBB-A656-726856000534}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.17134.112_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | "{BE3F843C-6723-4A53-85CE-E89428C579F6}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{BF22206A-27A3-4722-A4C2-83F9FEAAC5F6}" = dir=in | name=@{microsoft.windowsstore_11805.1001.42.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | "{BF53C993-5349-4426-A367-5C8960721A74}" = dir=in | name=@{microsoft.microsoftedge_42.17134.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | "{C2FB71A1-3B36-4F67-86BF-947F97FE170B}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | "{C5AA8680-A416-4F43-8EAC-747786F42DFD}" = dir=out | name=microsoft solitaire collection | "{C79A5D7D-8D34-4802-8E94-FFCC7926DF6C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{C9EC658C-F307-45E2-BCBA-D4D8379D67AB}" = dir=out | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | "{CC72D954-887E-42FF-B3E5-03DA685825C9}" = dir=in | name=@{microsoft.commsphone_3.34.12002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | "{CF6273E7-4DBE-49B3-9B01-F8018C0447C2}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "{D0C812E2-14C9-4FB2-B9D8-44B52EB29EB7}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | "{D1BE3DC2-38DC-4AAB-99E4-565E630E4665}" = dir=in | app=c:\program files (x86)\iobit\advanced systemcare\surfing protection\ffnativemessage.exe | "{D4AFC7AB-4360-41F3-A5A0-30D96D6A5464}" = dir=in | name=microsoft sticky notes | "{D733B687-F087-4298-9EB9-BA3CC9A3AA12}" = dir=out | name=xbox game bar | "{D7E24D6B-E57E-40C2-ADD6-9E608F910463}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | "{D89AB05F-7913-403A-A55D-809C7B4AA4EA}" = dir=out | name=windows_ie_ac_001 | "{DE237C64-C0B6-4F43-9F0A-C81EB4ECBD6A}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | "{DEF9A6AB-7D76-4F7D-8A4C-B24CB34B1BA1}" = dir=in | name=@{microsoft.windows.cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | "{E31E2BDF-963F-4C09-A95D-6C69C3AAC706}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1712.1141.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | "{EA494DF0-D3AF-4570-9CB0-6EC3C5E5C1C9}" = dir=out | name=onenote | "{EA9E9F6C-B402-4456-A725-2654F44174BC}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.20921.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | "{EDCBF46E-D214-4C2B-8796-4BA12D201D46}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x8\programs64\corelpp.exe | "{EFC74D77-7E58-4780-87BC-0C3B55811129}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "{F61B84E3-CEA9-4E11-97F2-B319F028827F}" = dir=in | name=onenote | "{F66E08EF-82A9-4D4C-BF60-EAA059B10F34}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | "{FF1A601F-2052-4975-9FFA-9113B8E1BD38}" = dir=out | name=netflix | "TCP Query User{02E907D9-A2AE-4670-AB9C-9310F3F80C24}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe" = protocol=6 | dir=in | app=c:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe | "TCP Query User{04DCE8CF-EA24-4697-A781-6A268C11368B}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.8.0_144\jre\bin\java.exe | "TCP Query User{0D8423A1-11E8-443D-8E15-D1E771C9DE17}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | "TCP Query User{38EBA2CD-1AE0-49FD-B4FD-168CC32FFD32}C:\program files\firefox developer edition\firefox.exe" = protocol=6 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | "TCP Query User{49EEF936-AFAA-42C0-82E9-D20F3AEA3A35}C:\program files (x86)\spider\spider.exe" = protocol=6 | dir=in | app=c:\program files (x86)\spider\spider.exe | "TCP Query User{6008AD76-6D21-4F73-B405-914097332A81}D:\neo4j\data\bin\neo4j-ce.exe" = protocol=6 | dir=in | app=d:\neo4j\data\bin\neo4j-ce.exe | "TCP Query User{6191D5D7-430B-4238-A0D7-89397E9A6921}C:\program files\java\jre1.8.0_121\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.8.0_121\bin\javaw.exe | "TCP Query User{92682207-557B-4DEC-822F-BCAA59052C81}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "TCP Query User{96F973D7-2C28-4A08-9DF5-4125760A2A82}C:\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\eclipse\eclipse.exe | "TCP Query User{9FD5BA76-35BF-49BB-8238-8DEA83C552E4}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | "TCP Query User{A5832E93-3307-4BF6-91EB-2DF2EA3E2502}C:\program files\filezilla ftp client\filezilla.exe" = protocol=6 | dir=in | app=c:\program files\filezilla ftp client\filezilla.exe | "TCP Query User{AA44C8BF-42DA-47BB-B1C0-82AE91197713}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "TCP Query User{BFDF8410-F181-485B-8A03-DDEB098C6BCB}C:\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\eclipse\eclipse.exe | "UDP Query User{22F72AFE-F3BA-4D03-9A7A-913DF5C53235}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | "UDP Query User{3276320C-C8C5-4A55-9653-8AF12F3971F2}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | "UDP Query User{3EBFAEC8-0F13-4290-AAF0-838D1F56FC93}C:\program files (x86)\spider\spider.exe" = protocol=17 | dir=in | app=c:\program files (x86)\spider\spider.exe | "UDP Query User{5F058398-A48E-48C1-B78F-CD00E456FF9A}D:\neo4j\data\bin\neo4j-ce.exe" = protocol=17 | dir=in | app=d:\neo4j\data\bin\neo4j-ce.exe | "UDP Query User{8E7F3A8E-E2D8-4579-9514-050046FC43E2}C:\program files\filezilla ftp client\filezilla.exe" = protocol=17 | dir=in | app=c:\program files\filezilla ftp client\filezilla.exe | "UDP Query User{A032039A-4090-49C2-8A21-6E7C6FA96D09}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "UDP Query User{B24E7D1B-4221-4C37-80CF-BBAC5F144FBF}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe" = protocol=17 | dir=in | app=c:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe | "UDP Query User{B885D944-2E61-4BD3-B9DB-A046CB01E414}C:\program files\firefox developer edition\firefox.exe" = protocol=17 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | "UDP Query User{B8B95EED-481C-4ED8-982C-0E50A0E11EF3}C:\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\eclipse\eclipse.exe | "UDP Query User{D9385A3D-ECC4-4EBC-ABFD-F027BDEF5B2F}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.8.0_144\jre\bin\java.exe | "UDP Query User{D9927547-02EA-4F31-9EAB-574322C87BB7}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | "UDP Query User{DA3CAF95-5983-41CC-9854-35697CDDEC14}C:\program files\java\jre1.8.0_121\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.8.0_121\bin\javaw.exe | "UDP Query User{DDB31545-0F24-46F1-AFE2-CEF51B9F3F7A}C:\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\eclipse\eclipse.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}" = Corel Graphics - Windows Shell Extension "_{4B3FC55D-E999-4BEC-AF29-1091E574961F}" = CorelDRAW Graphics Suite X8 (64-Bit) "{02C85FBD-87D3-4352-BF2E-AFE897CD5559}" = CorelDRAW Graphics Suite X8 - Custom Data (x64) "{04D8C47E-C0FE-4CA5-8878-91ECD9552109}" = CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) "{0A182180-3BAF-4B94-BFD0-CF082CC5FF0D}" = CorelDRAW Graphics Suite X8 - FR (x64) "{1253ED86-69FD-4A7B-BDF2-96A522583A88}" = CorelDRAW Graphics Suite X8 - Capture (x64) "{1D4B870D-A5A8-4B88-9520-ED8EFD545AA1}" = CorelDRAW Graphics Suite X8 - Workspaces (x64) "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{20AB389B-8602-403C-B19B-F0A1D6C510A5}" = ANT Drivers Installer x64 "{20C1086D-C843-36B1-B678-990089D1BD44}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40649 "{23A2ABD8-8231-48AD-AD71-FF0566A7DD8F}" = CorelDRAW Graphics Suite X8 - Writing Tools (x64) "{26A24AE4-039D-4CA4-87B4-2F06417076FF}" = Java 7 Update 76 (64-bit) "{26A24AE4-039D-4CA4-87B4-2F64180144F0}" = Java 8 Update 144 (64-bit) "{300DB480-7301-436A-A312-B695B2BC6D71}" = CorelDRAW Graphics Suite X8 - CS (x64) "{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 "{3C28BFD4-90C7-3138-87EF-418DC16E9598}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 "{3CAAE169-6001-48ED-B2C6-5B6F511552FD}" = Corel Graphics - Windows Shell Extension "{43C4A17D-93D9-41C6-8ACA-370EA390ED2A}" = CorelDRAW Graphics Suite X8 - CT (x64) "{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}" = Energy Star "{48DD8181-A983-447B-9660-A55A935CA751}" = CorelDRAW Graphics Suite X8 - VBA (x64) "{4AA43BE3-D21B-44D7-B9CD-86692DEF3706}" = CorelDRAW Graphics Suite X8 - DE (x64) "{4B3FC55D-E999-4BEC-AF29-1091E574961F}" = CorelDRAW Graphics Suite X8 - Setup Files (x64) "{5051E668-4430-F42C-5822-886DFF87AC0A}" = ccc-utility64 "{50D1BD2D-6D8C-45A8-9DB5-CDAB7227DB36}" = CorelDRAW Graphics Suite X8 - Redist (x64) "{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 "{5FB5FF89-0938-49D9-850B-53B78B84A7E4}" = CorelDRAW Graphics Suite X8 - Font Manager (x64) "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{64A3A4F4-B792-11D6-A78A-00B0D0170760}" = Java SE Development Kit 7 Update 76 (64-bit) "{64A3A4F4-B792-11D6-A78A-00B0D0180144}" = Java SE Development Kit 8 Update 144 (64-bit) "{67D57366-EFCC-46DA-BB1F-BBE89B377177}" = CorelDRAW Graphics Suite X8 - BR (x64) "{6D0ED930-AE5C-3289-ADA3-E6C3B13050DE}" = Microsoft Visual Studio Tools for Applications 2015 x64 Hosting Support "{6E6D1438-33CC-413B-BC96-3497B1271CDD}" = CorelDRAW Graphics Suite X8 - Filters (x64) "{6F03D92C-48DB-4182-8A51-BEF8FE64B72C}" = CorelDRAW Graphics Suite X8 - PL (x64) "{72922AB6-F920-4C98-985D-EC90CE0918D4}" = CorelDRAW Graphics Suite X8 - Common (x64) "{7D9351AA-66C2-4185-ACE6-85AD06F5BA78}" = VisualSVN Server 3.6.3 "{81EBD8D4-9142-4D33-BF34-D99EFC1180F5}" = CorelDRAW Graphics Suite X8 - VideoBrowser (x64) "{8285FEBA-D373-493F-BC78-934F84A0A298}" = CorelDRAW Graphics Suite X8 - IT (x64) "{8D0A0EC6-9A3C-354F-9BFC-A61E96BE1846}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA "{90120064-0070-0000-0000-4000000FF1CE}" = Microsoft Visual Basic for Applications 7.1 (x64) "{90150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013 "{90150000-0015-040C-1000-0000000FF1CE}" = Microsoft Access MUI (French) 2013 "{90150000-0016-040C-1000-0000000FF1CE}" = Microsoft Excel MUI (French) 2013 "{90150000-0018-040C-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (French) 2013 "{90150000-0019-040C-1000-0000000FF1CE}" = Microsoft Publisher MUI (French) 2013 "{90150000-001A-040C-1000-0000000FF1CE}" = Microsoft Outlook MUI (French) 2013 "{90150000-001B-040C-1000-0000000FF1CE}" = Microsoft Word MUI (French) 2013 "{90150000-001F-0401-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - اللغة العربية "{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch "{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English "{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français "{90150000-001F-0413-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Nederlands "{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español "{90150000-002C-040C-1000-0000000FF1CE}" = Microsoft Office Proofing (French) 2013 "{90150000-0044-040C-1000-0000000FF1CE}" = Microsoft InfoPath MUI (French) 2013 "{90150000-006E-040C-1000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2013 "{90150000-0090-040C-1000-0000000FF1CE}" = Microsoft DCF MUI (French) 2013 "{90150000-00A1-040C-1000-0000000FF1CE}" = Microsoft OneNote MUI (French) 2013 "{90150000-00BA-040C-1000-0000000FF1CE}" = Microsoft Groove MUI (French) 2013 "{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013 "{90150000-00C1-040C-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (French) 2013 "{90150000-00E1-040C-1000-0000000FF1CE}" = Microsoft Office OSM MUI (French) 2013 "{90150000-00E2-040C-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (French) 2013 "{90150000-012B-040C-1000-0000000FF1CE}" = Microsoft Lync MUI (French) 2013 "{90F60409-7000-11D3-8CFE-0150048383C9}" = Microsoft Visual Basic for Applications 7.1 (x64) English "{90F6040C-7000-11D3-8CFE-0150048383C9}" = Microsoft Visual Basic for Applications 7.1 (x64) French "{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "{9782A612-03A7-488F-A598-33558163D8F8}" = CorelDRAW Graphics Suite X8 - Connect (x64) "{9AD6DCBE-15AB-9B73-5BD2-FD137073BF4F}" = AMD Install Manager "{A040C72A-0ADC-4FB9-9DB4-19B18F6053F1}" = CorelDRAW Graphics Suite X8 - IPM (x64) "{A0845CAD-ED13-46A4-A050-5ACE4631FDEC}" = CorelDRAW Graphics Suite X8 - EN (x64) "{A1C31BA5-5438-3A07-9EEE-A5FB2D0FDE36}" = Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.23506 "{A66E09BB-9892-421D-9EB9-311D12AA5244}" = CorelDRAW Graphics Suite X8 - Draw (x64) "{A67AEE14-0435-4B8C-A367-F5EDE6CAF9F6}" = CorelDRAW Graphics Suite X8 - CZ (x64) "{A7922CC8-0EBD-497B-B381-5B3992905327}" = CorelDRAW Graphics Suite X8 - NL (x64) "{ABB19BB4-838D-3082-BDA4-87C6604181A2}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40649 "{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Antivirus+ "{ACC8C1B0-E560-4B42-AA52-9CAD14883B29}" = CorelDRAW Graphics Suite X8 -TR (x64) "{B0B194F8-E0CE-33FE-AA11-636428A4B73D}" = Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.23506 "{B1452C41-DC90-4B58-8320-ABB515E87FFB}" = CorelDRAW Graphics Suite X8 - ES (x64) "{B83D220A-33AB-4AF5-963A-887BD971270E}" = CorelDRAW Graphics Suite X8 - RU (x64) "{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}" = Corel Update Manager "{C8730B1A-133D-4546-8E21-9EC186341F20}" = Corel Graphics - Windows Shell Extension 32 Bit Keys "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}" = HP Touchpoint Analytics Client "{ECFAF1D6-342D-4AE2-B6BF-82B22F9FE8DE}" = CorelDRAW Graphics Suite X8 "{F5A1D3E4-416E-4723-AD35-86A372B99174}" = CorelDRAW Graphics Suite X8 - JP (x64) "{F819C151-FFEE-4F01-BE68-0D1F76574F44}" = HP AC Power Control "{FB081BA0-08D2-4C8C-9E55-788A90430BE3}" = CorelDRAW Graphics Suite X8 - IPM Content (x64) "{FBD345DC-093A-4D89-A9B8-10C1BA356048}" = TortoiseSVN 1.9.7.27907 (64 bit) "AMD Catalyst Install Manager" = AMD Install Manager "Canon LBP3010/LBP3018/LBP3050" = Canon LBP3010/LBP3018/LBP3050 "CPUID HWMonitorPro_is1" = CPUID HWMonitor Pro 1.29 "D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2" = Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) "EaseUS Data Recovery Wizard_is1" = EaseUS Data Recovery Wizard "F9D2A789F9CFF8CEC36B544F53877C80F1F73C46" = Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) "Firefox Developer Edition 62.0 (x64 en-US)" = Firefox Developer Edition 62.0 (x64 en-US) "Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA" = Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA "Mozilla Firefox 59.0 (x64 en-US)" = Mozilla Firefox 59.0 (x64 en-US) "MozillaMaintenanceService" = Mozilla Maintenance Service "Office15.PROPLUS" = Microsoft Office Professionnel Plus 2013 "SynTPDeinstKey" = Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}" = Ghostscript GPL 8.64 (Msi Setup) "{010D45A1-093D-4534-8147-4E10E80F81CC}_is1" = Who Is On My Wifi version 4.0.1 "{037F0FF4-E80E-48DB-389B-A7890E45E18E}" = CCC Help German "{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 "{05F81C27-62A5-4A0C-8519-60CB66CF87C6}" = HP Support Assistant "{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}" = Ghostscript GPL 8.64 (Msi Setup) "{0EB8D099-E537-E3D3-039A-CBC50899C25B}" = CCC Help Chinese Standard "{10047D9D-3EC2-F25F-AEE5-250AB94D96A6}" = CCC Help Portuguese "{183B354B-11F5-A109-A77A-CAECC420E0C9}" = Catalyst Control Center Localization All "{1B38B23D-449A-AD28-6F4F-E8796FFB8DF9}" = CCC Help Japanese "{20D2A362-23EB-3BDB-BAD3-F4510B2B32A5}" = Microsoft Visual Studio Tools for Applications 2015 Finalizer "{25A60C59-0FDC-4D73-81F4-D4A6D4E0CB92}" = Adobe AIR "{29A389C5-0345-C38A-2ADE-7EB39281B46B}" = CCC Help Finnish "{2DD25842-EE28-844F-0769-A0C55F9137D3}" = CCC Help Korean "{3225B377-6E8E-78F1-4CD9-7C90F503BCFE}" = CCC Help Czech "{39D18BB4-D8F9-5940-6A7B-DA74A3BCA57C}" = CCC Help Chinese Traditional "{3e534d41-dcc4-4f51-9858-70dd42beb3d5}" = Garmin Express "{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}" = Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 "{408D0747-D910-6303-11B3-331A43D792F9}" = CCC Help Greek "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{53F7486D-41B5-4117-8914-A85B0DBDDC07}" = Sound Organizer "{5490AEC3-909E-8B5C-E51E-A1BB5385D9DA}" = CCC Help Italian "{5A216534-EFDA-0AAA-E716-DA6771244656}" = CCC Help Polish "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader "{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 "{5E980195-F909-70F7-6269-4169FDB31886}" = CCC Help Thai "{5EBEDD03-4E31-C4AF-D54F-26C3454E6596}" = CCC Help Spanish "{5F618047-4637-C9DB-384D-1D97937918E6}" = AMD Catalyst Control Center "{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{6C772996-BFF3-3C8C-860B-B3D48FF05D65}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 "{6E257EB0-5EFF-416D-82D4-592924566BB4}" = Elevated Installer "{6e8f74e0-43bd-4dce-8477-6ff6828acc07}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 "{706DDDCA-FC25-26D8-8E2C-DCC5E95351CD}" = CCC Help Norwegian "{78237D85-8F06-3755-21AF-9F46F0BBC19F}" = Catalyst Control Center Graphics Previews Common "{78DA9894-13E4-4858-9A4A-4F7A523203BA}" = Jar2Exe Wizard "{7f51bdb9-ee21-49ee-94d6-90afc321780e}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 "{84DD3A17-A979-39BC-8816-8226CB7DF8A7}" = Microsoft Visual Studio Tools for Applications 2015 x86 Hosting Support "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{884CF059-9A11-4DF7-A2A7-17EFE90B9278}" = Graphviz "{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 "{90C443D7-A615-D053-A662-020A8F1C0B03}" = CCC Help English "{96ACB628-825A-29A2-2ADC-BF7D7E211C59}" = CCC Help Dutch "{9720A595-3D2D-440E-9523-0B6F970745DD}" = HP Customer Experience Enhancements "{9866E5F0-121F-E018-E2D1-2E1770847ABF}" = Adobe Download Assistant "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D4757D6-6C0D-B98D-CCA5-BB00D0E91872}" = CCC Help Russian "{9F79033A-84FC-4137-BCDC-C505246F78E1}" = HP Support Solutions Framework "{AC76BA86-1033-FFFF-7760-000000000006}" = Adobe Acrobat XI Pro "{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}" = OEM Application Profile "{C019EF7D-A6D6-65EE-76BD-C73E6E0F3EC6}" = CCC Help Swedish "{CAE3D1CA-7211-E7E3-F045-414ACFA5222E}" = CCC Help Danish "{D21B4A41-3327-4CA5-A218-C751706DFF27}" = EPubsoft ToolBox 9.5.5 "{D2437C5C-2D8C-40D2-8059-689AD7239FA3}" = Intel(R) C++ Redistributables for Windows* on Intel(R) 64 "{D3C49D06-7FA6-CE04-A17A-2074E314DBB6}" = Catalyst Control Center - Branding "{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1" = aTube Catcher version 3.8 "{dd8b09df-3ef8-49f1-bd1a-65278435860b}" = Microsoft Visual Studio Tools for Applications 2015 "{E1C18A5C-63D7-4DC5-977F-5B4BAB4169D9}" = Garmin Express "{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 "{E8758B5B-DAD2-3CF2-234A-D560B8EED49E}" = CCC Help Turkish "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F3B6E13B-8949-D194-D2F3-628B16EFAB14}" = CCC Help Hungarian "{FE7A3EC9-93A9-1B25-0A9C-A0E460A6CFD1}" = CCC Help French "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "5517-2803-0637-4585" = SoapUI 5.3.0 5.3.0 "Adobe AIR" = Adobe AIR "Advanced SystemCare_is1" = Advanced SystemCare 10 "Amazon Kindle" = Amazon Kindle "Battery Status" = Battery Status "com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant "Dev-C++" = Dev-C++ "ExamDiff_is1" = ExamDiff 1.9 (Build 1.9.0.2) "FileZilla Client" = FileZilla Client 3.25.1 "Google Chrome" = Google Chrome "ISO/TS 14048 data editor_is1" = ISO/TS 14048 data editor version 1.1b "Maestro_is1" = Maestro 2004.01 (Public) "Mozilla Firefox 56.0 (x86 fr)" = Mozilla Firefox 56.0 (x86 fr) "MusicBrainz Picard" = MusicBrainz Picard "Notepad++" = Notepad++ (32-bit x86) "Spider_is1" = Spider Version 1.1b "SumatraPDF" = SumatraPDF "Tunatic" = Tunatic "WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.49-2 "WinMerge_is1" = WinMerge 2.14.0 "WinRAR archiver" = WinRAR 5.40 (32-bit) "Wireshark" = Wireshark 2.2.6 (64-bit) ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Fiddler2" = Progress Telerik Fiddler "SourceTree" = SourceTree ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 2018-06-24 09:02:04 | Computer Name = adier | Source = SetupARService | ID = 0 Description = Le service ne peut pas être démarré. System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet. à SetupAfterRebootService.SetupARService.OnStart(String[] args) à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2018-06-24 09:26:02 | Computer Name = adier | Source = Application Hang | ID = 1002 Description = Le programme OTL.exe version 3.2.69.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : b20 Heure de début : 01d40bbea0acaa78 Heure de fin : 4294967295 Chemin d'accès de l'application : C:\Users\adier\Downloads\OTL.exe ID de rapport : ae6ab375-a11c-4881-bf36-837013887dc8 Nom complet du package défaillant : ? ID de l'application relative au package défaillant : ? Error - 2018-06-24 09:40:55 | Computer Name = adier | Source = Application Hang | ID = 1002 Description = Le programme eclipse.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 9c0 Heure de début : 01d40bc0ca4af978 Heure de fin : 12 Chemin d'accès de l'application : C:\eclipse\eclipse.exe ID de rapport : ce7d3a29-7902-4b80-a25b-1013997cc0ac Nom complet du package défaillant : ? ID de l'application relative au package défaillant : ? Error - 2018-06-24 10:06:53 | Computer Name = adier | Source = ATIeRecord | ID = 16396 Description = ATI EEU PnP start/stop failed Error - 2018-06-24 10:08:09 | Computer Name = adier | Source = ATIeRecord | ID = 16396 Description = ATI EEU PnP start/stop failed Error - 2018-06-24 10:08:10 | Computer Name = adier | Source = SetupARService | ID = 0 Description = Le service ne peut pas être démarré. System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet. à SetupAfterRebootService.SetupARService.OnStart(String[] args) à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error - 2018-06-24 10:30:14 | Computer Name = adier | Source = Microsoft-Windows-SpellChecker | ID = 33 Description = Error - 2018-06-24 10:39:12 | Computer Name = adier | Source = ATIeRecord | ID = 16396 Description = ATI EEU PnP start/stop failed Error - 2018-06-24 10:40:38 | Computer Name = adier | Source = ATIeRecord | ID = 16396 Description = ATI EEU PnP start/stop failed Error - 2018-06-24 10:40:41 | Computer Name = adier | Source = SetupARService | ID = 0 Description = Le service ne peut pas être démarré. System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet. à SetupAfterRebootService.SetupARService.OnStart(String[] args) à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) [ System Events ] Error - 2018-06-24 10:11:15 | Computer Name = adier | Source = DCOM | ID = 10016 Description = Error - 2018-06-24 10:11:15 | Computer Name = adier | Source = DCOM | ID = 10016 Description = Error - 2018-06-24 10:11:15 | Computer Name = adier | Source = DCOM | ID = 10016 Description = Error - 2018-06-24 10:12:02 | Computer Name = adier | Source = DCOM | ID = 10016 Description = Error - 2018-06-24 10:34:38 | Computer Name = adier | Source = DCOM | ID = 10016 Description = Error - 2018-06-24 10:40:37 | Computer Name = adier | Source = Microsoft-Windows-Directory-Services-SAM | ID = 16953 Description = Échec du chargement de la DLL de notification du mot de passe C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter avec l’erreur 126. Vérifiez que le chemin d’accès de la DLL de notification défini dans le Registre, HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages, fait référence à un chemin d’accès correct et absolu (<lecteur>:\<chemin_d’accès>\<nom_fichier>.<ext>) et non à un chemin d’accès relatif ou non valide. Si le chemin d’accès de la DLL est correct, vérifiez que tous les fichiers de prise en charge se trouvent dans le même répertoire et que le compte système dispose d’un accès en lecture au chemin d’accès de la DLL et aux fichiers de prise en charge. Contactez le fournisseur de la DLL de notification pour une assistance supplémentaire. D’autres détails sont disponibles sur le Web à l’adresse http://go.microsoft.com/fwlink/?LinkId=245898. Error - 2018-06-24 10:42:34 | Computer Name = adier | Source = DCOM | ID = 10016 Description = Error - 2018-06-24 10:46:48 | Computer Name = adier | Source = Service Control Manager | ID = 7022 Description = Le service Update Orchestrator Service est en attente de démarrage. Error - 2018-06-24 10:47:08 | Computer Name = adier | Source = DCOM | ID = 10016 Description = Error - 2018-06-24 10:48:00 | Computer Name = adier | Source = DCOM | ID = 10016 Description = < End of report > the contents of checkup.txt ====================== Results of screen317's Security Check version 1.014 --- 12/23/15 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender Trend Micro Antivirus+ Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java version 32-bit out of Date! Mozilla Firefox (56.0) Google Chrome (67.0.3396.87) Google Chrome (SetupMetrics...) ````````Process Check: objlist.exe by Laurent```````` Windows Defender MSASCuiL.exe Trend Micro AMSP coreServiceShell.exe Trend Micro Titanium plugin Pt\PtSvcHost.exe Trend Micro UniClient UiFrmWrk uiWatchDog.exe Trend Micro AMSP coreFrameworkHost.exe Trend Micro Titanium plugin Pt\PtWatchDog.exe Trend Micro AMSP module 10011\8.0.1061\8.0.1061\TmsaInstance64.exe Trend Micro Titanium plugin Pt\PtSessionAgent.exe Trend Micro UniClient UiFrmWrk uiSeAgnt.exe Trend Micro Titanium UIFramework uiWinMgr.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` Hijackthis.log =========== Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:14:56, on 2018-06-24 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.17134.0001) Boot mode: Normal Running processes: C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAB8SWK.EXE C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe C:\WINDOWS\SysWOW64\NOTEPAD.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit= O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll O3 - Toolbar: Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" O4 - .DEFAULT User Startup: SynRemoveUserSettings.bat (User 'Default user') O4 - Global Startup: Who Is On My Wifi.lnk = C:\Program Files (x86)\IO3O LLC\Who Is On My Wifi\mywifi.exe O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105 O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Cliquer pour appeler Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Cliquer pour appeler Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll O18 - Protocol: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe O23 - Service: @%SystemRoot%\system32\AJRouter.dll,-2 (AJRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing) O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\AppReadiness.dll,-1000 (AppReadiness) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\appxdeploymentserver.dll,-1 (AppXSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\AudioEndpointBuilder.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\BcastDVRUserService.dll,-100 (BcastDVRUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Service utilisateur de diffusion et GameDVR_5a7b6 (BcastDVRUserService_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101 (BluetoothUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Service de support des utilisateurs du Bluetooth_5a7b6 (BluetoothUserService_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%windir%\system32\bisrv.dll,-100 (BrokerInfrastructure) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\BTAGService.dll,-101 (BTAGService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\BthAvctpSvc.dll,-101 (BthAvctpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\CapabilityAccessManager.dll,-1 (camsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cdpsvc.dll,-100 (CDPSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cdpusersvc.dll,-100 (CDPUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Service pour utilisateur de plateforme d’appareils connectés_5a7b6 (CDPUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\ClipSVC.dll,-103 (ClipSVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\coremessaging.dll,-1 (CoreMessagingRegistrar) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @combase.dll,-5012 (DcomLaunch) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\das.dll,-100 (DeviceAssociationService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (DeviceInstall) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006 (DevicePickerUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: DevicePicker_5a7b6 (DevicePickerUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\DevicesFlowBroker.dll,-103 (DevicesFlowUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Flux d’appareils_5a7b6 (DevicesFlowUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\DevQueryBroker.dll,-100 (DevQueryBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: @%systemroot%\system32\DiagSvc.dll,-100 (diagsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\diagtrack.dll,-3001 (DiagTrack) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\Windows.Internal.Management.dll,-100 (DmEnrollmentSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dmwappushsvc.dll,-200 (dmwappushservice) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\dosvc.dll,-100 (DoSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\DeviceSetupManager.dll,-1000 (DsmSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dssvc.dll,-10003 (DsSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\dusmsvc.dll,-1 (DusmSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (Eaphost) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\embeddedmodesvc.dll,-201 (embeddedmode) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @EnterpriseAppMgmtSvc.dll,-1 (EntAppSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (EventLog) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\fhsvc.dll,-101 (fhsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\FrameServer.dll,-100 (FrameServer) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\GraphicsPerfSvc.dll,-100 (GraphicsPerfSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: HP CASL Framework Service (hpqcaslwmiex) - HP - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe O23 - Service: HP Touchpoint Analytics (HPTouchpointAnalyticsService) - HP Inc. - C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe O23 - Service: @%SystemRoot%\system32\hvhostsvc.dll,-100 (HvHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\tetheringservice.dll,-4097 (icssvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\InstallService.dll,-200 (InstallService) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%Systemroot%\system32\ipxlatcfg.dll,-500 (IpxlatCfgSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\irmon.dll,-2000 (irmon) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\lfsvc.dll,-1 (lfsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\licensemanagersvc.dll,-200 (LicenseManager) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%windir%\system32\lsm.dll,-1001 (LSM) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\LanguageOverlayServer.dll,-100 (LxpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\moshost.dll,-100 (MapsBroker) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\MessagingService.dll,-100 (MessagingService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: MessagingService_5a7b6 - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (mpssvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\WINDOWS\system32\msiexec.exe O23 - Service: @%systemroot%\system32\NaturalAuth.dll,-100 (NaturalAuthentication) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\ncasvc.dll,-3009 (NcaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ncbservice.dll,-500 (NcbService) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\NcdAutoSetup.dll,-100 (NcdAutoSetup) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofmsvc.dll,-202 (netprofm) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\NetSetupSvc.dll,-3 (NetSetupSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\NgcCtnrSvc.dll,-1 (NgcCtnrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\APHostRes.dll,-10002 (OneSyncSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Hôte de synchronisation_5a7b6 (OneSyncSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: PACSPTISVR-Sound_Organizer - Sony Corporation - C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\WINDOWS\SysWow64\perfhost.exe O23 - Service: @%SystemRoot%\system32\PhoneserviceRes.dll,-10000 (PhoneSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-15001 (PimIndexMaintenanceSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Données de contacts_5a7b6 (PimIndexMaintenanceSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: Platinum Host Service - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-200 (PlugPlay) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-1 (PrintNotify) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\PrintWorkflowService.dll,-100 (PrintWorkflowUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: PrintWorkflow_5a7b6 (PrintWorkflowUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Corel License Validation Service V2, Powered by arvato (PSI_SVC_2) - arvato digital services llc - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: @%SystemRoot%\system32\pushtoinstall.dll,-200 (PushToInstall) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\RDXService.dll,-256 (RetailDemo) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\RMapi.dll,-1001 (RmSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @combase.dll,-5010 (RpcSs) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\ScDeviceEnum.dll,-100 (ScDeviceEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing) O23 - Service: @%SystemRoot%\System32\SEMgrSvc.dll,-1001 (SEMgrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing) O23 - Service: @%SystemRoot%\System32\sensorservice.dll,-1000 (SensorService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: SetupARService - Unknown owner - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing) O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\SharedRealitySvc.dll,-100 (SharedRealitySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\smphost.dll,-102 (smphost) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\SmsRouterSvc.dll,-10001 (SmsRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe O23 - Service: @%SystemRoot%\system32\windows.staterepository.dll,-1 (StateRepository) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\svsvc.dll,-101 (svsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%windir%\system32\SystemEventsBrokerServer.dll,-1001 (SystemEventsBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing) O23 - Service: @%windir%\system32\TimeBrokerServer.dll,-1001 (TimeBrokerSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\tokenbroker.dll,-100 (TokenBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\WINDOWS\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\tzautoupdate.dll,-200 (tzautoupdate) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-10003 (UnistoreSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: Stockage des données utilisateur_5a7b6 (UnistoreSvc_5a7b6) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-14001 (UserDataSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Accès aux données utilisateur_5a7b6 (UserDataSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\usermgr.dll,-100 (UserManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\usocore.dll,-101 (UsoSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\vac.dll,-200 (VacSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: VisualSVN Server (VisualSVNServer) - Apache Software Foundation - C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe O23 - Service: @%systemroot%\system32\icsvc.dll,-801 (vmicguestinterface) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\icsvc.dll,-101 (vmicheartbeat) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\icsvc.dll,-201 (vmickvpexchange) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\icsvcext.dll,-601 (vmicrdv) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\icsvc.dll,-301 (vmicshutdown) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\icsvc.dll,-401 (vmictimesync) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\icsvc.dll,-901 (vmicvmsession) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\icsvcext.dll,-501 (vmicvss) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: VisualSVN Repository Configurator Service (vrepocfgsvc) - VisualSVN Software Ltd. - C:\Program Files\VisualSVN Server\bin\vrepocfgsvc.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: VisualSVN Background Job Service (vsvnjobsvc) - VisualSVN Software Ltd. - C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @WaaSMedicSvc.dll,-100 (WaaSMedicSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\WalletService.dll,-1000 (WalletService) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\Windows.WARP.JITService.dll,-100 (WarpJITSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wcmsvc.dll,-4097 (Wcmsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\wephostsvc.dll,-100 (WEPHOSTSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wfdsconmgrsvc.dll,-9000 (WFDSConMgrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiarpc.dll,-2 (WiaRpc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\flightsettings.dll,-103 (wisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (WlanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wlidsvc.dll,-100 (wlidsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\lpasvc.dll,-1000 (wlpasvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: @%systemroot%\system32\workfolderssvc.dll,-102 (workfolderssvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\WpcRefreshTask.dll,-100 (WpcMonSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpnservice.dll,-1 (WpnService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\WpnUserService.dll,-1 (WpnUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: Service utilisateur de notifications Push Windows_5a7b6 (WpnUserService_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\WINDOWS\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing) O23 - Service: @%systemroot%\system32\XblAuthManager.dll,-100 (XblAuthManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\XblGameSave.dll,-100 (XblGameSave) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\xboxgipsvc.dll,-100 (XboxGipSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe O23 - Service: @%systemroot%\system32\XboxNetApiSvc.dll,-100 (XboxNetApiSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe -- End of file - 38182 bytes Link to post Share on other sites More sharing options...
Staff Malwarebytes Posted June 24, 2018 Staff ID:1252321 Share Posted June 24, 2018 ***This is an automated reply*** Hi, Thanks for posting in the Malware Removal for Windows Help forum. Being infected is not fun and can be very frustrating to resolve, but don't worry because we have a team of experts here help you!! Note: Please be patient. When the site is busy it can take up to 48 hours before a malware removal helper can assist you. If no one has replied to your new topic after 48 hours please contact an Administrator to let them know. First, if you haven't done so, please run a Threat Scan with the latest version of Malwarebytes. This may resolve your malware infection issue without the need for additional support. Click "Reveal Hidden Contents" below for details: Spoiler Malwarebytes can detect and remove most malware with no further actions required for free. If you do not have Malwarebytes, please download it here and install. Be sure to post back the log as shown below. Open Malwarebytes for Windows To the left, click Scan > Scan Types. Select Threat Scan. Threat Scan is the most thorough and recommended scan method available. Click Start Scan Next, if you're still experiencing issues after running Malwarebytes, then technical logs will be required to assist you. Click "Reveal Hidden Contents" below and follow the instructions to run the Farbar Recovery Scan Tool: Spoiler Don't use any temporary file cleaners unless requested - this can cause data loss and make a recovery difficult. Please download the Farbar Recovery Scan Tool here and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens click Yes to the disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach or copy and paste it to your reply. The first time the tool is run, it also makes another log (Addition.txt). If you've run it before it may not and you may need to select it manually. Finally, attach the Malwarebytes Threat Scan, FRST.txt and Additional.txt logs to your reply. Before submitting your reply, be sure to enable "Notify me of replies" like so: Click "Reveal Hidden Contents" below for details on how to add attachments to your post.Note: If you are unable to attach files, please copy and past the contents of the requested files in your Reply instead. Spoiler To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button. Please Note the Following: One of our expert helpers will give you one-on-one assistance when one becomes available. Refrain from making any further changes to your computer (such as Install/Uninstall programs, using special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. Do not 'bump' or add a reply to your topic once it is started. Topics which appear to have replies are considered to have a helper assisting them and may be overlooked, resulting in a longer waiting period for help If you're using Peer 2 Peer software such as uTorrent or similar, please completely disable it from running while being assisted here. Troubleshooting Tips FAQ - Malwarebytes won't run or failed to resolve my issues Groups authorized to help with Malware Removal for Windows logs Link to post Share on other sites More sharing options...
kevinf80 Posted June 24, 2018 ID:1252323 Share Posted June 24, 2018 Hello adier and welcome to Malwarebytes, Continue with the following: Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.htmlNote: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status... Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Let me see those logs in your reply... Thank you, Kevin.... Link to post Share on other sites More sharing options...
adier Posted June 24, 2018 Author ID:1252324 Share Posted June 24, 2018 Thank you very much kevinf80 for your replay here I paste the required log files FRST.txt ======= Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018 Exécuté par adier (administrateur) sur CHLAHBI (24-06-2018 17:04:48) Exécuté depuis C:\Users\adier\Downloads Profils chargés: adier (Profils disponibles: adier & postgres) Platform: Windows 10 Home Version 1803 17134.112 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe (Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Apache Software Foundation) C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe (Apache Software Foundation) C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtWatchDog.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\module\10011\8.0.1061\8.0.1061\TmsaInstance64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe (CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE (CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAB8SWK.EXE (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.9328.1700.0_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe (HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe (Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe (VisualSVN Software Ltd.) C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (OldTimer Tools) C:\Users\adier\Downloads\OTL.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Simon Tatham) C:\Users\adier\Desktop\putty.exe () C:\Users\adier\Downloads\SecurityCheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe (Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe (hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe (Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Alexander Roshal) C:\Program Files (x86)\WinRAR\WinRAR.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated) HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8505088 2015-07-03] (Realtek Semiconductor) HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [245872 2017-07-23] (Trend Micro Inc.) HKLM\...\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1242568 2017-07-23] (Trend Micro Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation) HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-06] (Advanced Micro Devices, Inc.) HKLM\...\Policies\Explorer: [ForceActiveDesktopOn] 0 [0 2018-01-03] () HKLM\...\Policies\Explorer: [NoRecentDocsHistory] 0 [0 2018-01-03] () HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation) HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Who Is On My Wifi.lnk [2017-03-04] ShortcutTarget: Who Is On My Wifi.lnk -> C:\Program Files (x86)\IO3O LLC\Who Is On My Wifi\mywifi.exe (IO3O LLC) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SynRemoveUserSettings.bat [2016-12-26] () Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SynRemoveUserSettings.bat [2016-12-26] () Startup: C:\Users\postgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SynRemoveUserSettings.bat [2016-12-26] () ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{0929f544-b324-4f88-ac20-f3a917509a0e}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-02-15] (Microsoft Corporation) BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-02] (Oracle Corporation) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems Incorporated) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-02] (Oracle Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-04-07] (HP Inc.) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems Incorporated) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-09-12] (Microsoft Corporation) BHO-x32: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems Incorporated) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-04-07] (HP Inc.) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems Incorporated) Toolbar: HKLM - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.) Toolbar: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002 -> Pas de nom - {093F479D-712E-46CD-9E06-62E734A05F68} - Pas de fichier Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation) Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.) Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.) Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll [2017-07-23] (Trend Micro Inc.) Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2017-07-23] (Trend Micro Inc.) FireFox: ======== FF DefaultProfile: 50nzwkok.default-1518211647119 FF ProfilePath: C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default [2018-06-24] FF Extension: (Laboratory) - C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\Extensions\1b2383b324c8520974ee097e46301d5ca4e076de387c02886f1c6b1503671586@pokeinthe.io.xpi [2018-02-07] FF Extension: (ADB Helper) - C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\Extensions\adbhelper@mozilla.org.xpi [2018-02-23] [Legacy] FF ProfilePath: C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\50nzwkok.default-1518211647119 [2018-05-04] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01] FF HKLM\...\Firefox\Extensions: [fftmtoolbar@trendmicro.com] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension FF Extension: (Trend Micro Toolbar) - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2018-06-24] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF HKLM-x32\...\Firefox\Extensions: [fftmtoolbar@trendmicro.com] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-02] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-02] (Oracle Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-12] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems) StartMenuInternet: Firefox-CA9422711AE1A81C - C:\Program Files\Firefox Developer Edition\firefox.exe Chrome: ======= CHR Profile: C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default [2018-06-24] CHR Extension: (Docs) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-19] CHR Extension: (Google Drive) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-03] CHR Extension: (YouTube) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-03] CHR Extension: (Google Docs hors connexion) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-07] CHR Extension: (AngularJS Inspector) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjhmfjbfdbeeekiijofbikifokdkfhcc [2017-10-14] CHR Extension: (AngularJS Batarang) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ighdmehidhipcmcojjgiloacoafjmpfk [2017-10-14] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-20] CHR Extension: (Trend Micro Toolbar) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf [2018-06-24] CHR Extension: (Gmail) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-03] CHR Extension: (Chrome Media Router) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-18] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01] CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ohhcpmplhhiiaoiddkfboafbhiknefdf] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021056 2016-03-03] (Adobe Systems, Incorporated) R2 Amsp; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [374968 2017-07-19] (Trend Micro Inc.) R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1194512 2018-06-06] (Garmin Ltd. or its subsidiaries) R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332656 2018-05-02] (HP Inc.) R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.) S3 PACSPTISVR-Sound_Organizer; C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe [174176 2012-11-08] (Sony Corporation) R2 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [1129928 2017-07-23] (Trend Micro Inc.) R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-07-03] (Realtek Semiconductor) S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2018-01-07] () [Fichier non signé] S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] () R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-08-24] (Synaptics Incorporated) S4 vdfssvc; C:\Program Files\VisualSVN Server\bin\vdfssvc.exe [104008 2017-07-20] (VisualSVN Software Ltd.) R2 VisualSVNServer; C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe [29256 2017-07-20] (Apache Software Foundation) S3 vrepocfgsvc; C:\Program Files\VisualSVN Server\bin\vrepocfgsvc.exe [198728 2017-07-20] (VisualSVN Software Ltd.) R2 vsvnjobsvc; C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe [374856 2017-07-20] (VisualSVN Software Ltd.) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\NisSrv.exe [4682552 2018-06-02] (Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\MsMpEng.exe [101096 2018-06-02] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 Accelerometer; C:\WINDOWS\System32\drivers\Accelerometer.sys [53760 2017-12-18] (HP) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110104 2016-09-29] (Advanced Micro Devices) S3 DSI_SiUSBXp_3_1; C:\WINDOWS\system32\drivers\DSI_SiUSBXp_3_1.sys [16384 2007-09-06] (Silicon Laboratories) R0 hpdskflt; C:\WINDOWS\System32\drivers\hpdskflt.sys [39936 2017-12-18] (HP) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-08-01] (REALiX(tm)) R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2018-04-12] (MediaTek Inc.) S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2014-08-08] (The OpenVPN Project) R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2017-03-03] (Corel Corporation) R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.) R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [1219200 2015-06-03] (Ralink Technology, Corp.) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) R1 tmactmon; C:\WINDOWS\system32\DRIVERS\tmactmon.sys [145016 2018-04-10] (Trend Micro Inc.) R0 tmcomm; C:\WINDOWS\System32\DRIVERS\tmcomm.sys [454264 2018-04-10] (Trend Micro Inc.) R0 TMEBC; C:\WINDOWS\System32\DRIVERS\TMEBC64.sys [72504 2016-01-05] (Trend Micro Inc.) R3 tmeevw; C:\WINDOWS\system32\DRIVERS\tmeevw.sys [147672 2017-05-10] (Trend Micro Inc.) S0 tmel; C:\WINDOWS\System32\DRIVERS\tmel.sys [39056 2015-06-23] (Trend Micro Inc.) R1 tmevtmgr; C:\WINDOWS\system32\DRIVERS\tmevtmgr.sys [141432 2018-04-10] (Trend Micro Inc.) R3 tmnciesc; C:\WINDOWS\system32\DRIVERS\tmnciesc.sys [562296 2018-01-16] (Trend Micro Inc.) R1 tmumh; C:\WINDOWS\system32\DRIVERS\TMUMH.sys [132512 2018-04-26] (Trend Micro Inc.) R2 tmusa; C:\WINDOWS\system32\DRIVERS\tmusa.sys [134264 2018-01-22] (Trend Micro Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2018-06-02] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [313384 2018-06-02] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-06-02] (Microsoft Corporation) R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP) U2 TMAgent; pas de ImagePath ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-06-24 17:04 - 2018-06-24 17:05 - 000026329 _____ C:\Users\adier\Downloads\FRST.txt 2018-06-24 17:04 - 2018-06-24 17:04 - 000000000 ____D C:\FRST 2018-06-24 17:03 - 2018-06-24 17:04 - 002412544 _____ (Farbar) C:\Users\adier\Downloads\FRST64.exe 2018-06-24 16:25 - 2018-06-24 16:25 - 000408860 _____ C:\Users\adier\Downloads\OTL.Txt 2018-06-24 16:25 - 2018-06-24 16:25 - 000101816 _____ C:\Users\adier\Downloads\Extras.Txt 2018-06-24 16:23 - 2018-06-24 16:23 - 000000000 ____D C:\Users\adier\Desktop\HijackThis 2018-06-24 16:22 - 2018-06-24 16:22 - 000307075 _____ C:\Users\adier\Downloads\HijackThis.zip 2018-06-24 15:31 - 2018-06-24 15:31 - 000000000 ____D C:\Program Files\Common Files\TmSentry 2018-06-24 15:25 - 2018-06-24 15:25 - 000000000 ___HD C:\TMRescueDisk 2018-06-24 15:22 - 2018-06-24 15:22 - 000001373 _____ C:\Users\adier\Desktop\Trend Micro Antivirus+.lnk 2018-06-24 15:22 - 2018-06-24 15:22 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Antivirus+ 2018-06-24 15:21 - 2018-06-24 15:21 - 000000000 ____D C:\WINDOWS\SysWOW64\tmumh 2018-06-24 15:21 - 2018-06-24 15:21 - 000000000 ____D C:\WINDOWS\system32\tmumh 2018-06-24 15:21 - 2018-04-26 21:50 - 000132512 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\TMUMH.sys 2018-06-24 15:21 - 2018-04-10 20:25 - 000141432 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmevtmgr.sys 2018-06-24 15:21 - 2018-04-10 20:24 - 000454264 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmcomm.sys 2018-06-24 15:21 - 2018-04-10 20:24 - 000145016 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmactmon.sys 2018-06-24 15:21 - 2018-01-22 10:03 - 000134264 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmusa.sys 2018-06-24 15:21 - 2018-01-16 17:18 - 000562296 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmnciesc.sys 2018-06-24 15:21 - 2017-05-10 08:46 - 000147672 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmeevw.sys 2018-06-24 15:21 - 2016-01-05 04:35 - 000072504 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\TMEBC64.sys 2018-06-24 15:21 - 2015-06-23 03:49 - 000039056 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmel.sys 2018-06-24 15:19 - 2018-06-24 15:19 - 000000059 _____ C:\WINDOWS\system32\SupportTool.exe.bat 2018-06-24 15:18 - 2018-06-24 15:18 - 000000000 ____D C:\Program Files\Trend Micro 2018-06-24 15:13 - 2018-06-24 15:19 - 134443808 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\Non confirmé 87144.crdownload 2018-06-24 15:01 - 2018-06-24 15:56 - 000000000 ____D C:\Users\adier\AppData\Local\Trend Micro 2018-06-24 14:48 - 2018-06-24 16:13 - 000000000 ____D C:\ProgramData\Trend Micro 2018-06-24 14:46 - 2018-06-24 14:46 - 000000036 _____ C:\Users\adier\AppData\Local\housecall.guid.cache 2018-06-24 14:43 - 2018-06-24 15:24 - 000000000 ____D C:\ProgramData\Trend Micro Installer 2018-06-24 14:36 - 2018-06-24 14:36 - 000000000 ____D C:\Users\adier\Desktop\TESTSECURITY 2018-06-24 14:27 - 2018-06-24 14:28 - 000852798 _____ C:\Users\adier\Downloads\SecurityCheck.exe 2018-06-24 14:23 - 2018-06-24 14:23 - 000602112 _____ (OldTimer Tools) C:\Users\adier\Downloads\OTL.exe 2018-06-24 14:18 - 2018-06-24 14:50 - 309704408 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\TrendMicro_12.0_HE_Full.exe 2018-06-24 14:18 - 2018-06-24 14:44 - 219520480 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\TrendMicro_12.0_EL_Full.exe 2018-06-24 14:18 - 2018-06-24 14:42 - 221472256 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\TrendMicro_12.0_MR_Full.exe 2018-06-23 19:43 - 2018-06-23 19:43 - 000000000 ____D C:\ProgramData\Packages 2018-06-13 22:59 - 2018-06-13 22:59 - 000000000 ____D C:\WINDOWS\Minidump 2018-06-13 22:59 - 2018-06-13 22:59 - 000000000 _____ C:\WINDOWS\Minidump\061318-40718-01.dmp 2018-06-13 00:47 - 2018-06-13 00:47 - 000000000 ____D C:\WINDOWS\PCHEALTH 2018-06-13 00:41 - 2018-06-08 20:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2018-06-13 00:41 - 2018-06-08 19:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-06-13 00:41 - 2018-06-08 19:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2018-06-13 00:41 - 2018-06-08 19:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2018-06-13 00:41 - 2018-06-08 19:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-06-13 00:41 - 2018-06-08 17:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-06-13 00:41 - 2018-06-08 11:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2018-06-13 00:41 - 2018-06-08 10:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-06-13 00:41 - 2018-06-08 10:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2018-06-13 00:41 - 2018-06-08 10:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll 2018-06-13 00:41 - 2018-06-08 10:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-06-13 00:41 - 2018-06-08 10:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2018-06-13 00:41 - 2018-06-08 10:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2018-06-13 00:41 - 2018-06-08 10:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2018-06-13 00:41 - 2018-06-08 10:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-06-13 00:41 - 2018-06-08 10:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll 2018-06-13 00:41 - 2018-06-08 10:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2018-06-13 00:41 - 2018-06-08 10:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-06-13 00:41 - 2018-06-08 10:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2018-06-13 00:41 - 2018-06-08 10:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2018-06-13 00:41 - 2018-06-08 10:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-06-13 00:41 - 2018-06-08 10:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-06-13 00:41 - 2018-06-08 10:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-06-13 00:41 - 2018-06-08 10:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-06-13 00:41 - 2018-06-08 10:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2018-06-13 00:41 - 2018-06-08 09:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-06-13 00:41 - 2018-06-08 09:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2018-06-13 00:41 - 2018-06-08 09:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-06-13 00:41 - 2018-06-08 09:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-06-13 00:41 - 2018-06-08 09:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll 2018-06-13 00:41 - 2018-06-06 19:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll 2018-06-13 00:40 - 2018-06-08 20:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2018-06-13 00:40 - 2018-06-08 20:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2018-06-13 00:40 - 2018-06-08 20:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2018-06-13 00:40 - 2018-06-08 20:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe 2018-06-13 00:40 - 2018-06-08 20:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL 2018-06-13 00:40 - 2018-06-08 20:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll 2018-06-13 00:40 - 2018-06-08 19:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2018-06-13 00:40 - 2018-06-08 19:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2018-06-13 00:40 - 2018-06-08 19:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll 2018-06-13 00:40 - 2018-06-08 19:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe 2018-06-13 00:40 - 2018-06-08 19:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2018-06-13 00:40 - 2018-06-08 19:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2018-06-13 00:40 - 2018-06-08 19:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll 2018-06-13 00:40 - 2018-06-08 19:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll 2018-06-13 00:40 - 2018-06-08 19:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll 2018-06-13 00:40 - 2018-06-08 19:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2018-06-13 00:40 - 2018-06-08 19:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll 2018-06-13 00:40 - 2018-06-08 19:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2018-06-13 00:40 - 2018-06-08 19:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll 2018-06-13 00:40 - 2018-06-08 19:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2018-06-13 00:40 - 2018-06-08 19:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2018-06-13 00:40 - 2018-06-08 19:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll 2018-06-13 00:40 - 2018-06-08 19:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2018-06-13 00:40 - 2018-06-08 19:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2018-06-13 00:40 - 2018-06-08 19:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2018-06-13 00:40 - 2018-06-08 19:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2018-06-13 00:40 - 2018-06-08 19:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2018-06-13 00:40 - 2018-06-08 19:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2018-06-13 00:40 - 2018-06-08 19:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2018-06-13 00:40 - 2018-06-08 19:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2018-06-13 00:40 - 2018-06-08 19:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2018-06-13 00:40 - 2018-06-08 19:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll 2018-06-13 00:40 - 2018-06-08 18:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2018-06-13 00:40 - 2018-06-08 17:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL 2018-06-13 00:40 - 2018-06-08 17:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll 2018-06-13 00:40 - 2018-06-08 17:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe 2018-06-13 00:40 - 2018-06-08 17:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2018-06-13 00:40 - 2018-06-08 17:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2018-06-13 00:40 - 2018-06-08 17:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll 2018-06-13 00:40 - 2018-06-08 17:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-06-13 00:40 - 2018-06-08 17:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll 2018-06-13 00:40 - 2018-06-08 17:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2018-06-13 00:40 - 2018-06-08 17:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2018-06-13 00:40 - 2018-06-08 17:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll 2018-06-13 00:40 - 2018-06-08 17:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2018-06-13 00:40 - 2018-06-08 17:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2018-06-13 00:40 - 2018-06-08 17:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2018-06-13 00:40 - 2018-06-08 17:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll 2018-06-13 00:40 - 2018-06-08 17:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe 2018-06-13 00:40 - 2018-06-08 17:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll 2018-06-13 00:40 - 2018-06-08 17:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2018-06-13 00:40 - 2018-06-08 15:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll 2018-06-13 00:40 - 2018-06-08 15:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2018-06-13 00:40 - 2018-06-08 11:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2018-06-13 00:40 - 2018-06-08 11:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2018-06-13 00:40 - 2018-06-08 11:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2018-06-13 00:40 - 2018-06-08 11:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2018-06-13 00:40 - 2018-06-08 11:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2018-06-13 00:40 - 2018-06-08 11:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2018-06-13 00:40 - 2018-06-08 11:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2018-06-13 00:40 - 2018-06-08 11:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys 2018-06-13 00:40 - 2018-06-08 11:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2018-06-13 00:40 - 2018-06-08 10:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-06-13 00:40 - 2018-06-08 10:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-06-13 00:40 - 2018-06-08 10:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2018-06-13 00:40 - 2018-06-08 10:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2018-06-13 00:40 - 2018-06-08 10:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll 2018-06-13 00:40 - 2018-06-08 10:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll 2018-06-13 00:40 - 2018-06-08 10:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-06-13 00:40 - 2018-06-08 10:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-06-13 00:40 - 2018-06-08 10:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys 2018-06-13 00:40 - 2018-06-08 10:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2018-06-13 00:40 - 2018-06-08 10:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2018-06-13 00:40 - 2018-06-08 10:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2018-06-13 00:40 - 2018-06-08 10:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll 2018-06-13 00:40 - 2018-06-08 10:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2018-06-13 00:40 - 2018-06-08 10:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-06-13 00:40 - 2018-06-08 10:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2018-06-13 00:40 - 2018-06-08 10:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2018-06-13 00:40 - 2018-06-08 10:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe 2018-06-13 00:40 - 2018-06-08 10:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2018-06-13 00:40 - 2018-06-08 10:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll 2018-06-13 00:40 - 2018-06-08 10:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-06-13 00:40 - 2018-06-08 10:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll 2018-06-13 00:40 - 2018-06-08 10:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL 2018-06-13 00:40 - 2018-06-08 10:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-06-13 00:40 - 2018-06-08 10:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-06-13 00:40 - 2018-06-08 10:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2018-06-13 00:40 - 2018-06-08 10:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2018-06-13 00:40 - 2018-06-08 10:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll 2018-06-13 00:40 - 2018-06-08 10:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll 2018-06-13 00:40 - 2018-06-08 10:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-06-13 00:40 - 2018-06-08 10:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2018-06-13 00:40 - 2018-06-08 10:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll 2018-06-13 00:40 - 2018-06-08 10:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2018-06-13 00:40 - 2018-06-08 10:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL 2018-06-13 00:40 - 2018-06-08 10:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2018-06-13 00:40 - 2018-06-08 10:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2018-06-13 00:40 - 2018-06-08 10:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2018-06-13 00:40 - 2018-06-08 10:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2018-06-13 00:40 - 2018-06-08 10:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll 2018-06-13 00:40 - 2018-06-08 10:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll 2018-06-13 00:40 - 2018-06-08 10:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll 2018-06-13 00:40 - 2018-06-08 10:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll 2018-06-13 00:40 - 2018-06-08 10:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2018-06-13 00:40 - 2018-06-08 10:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll 2018-06-13 00:40 - 2018-06-08 10:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys 2018-06-13 00:40 - 2018-06-08 10:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2018-06-13 00:40 - 2018-06-08 10:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe 2018-06-13 00:40 - 2018-06-08 10:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe 2018-06-13 00:40 - 2018-06-08 10:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll 2018-06-13 00:40 - 2018-06-08 10:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-06-13 00:40 - 2018-06-08 10:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe 2018-06-13 00:40 - 2018-06-08 10:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll 2018-06-13 00:40 - 2018-06-08 10:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2018-06-13 00:40 - 2018-06-08 10:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2018-06-13 00:40 - 2018-06-08 10:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll 2018-06-13 00:40 - 2018-06-08 10:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll 2018-06-13 00:40 - 2018-06-08 10:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2018-06-13 00:40 - 2018-06-08 10:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2018-06-13 00:40 - 2018-06-08 10:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll 2018-06-13 00:40 - 2018-06-08 10:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll 2018-06-13 00:40 - 2018-06-08 10:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe 2018-06-13 00:40 - 2018-06-08 10:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll 2018-06-13 00:40 - 2018-06-08 10:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll 2018-06-13 00:40 - 2018-06-08 10:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys 2018-06-13 00:40 - 2018-06-08 09:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2018-06-13 00:40 - 2018-06-08 09:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2018-06-13 00:40 - 2018-06-08 09:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2018-06-13 00:40 - 2018-06-08 09:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2018-06-13 00:40 - 2018-06-08 09:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll 2018-06-13 00:40 - 2018-06-08 09:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2018-06-13 00:40 - 2018-06-08 09:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe 2018-06-13 00:40 - 2018-06-08 09:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll 2018-06-13 00:40 - 2018-06-08 09:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2018-06-13 00:40 - 2018-06-08 09:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll 2018-06-13 00:40 - 2018-06-08 09:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe 2018-06-13 00:40 - 2018-06-08 09:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2018-06-13 00:40 - 2018-06-08 09:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2018-06-13 00:40 - 2018-06-08 09:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll 2018-06-13 00:40 - 2018-06-08 09:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2018-06-13 00:40 - 2018-06-08 09:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll 2018-06-13 00:40 - 2018-06-08 09:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys 2018-06-13 00:40 - 2018-06-08 09:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2018-06-13 00:40 - 2018-06-08 09:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll 2018-06-13 00:40 - 2018-06-08 09:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL 2018-06-13 00:40 - 2018-06-08 09:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-06-13 00:40 - 2018-06-08 09:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2018-06-13 00:40 - 2018-06-08 09:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-06-13 00:40 - 2018-06-08 09:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL 2018-06-13 00:40 - 2018-06-08 09:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2018-06-13 00:40 - 2018-06-08 09:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL 2018-06-13 00:40 - 2018-06-08 09:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2018-06-13 00:40 - 2018-06-08 09:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2018-06-13 00:40 - 2018-06-08 09:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2018-06-13 00:40 - 2018-06-08 09:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2018-06-13 00:40 - 2018-06-08 09:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2018-06-13 00:40 - 2018-06-08 09:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2018-06-13 00:40 - 2018-06-08 09:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll 2018-06-13 00:40 - 2018-06-08 09:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2018-06-13 00:40 - 2018-06-08 08:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim 2018-06-13 00:40 - 2018-06-06 05:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2018-06-13 00:40 - 2018-06-02 00:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2018-06-13 00:40 - 2018-06-01 23:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2018-06-13 00:40 - 2018-05-25 04:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2018-06-12 02:07 - 2018-06-12 02:07 - 000001970 _____ C:\Users\Public\Desktop\Garmin Express.lnk 2018-06-12 02:07 - 2018-06-12 02:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin 2018-06-12 00:58 - 2018-06-12 00:58 - 000000094 _____ C:\Users\adier\Desktop\new 107.txt 2018-06-11 04:16 - 2018-06-11 04:16 - 000000171 _____ C:\Users\adier\Desktop\ToBeIncorported.txt 2018-06-11 00:09 - 2018-06-11 03:42 - 000000000 ____D C:\Users\adier\AppData\Local\PlaceholderTileLogoFolder 2018-06-10 22:37 - 2018-06-11 05:11 - 000000000 ____D C:\Users\adier\AppData\Local\D3DSCache 2018-06-10 18:41 - 2018-06-10 18:41 - 000001417 _____ C:\Users\adier\Desktop\Microsoft Edge.lnk 2018-06-10 18:38 - 2018-06-10 18:38 - 000000020 ___SH C:\Users\adier\ntuser.ini 2018-06-10 18:36 - 2018-06-24 16:52 - 000004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1D579E07-98CC-4A80-9EFF-AC1441AC3603} 2018-06-10 18:36 - 2018-06-24 15:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-06-10 18:36 - 2018-06-24 00:08 - 000003240 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForreida 2018-06-10 18:36 - 2018-06-12 02:07 - 000003626 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask 2018-06-10 18:36 - 2018-06-10 18:37 - 000003516 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2018-06-10 18:36 - 2018-06-10 18:37 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2018-06-10 18:36 - 2018-06-10 18:37 - 000003236 _____ C:\WINDOWS\System32\Tasks\DriverMaxWelcome 2018-06-10 18:36 - 2018-06-10 18:37 - 000003108 _____ C:\WINDOWS\System32\Tasks\KMSAutoNet 2018-06-10 18:36 - 2018-06-10 18:37 - 000002598 _____ C:\WINDOWS\System32\Tasks\CorelUpdateHelperTaskCore 2018-06-10 18:36 - 2018-06-10 18:37 - 000002278 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (adier) 2018-06-10 18:36 - 2018-06-10 18:36 - 000002914 _____ C:\WINDOWS\System32\Tasks\DriverMax Notification 2018-06-10 18:36 - 2018-06-10 18:36 - 000002886 _____ C:\WINDOWS\System32\Tasks\DriverMaxAgent 2018-06-10 18:36 - 2018-06-10 18:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\Remediation 2018-06-10 18:36 - 2018-06-10 18:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard 2018-06-10 18:35 - 2018-06-10 18:36 - 000011433 _____ C:\WINDOWS\diagwrn.xml 2018-06-10 18:35 - 2018-06-10 18:36 - 000011433 _____ C:\WINDOWS\diagerr.xml 2018-06-10 18:21 - 2018-06-24 15:47 - 001766594 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-06-10 18:13 - 2018-06-10 18:13 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2018-06-10 18:10 - 2018-06-24 13:55 - 000000000 ____D C:\Users\adier 2018-06-10 18:10 - 2018-06-10 18:20 - 000000000 ____D C:\Users\postgres 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Voisinage réseau 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Voisinage d'impression 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Modèles 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Mes documents 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Menu Démarrer 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Documents\Mes vidéos 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Documents\Mes images 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Documents\Ma musique 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\AppData\Local\Historique 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Voisinage réseau 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Voisinage d'impression 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Modèles 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Mes documents 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Menu Démarrer 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Documents\Mes vidéos 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Documents\Mes images 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Documents\Ma musique 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\AppData\Local\Historique 2018-06-10 18:10 - 2018-04-12 00:34 - 000001105 _____ C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-06-10 18:10 - 2018-04-12 00:34 - 000001105 _____ C:\Users\postgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-06-10 18:10 - 2018-01-05 23:47 - 000000000 ____D C:\Users\adier\AppData\Local\Microsoft Help 2018-06-10 18:10 - 2018-01-05 23:47 - 000000000 ____D C:\Users\postgres\AppData\Local\Microsoft Help 2018-06-10 18:10 - 2017-03-25 01:03 - 000000000 ____D C:\Users\adier\AppData\Roaming\Macromedia 2018-06-10 18:10 - 2017-03-25 01:03 - 000000000 ____D C:\Users\postgres\AppData\Roaming\Macromedia 2018-06-10 18:08 - 2018-06-10 18:08 - 000000000 ____D C:\ProgramData\USOShared 2018-06-10 18:08 - 2018-04-12 00:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2018-06-10 18:00 - 2018-06-24 17:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-06-10 18:00 - 2018-06-13 23:09 - 000517816 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-06-10 16:51 - 2018-06-10 16:59 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate 2018-06-10 16:49 - 2018-06-10 16:51 - 000000000 ____D C:\WINDOWS\ServiceProfiles 2018-06-10 16:49 - 2018-06-10 16:49 - 000008192 _____ C:\WINDOWS\system32\config\userdiff 2018-06-10 16:45 - 2018-06-10 16:45 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 020383712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 007436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001947808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe 2018-06-10 16:45 - 2018-06-10 16:45 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl 2018-06-10 16:45 - 2018-06-10 16:45 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl 2018-06-10 16:45 - 2018-06-10 16:45 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx 2018-06-10 16:45 - 2018-06-10 16:45 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2018-06-10 16:45 - 2018-06-10 16:45 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx 2018-06-10 16:45 - 2018-06-10 16:45 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2018-06-10 16:45 - 2018-06-10 16:45 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2018-06-10 16:45 - 2018-06-10 16:45 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2018-06-10 16:45 - 2018-06-10 16:45 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2018-06-10 16:45 - 2018-06-10 16:45 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe 2018-06-10 16:45 - 2018-06-10 16:45 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe 2018-06-10 16:45 - 2018-06-10 16:45 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys 2018-06-10 16:45 - 2018-06-10 16:45 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe 2018-06-10 16:45 - 2018-06-10 16:45 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2018-06-10 16:45 - 2018-06-10 16:45 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2018-06-10 16:45 - 2018-06-10 16:45 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat 2018-06-10 16:45 - 2018-06-10 16:45 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat 2018-06-10 16:45 - 2018-06-10 16:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2018-06-10 16:45 - 2018-06-10 16:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2018-06-10 16:38 - 2018-06-10 16:38 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe 2018-06-10 16:38 - 2018-06-10 16:38 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe 2018-06-10 16:38 - 2018-06-10 16:38 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll 2018-06-10 16:38 - 2018-06-10 16:38 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll 2018-06-10 16:38 - 2018-06-10 16:38 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll 2018-06-10 16:38 - 2018-06-10 16:38 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll 2018-06-10 16:38 - 2018-06-10 16:38 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml 2018-06-10 16:38 - 2018-06-10 16:38 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml 2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files\Reference Assemblies 2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files\MSBuild 2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files (x86)\MSBuild 2018-06-10 16:37 - 2018-06-10 16:37 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2018-06-10 16:37 - 2018-06-10 16:37 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2018-06-10 16:37 - 2018-06-10 16:37 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2018-06-10 16:37 - 2018-06-10 16:37 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2018-06-10 16:37 - 2018-06-10 16:37 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2018-06-10 16:37 - 2018-06-10 16:37 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2018-06-10 16:35 - 2018-06-10 16:35 - 006350848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll 2018-06-10 16:35 - 2018-06-10 16:35 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll 2018-06-10 16:35 - 2018-06-10 16:35 - 005487616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll 2018-06-10 16:35 - 2018-06-10 16:35 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll 2018-06-10 16:35 - 2018-06-10 16:35 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll 2018-06-09 01:04 - 2018-06-09 01:06 - 000000000 ____D C:\Camunda_Home 2018-06-07 22:13 - 2018-06-10 18:39 - 000000000 ___DC C:\WINDOWS\Panther 2018-06-05 17:20 - 2018-06-05 17:20 - 000000951 _____ C:\Users\adier\Desktop\TouchPad - Raccourci.lnk 2018-06-05 17:19 - 2018-06-05 17:19 - 000000096 _____ C:\Users\adier\Desktop\TouchPad.bat 2018-06-05 01:30 - 2018-06-05 01:30 - 000576465 _____ C:\Users\adier\Downloads\Sample(2).pdf 2018-06-04 23:35 - 2018-06-04 23:35 - 000086132 _____ C:\Users\adier\Desktop\Tree.javaBackup 2018-06-03 03:19 - 2018-06-03 03:20 - 000092915 _____ C:\Users\adier\Desktop\LASTCONSTARINTS.txt 2018-06-03 03:19 - 2018-06-03 03:19 - 000002881 _____ C:\Users\adier\Desktop\LASTREQUESTTTTTTTTTT.txt 2018-06-03 03:00 - 2018-06-03 03:00 - 000001038 _____ C:\Users\adier\Desktop\LAST_SCHEMA_CSVFILE_TO_LOAD_USER_MEDECIN_REGION_SECTOR_ETC.txt 2018-06-01 02:46 - 2018-06-01 02:46 - 000000000 ____D C:\Users\adier\Desktop\backup 2018-05-29 22:19 - 2018-05-29 22:20 - 007366237 _____ C:\Users\adier\Downloads\apoc-3.4.0.1-all.jar 2018-05-26 01:18 - 2018-05-26 01:46 - 220200960 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.2-31-amd64.iso 2018-05-26 01:16 - 2018-05-26 01:36 - 213909504 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.2-17-amd64 (1).iso 2018-05-26 01:14 - 2018-05-26 01:41 - 213909504 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.2-17-amd64.iso 2018-05-25 23:54 - 2018-05-26 00:10 - 239003081 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.5-38-amd64.zip ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2018-06-24 16:45 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2018-06-24 16:08 - 2016-11-21 14:30 - 000000000 ____D C:\Users\adier\AppData\LocalLow\Mozilla 2018-06-24 15:48 - 2017-04-08 18:10 - 000000000 ____D C:\Users\adier\AppData\Roaming\FileZilla 2018-06-24 15:47 - 2018-04-12 17:18 - 000791208 _____ C:\WINDOWS\system32\perfh00C.dat 2018-06-24 15:47 - 2018-04-12 17:18 - 000149704 _____ C:\WINDOWS\system32\perfc00C.dat 2018-06-24 15:47 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF 2018-06-24 15:45 - 2018-04-11 22:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2018-06-24 15:42 - 2017-03-15 20:57 - 000000000 ____D C:\Users\adier\AppData\Local\TSVNCache 2018-06-24 15:39 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-06-24 15:39 - 2017-03-03 16:05 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2018-06-24 15:23 - 2017-03-26 01:33 - 000000000 ____D C:\Users\adier\.p2 2018-06-24 15:23 - 2017-03-06 17:30 - 000000000 ____D C:\Users\adier\AppData\Local\Eclipse 2018-06-24 15:21 - 2018-04-12 00:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2018-06-24 15:18 - 2017-04-11 16:21 - 000000000 ____D C:\eclipse 2018-06-24 14:59 - 2017-08-22 23:48 - 000000000 ____D C:\Program Files (x86)\Trend Micro 2018-06-24 14:03 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-06-24 13:37 - 2017-10-11 15:23 - 000000000 ____D C:\Program Files\Firefox Developer Edition 2018-06-24 13:37 - 2017-09-12 00:35 - 000000348 _____ C:\WINDOWS\Tasks\HPCeeScheduleForreida.job 2018-06-24 13:37 - 2017-03-03 18:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2018-06-23 21:39 - 2017-10-11 15:23 - 000001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Developer Edition.lnk 2018-06-23 19:43 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps 2018-06-23 19:41 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-06-23 19:13 - 2018-01-04 19:37 - 000000000 ____D C:\Users\adier\AppData\Local\Packages 2018-06-23 19:06 - 2017-03-03 16:43 - 000000000 ____D C:\Users\adier\AppData\Local\ElevatedDiagnostics 2018-06-21 15:54 - 2017-03-25 22:05 - 000000600 _____ C:\Users\adier\AppData\Local\PUTTY.RND 2018-06-18 16:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2018-06-14 00:03 - 2017-03-03 18:08 - 000002306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-06-14 00:03 - 2017-03-03 18:08 - 000002265 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\zu-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\yo-NG 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\xh-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\wo-SN 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tn-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ti-ET 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\rw-RW 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\nso-ZA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ig-NG 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA 2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\oobe 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\appraiser 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2018-06-13 23:06 - 2018-04-11 22:04 - 000000000 ____D C:\WINDOWS\system32\Dism 2018-06-13 01:51 - 2018-01-03 15:13 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2018-06-13 00:55 - 2017-03-03 17:07 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-06-13 00:49 - 2017-10-11 16:58 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2018-06-13 00:49 - 2017-03-03 17:07 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-06-13 00:46 - 2017-03-02 21:03 - 000000167 _____ C:\WINDOWS\win.ini 2018-06-12 02:08 - 2018-02-01 00:31 - 000000000 ____D C:\Program Files (x86)\Garmin 2018-06-12 02:08 - 2017-03-04 00:54 - 000000000 ____D C:\ProgramData\Package Cache 2018-06-11 03:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\appcompat 2018-06-10 22:08 - 2017-03-02 22:56 - 000000000 ____D C:\Users\adier\AppData\Local\ConnectedDevicesPlatform 2018-06-10 18:39 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Registration 2018-06-10 18:39 - 2018-01-04 20:10 - 000000000 ___RD C:\Users\adier\3D Objects 2018-06-10 18:39 - 2016-02-13 14:18 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-06-10 18:37 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender 2018-06-10 18:37 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\windows nt 2018-06-10 18:35 - 2017-03-26 01:44 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eclipse 2018-06-10 18:27 - 2017-06-06 00:57 - 000023208 _____ C:\WINDOWS\system32\emptyregdb.dat 2018-06-10 18:15 - 2018-01-11 16:39 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atlassian 2018-06-10 18:15 - 2017-08-22 23:28 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis 2018-06-10 18:15 - 2017-05-08 18:31 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud 2018-06-10 18:15 - 2017-03-07 21:12 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2018-06-10 18:11 - 2017-03-17 19:13 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2018-06-10 18:08 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\USOPrivate 2018-06-10 18:08 - 2018-01-07 18:25 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2018-06-10 18:07 - 2017-06-06 00:29 - 000000000 ____D C:\WINDOWS\SysWOW64\sda 2018-06-10 16:59 - 2018-04-12 00:41 - 000000000 ____D C:\WINDOWS\Setup 2018-06-10 16:59 - 2018-04-12 00:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template 2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\spool 2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF 2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\system 2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2018-06-10 16:59 - 2018-02-14 16:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2018-06-10 16:59 - 2018-01-16 14:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++ 2018-06-10 16:59 - 2018-01-08 23:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maestro 2018-06-10 16:59 - 2018-01-08 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack 2018-06-10 16:59 - 2018-01-07 18:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos 2018-06-10 16:59 - 2018-01-03 15:05 - 000000000 ____D C:\WINDOWS\SHELLNEW 2018-06-10 16:59 - 2017-12-03 17:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2018-06-10 16:59 - 2017-11-10 18:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center 2018-06-10 16:59 - 2017-10-31 14:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard 2018-06-10 16:59 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated 2018-06-10 16:59 - 2017-09-11 18:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support 2018-06-10 16:59 - 2017-09-11 18:16 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard 2018-06-10 16:59 - 2017-08-20 00:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge 2018-06-10 16:59 - 2017-08-14 16:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN 2018-06-10 16:59 - 2017-08-11 03:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ExamDiff 2018-06-10 16:59 - 2017-08-04 01:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VisualSVN 2018-06-10 16:59 - 2017-08-02 23:10 - 000000000 ____D C:\WINDOWS\system32\camunda-h2-dbs 2018-06-10 16:59 - 2017-08-02 22:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2018-06-10 16:59 - 2017-08-02 22:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2018-06-10 16:59 - 2017-08-01 01:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 2018-06-10 16:59 - 2017-07-28 14:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X8 (64-bit) 2018-06-10 16:59 - 2017-07-25 00:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher 2018-06-10 16:59 - 2017-06-06 00:30 - 000000000 ____D C:\Program Files\AMD 2018-06-10 16:59 - 2017-05-31 22:45 - 000000000 ____D C:\Program Files\UNP 2018-06-10 16:59 - 2017-05-09 19:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programme de désinstallation de l'imprimante Canon 2018-06-10 16:59 - 2017-04-21 18:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spider 2018-06-10 16:59 - 2017-04-21 16:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jar2Exe Wizard 2018-06-10 16:59 - 2017-04-08 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2018-06-10 16:59 - 2017-03-21 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphviz 2.38 2018-06-10 16:59 - 2017-03-07 21:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2018-06-10 16:59 - 2017-03-04 00:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Who Is On My Wifi 2018-06-10 16:59 - 2017-03-03 20:56 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2018-06-10 16:59 - 2017-03-03 20:55 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe 2018-06-10 16:59 - 2017-03-03 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sound Organizer 2018-06-10 16:58 - 2018-04-12 00:38 - 000000000 __RHD C:\Users\Public\Libraries 2018-06-10 16:53 - 2017-06-06 00:30 - 000000000 ____D C:\WINDOWS\system32\SRSLabs 2018-06-10 16:51 - 2018-02-09 23:34 - 000000000 ____D C:\Program Files\Synaptics 2018-06-10 16:51 - 2017-09-11 14:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2018-06-10 16:51 - 2017-08-08 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartBear 2018-06-10 16:51 - 2017-06-06 00:30 - 000000000 ____D C:\Program Files\Realtek 2018-06-10 16:51 - 2017-06-06 00:30 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies 2018-06-10 16:51 - 2017-03-04 19:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPUBSOFT 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\vi-VN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ur-PK 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ug-CN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tt-RU 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tk-TM 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\te-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sw-KE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sq-AL 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\quz-PE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\prs-AF 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\pa-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\or-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\nn-NO 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ne-NP 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mt-MT 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mr-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mn-MN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ml-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mk-MK 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mi-NZ 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\lo-LA 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\lb-LU 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ky-KG 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\kok-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\kn-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\km-KH 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\kk-KZ 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ka-GE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\is-IS 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\id-ID 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\hy-AM 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\gu-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\gd-GB 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ga-IE 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\fil-PH 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\fa-IR 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\cy-GB 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\bn-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\bn-BD 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\be-BY 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\as-IN 2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\af-ZA 2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ta-in 2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\si-lk 2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\setup 2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\am-et 2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Provisioning 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\MUI 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\et-EE 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\es-MX 2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\en-GB 2018-06-10 16:36 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\OCR 2018-06-06 00:29 - 2018-04-12 00:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-06-06 00:29 - 2018-04-12 00:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-06-02 15:04 - 2017-03-04 21:10 - 000000000 ____D C:\Program Files\Common Files\AV 2018-06-02 15:03 - 2018-02-27 11:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2018-06-02 14:58 - 2018-01-07 03:24 - 000000000 ____D C:\Program Files\Malwarebytes 2018-06-02 14:58 - 2017-03-03 21:16 - 000000000 ____D C:\ProgramData\Malwarebytes 2018-06-02 14:56 - 2014-01-26 22:34 - 000000000 ____D C:\Users\adier\AppData\LocalLow\Adobe ==================== Fichiers à la racine de certains dossiers ======= 2014-08-23 20:10 - 2014-08-23 20:10 - 039414096 _____ (EnterpriseDB) C:\Users\adier\edb_apachephp.exe 2014-08-23 20:10 - 2014-08-23 20:10 - 017175824 _____ (EnterpriseDB) C:\Users\adier\edb_mtk.exe 2014-08-23 20:11 - 2014-08-23 20:11 - 007711840 _____ (EnterpriseDB) C:\Users\adier\edb_npgsql.exe 2014-08-23 20:11 - 2014-08-23 20:11 - 013558376 _____ (EnterpriseDB) C:\Users\adier\edb_pem_agent.exe 2014-08-23 20:11 - 2014-08-23 20:12 - 064780416 _____ (EnterpriseDB) C:\Users\adier\edb_pem_client.exe 2014-08-23 20:12 - 2014-08-23 20:14 - 168476544 _____ (EnterpriseDB) C:\Users\adier\edb_pem_server.exe 2014-08-23 20:14 - 2014-08-23 20:14 - 006200448 _____ (EnterpriseDB) C:\Users\adier\edb_pem_sqlprofiler_pg91.exe 2014-08-23 20:14 - 2014-08-23 20:15 - 012967360 _____ (EnterpriseDB) C:\Users\adier\edb_pgagent.exe 2014-08-23 20:15 - 2014-08-23 20:15 - 014490424 _____ (EnterpriseDB) C:\Users\adier\edb_pgbouncer.exe 2014-08-25 00:47 - 2014-08-25 00:47 - 013841144 _____ (EnterpriseDB) C:\Users\adier\edb_pgbouncer9.3.exe 2014-08-23 20:15 - 2014-08-23 20:15 - 007084280 _____ (EnterpriseDB) C:\Users\adier\edb_pgjdbc.exe 2014-08-23 20:15 - 2014-08-23 20:15 - 007177744 _____ (EnterpriseDB) C:\Users\adier\edb_phppgadmin.exe 2014-08-23 20:15 - 2014-08-23 20:15 - 013468632 _____ (EnterpriseDB) C:\Users\adier\edb_psqlodbc.exe 2014-08-25 00:47 - 2014-08-25 00:47 - 011480448 _____ (EnterpriseDB) C:\Users\adier\edb_sbp_as93.exe 2014-08-23 20:15 - 2014-08-23 20:16 - 006382424 _____ (EnterpriseDB) C:\Users\adier\edb_slony_i_pg91.exe 2014-08-23 20:16 - 2014-08-23 20:16 - 011395296 _____ (EnterpriseDB) C:\Users\adier\edb_sqlprotect_pg91.exe 2014-08-23 20:16 - 2014-08-23 20:16 - 024802288 _____ (EnterpriseDB) C:\Users\adier\edb_updatemonitor.exe 2014-08-23 20:16 - 2014-08-23 20:17 - 035072224 _____ (EnterpriseDB) C:\Users\adier\edb_xdb.exe 2014-08-25 00:47 - 2014-08-25 00:48 - 064780416 _____ (EnterpriseDB) C:\Users\adier\pem_client.exe 2014-08-23 20:17 - 2014-08-23 20:17 - 021017439 _____ () C:\Users\adier\postgis_2_0_pg91.exe 2014-08-23 20:17 - 2014-08-23 20:18 - 043754240 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_84.exe 2014-08-23 20:18 - 2014-08-23 20:21 - 051895176 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_90.exe 2014-08-23 20:21 - 2014-08-23 20:22 - 053293336 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_91.exe 2014-08-23 20:23 - 2014-08-23 20:24 - 055789672 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_92.exe 2014-08-23 20:24 - 2014-08-23 20:26 - 056552816 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_93.exe 2014-08-23 20:26 - 2014-08-23 20:27 - 056287640 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_94.exe 2014-08-25 00:49 - 2014-08-25 00:49 - 011596872 _____ (EnterpriseDB) C:\Users\adier\ppas_connectors_as93.exe 2014-08-25 00:49 - 2014-08-25 00:49 - 027976104 _____ (EnterpriseDB) C:\Users\adier\ppas_dbserver_as93.exe 2014-08-25 00:48 - 2014-08-25 00:49 - 007413576 _____ (EnterpriseDB) C:\Users\adier\ppas_edbplus_as93.exe 2014-08-25 00:48 - 2014-08-25 00:48 - 008099752 _____ (EnterpriseDB) C:\Users\adier\ppas_mtk_as93.exe 2014-08-25 00:49 - 2014-08-25 00:49 - 006735816 _____ (EnterpriseDB) C:\Users\adier\ppas_replication_as93.exe 2017-04-21 17:13 - 2017-04-21 17:13 - 000000600 _____ () C:\Users\adier\AppData\Roaming\winscp.rnd 2018-06-24 14:46 - 2018-06-24 14:46 - 000000036 _____ () C:\Users\adier\AppData\Local\housecall.guid.cache 2017-03-25 22:05 - 2018-06-21 15:54 - 000000600 _____ () C:\Users\adier\AppData\Local\PUTTY.RND 2017-04-13 22:26 - 2017-04-13 22:26 - 000000746 _____ () C:\Users\adier\AppData\Local\recently-used.xbel 2017-03-24 21:24 - 2017-03-24 21:24 - 000007605 _____ () C:\Users\adier\AppData\Local\Resmon.ResmonCfg ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2018-06-10 18:00 ==================== Fin de FRST.txt ============================ Addition.txt ========== Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 20.06.2018 Exécuté par adier (24-06-2018 17:06:21) Exécuté depuis C:\Users\adier\Downloads Windows 10 Home Version 1803 17134.112 (X64) (2018-06-10 17:38:49) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-4206151704-2492553960-1182160334-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-4206151704-2492553960-1182160334-503 - Limited - Disabled) Invité (S-1-5-21-4206151704-2492553960-1182160334-501 - Limited - Disabled) postgres (S-1-5-21-4206151704-2492553960-1182160334-1025 - Limited - Enabled) => C:\Users\postgres adier (S-1-5-21-4206151704-2492553960-1182160334-1002 - Administrator - Enabled) => C:\Users\adier WDAGUtilityAccount (S-1-5-21-4206151704-2492553960-1182160334-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Trend Micro Antivirus+ (Enabled - Up to date) {1E5CB925-ABFC-68A9-91DC-4258BDE6C44A} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.23 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 25.0.0.134 - Adobe Systems Incorporated) Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated) Advanced SystemCare 10 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 10.0.3 - IObit) Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version: 1.20.1.47037 - Amazon) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.) ANT Drivers Installer x64 (HKLM\...\{20AB389B-8602-403C-B19B-F0A1D6C510A5}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden aTube Catcher version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp) Battery Status (HKLM-x32\...\Battery Status) (Version: 0.99 - Tom Talpey) Canon LBP3010/LBP3018/LBP3050 (HKLM\...\Canon LBP3010/LBP3018/LBP3050) (Version: - ) Corel Graphics - Windows Shell Extension (HKLM\...\_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.0.448 - Corel Corporation) Corel Graphics - Windows Shell Extension (HKLM\...\{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.448 - Corel Corporation) Hidden Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{C8730B1A-133D-4546-8E21-9EC186341F20}) (Version: 18.0.448 - Corel Corporation) Hidden Corel Update Manager (HKLM\...\{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}) (Version: 2.7.355 - Corel corporation) Hidden CorelDRAW Graphics Suite X8 - BR (x64) (HKLM\...\{67D57366-EFCC-46DA-BB1F-BBE89B377177}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Capture (x64) (HKLM\...\{1253ED86-69FD-4A7B-BDF2-96A522583A88}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Common (x64) (HKLM\...\{72922AB6-F920-4C98-985D-EC90CE0918D4}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Connect (x64) (HKLM\...\{9782A612-03A7-488F-A598-33558163D8F8}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - CS (x64) (HKLM\...\{300DB480-7301-436A-A312-B695B2BC6D71}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - CT (x64) (HKLM\...\{43C4A17D-93D9-41C6-8ACA-370EA390ED2A}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Custom Data (x64) (HKLM\...\{02C85FBD-87D3-4352-BF2E-AFE897CD5559}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - CZ (x64) (HKLM\...\{A67AEE14-0435-4B8C-A367-F5EDE6CAF9F6}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - DE (x64) (HKLM\...\{4AA43BE3-D21B-44D7-B9CD-86692DEF3706}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Draw (x64) (HKLM\...\{A66E09BB-9892-421D-9EB9-311D12AA5244}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - EN (x64) (HKLM\...\{A0845CAD-ED13-46A4-A050-5ACE4631FDEC}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - ES (x64) (HKLM\...\{B1452C41-DC90-4B58-8320-ABB515E87FFB}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Filters (x64) (HKLM\...\{6E6D1438-33CC-413B-BC96-3497B1271CDD}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Font Manager (x64) (HKLM\...\{5FB5FF89-0938-49D9-850B-53B78B84A7E4}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - FR (x64) (HKLM\...\{0A182180-3BAF-4B94-BFD0-CF082CC5FF0D}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - IPM (x64) (HKLM\...\{A040C72A-0ADC-4FB9-9DB4-19B18F6053F1}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - IPM Content (x64) (HKLM\...\{FB081BA0-08D2-4C8C-9E55-788A90430BE3}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - IT (x64) (HKLM\...\{8285FEBA-D373-493F-BC78-934F84A0A298}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - JP (x64) (HKLM\...\{F5A1D3E4-416E-4723-AD35-86A372B99174}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - NL (x64) (HKLM\...\{A7922CC8-0EBD-497B-B381-5B3992905327}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (HKLM\...\{04D8C47E-C0FE-4CA5-8878-91ECD9552109}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - PL (x64) (HKLM\...\{6F03D92C-48DB-4182-8A51-BEF8FE64B72C}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Redist (x64) (HKLM\...\{50D1BD2D-6D8C-45A8-9DB5-CDAB7227DB36}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - RU (x64) (HKLM\...\{B83D220A-33AB-4AF5-963A-887BD971270E}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Setup Files (x64) (HKLM\...\{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - VBA (x64) (HKLM\...\{48DD8181-A983-447B-9660-A55A935CA751}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (HKLM\...\{81EBD8D4-9142-4D33-BF34-D99EFC1180F5}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Workspaces (x64) (HKLM\...\{1D4B870D-A5A8-4B88-9520-ED8EFD545AA1}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Writing Tools (x64) (HKLM\...\{23A2ABD8-8231-48AD-AD71-FF0566A7DD8F}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0.0.448 - Corel Corporation) CorelDRAW Graphics Suite X8 (HKLM\...\{ECFAF1D6-342D-4AE2-B6BF-82B22F9FE8DE}) (Version: 18.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 -TR (x64) (HKLM\...\{ACC8C1B0-E560-4B42-AA52-9CAD14883B29}) (Version: 18.0 - Corel Corporation) Hidden CPUID HWMonitor Pro 1.29 (HKLM\...\CPUID HWMonitorPro_is1) (Version: 1.29 - ) Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.11 - Bloodshed Software) EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS) Elevated Installer (HKLM-x32\...\{6E257EB0-5EFF-416D-82D4-592924566BB4}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company) EPubsoft ToolBox 9.5.5 (HKLM-x32\...\{D21B4A41-3327-4CA5-A218-C751706DFF27}) (Version: 9.5.5 - EPUBSOFT) ExamDiff 1.9 (Build 1.9.0.2) (HKLM-x32\...\ExamDiff_is1) (Version: 1.9.0.2 - PrestoSoft LLC) FileZilla Client 3.25.1 (HKLM-x32\...\FileZilla Client) (Version: 3.25.1 - Tim Kosse) Firefox Developer Edition 62.0 (x64 en-US) (HKLM\...\Firefox Developer Edition 62.0 (x64 en-US)) (Version: 62.0 - Mozilla) Garmin Express (HKLM-x32\...\{3e534d41-dcc4-4f51-9858-70dd42beb3d5}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{E1C18A5C-63D7-4DC5-977F-5B4BAB4169D9}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.87 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden Graphviz (HKLM-x32\...\{884CF059-9A11-4DF7-A2A7-17EFE90B9278}) (Version: 2.38 - AT&T Research Labs.) HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro) HP AC Power Control (HKLM\...\{F819C151-FFEE-4F01-BE68-0D1F76574F44}) (Version: 1.0.6 - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}) (Version: 8.6.18.11 - HP Inc.) HP Support Solutions Framework (HKLM-x32\...\{9F79033A-84FC-4137-BCDC-C505246F78E1}) (Version: 12.9.18.3 - HP Inc.) HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) ISO/TS 14048 data editor version 1.1b (HKLM-x32\...\ISO/TS 14048 data editor_is1) (Version: - ) Jar2Exe Wizard (HKLM-x32\...\{78DA9894-13E4-4858-9A4A-4F7A523203BA}) (Version: 2.1.1107 - RegExLab.com) Java 7 Update 76 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417076FF}) (Version: 7.0.760 - Oracle) Java 8 Update 144 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180144F0}) (Version: 8.0.1440.1 - Oracle Corporation) Java SE Development Kit 7 Update 76 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170760}) (Version: 1.7.0.760 - Oracle) Java SE Development Kit 8 Update 144 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180144}) (Version: 8.0.1440.1 - Oracle Corporation) Maestro 2004.01 (Public) (HKLM-x32\...\Maestro_is1) (Version: - NASA Jet Propulsion Laboratory, California Institute of Technology) Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation) Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 56.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 56.0 (x86 fr)) (Version: 56.0 - Mozilla) Mozilla Firefox 59.0 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0 (x64 en-US)) (Version: 59.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 59.0 - Mozilla) MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.4.2 - MusicBrainz) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.6 - Notepad++ Team) OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) Progress Telerik Fiddler (HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\Fiddler2) (Version: 5.0.20181.14850 - Telerik) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29068 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.) Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft) SoapUI 5.3.0 5.3.0 (HKLM-x32\...\5517-2803-0637-4585) (Version: 5.3.0 - SmartBear Software) Sound Organizer (HKLM-x32\...\{53F7486D-41B5-4117-8914-A85B0DBDDC07}) (Version: 1.4.0.11260 - Sony Corporation) SourceTree (HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\SourceTree) (Version: 2.4.7 - Atlassian) Spider Version 1.1b (HKLM-x32\...\Spider_is1) (Version: - ) SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated) TortoiseSVN 1.9.7.27907 (64 bit) (HKLM\...\{FBD345DC-093A-4D89-A9B8-10C1BA356048}) (Version: 1.9.27907 - TortoiseSVN) Trend Micro Antivirus+ (HKLM\...\{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}) (Version: 12.0 - Trend Micro Inc.) Tunatic (HKLM-x32\...\Tunatic) (Version: - ) Update for Skype for Business 2015 (KB4022170) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{623DC402-8FDC-490D-9881-E60F5337036E}) (Version: - Microsoft) Update for Skype for Business 2015 (KB4022170) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{623DC402-8FDC-490D-9881-E60F5337036E}) (Version: - Microsoft) Update for Skype for Business 2015 (KB4022170) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{623DC402-8FDC-490D-9881-E60F5337036E}) (Version: - Microsoft) VisualSVN Server 3.6.3 (HKLM\...\{7D9351AA-66C2-4185-ACE6-85AD06F5BA78}) (Version: 3.6.3.0 - VisualSVN Software Ltd.) Who Is On My Wifi version 4.0.1 (HKLM-x32\...\{010D45A1-093D-4534-8147-4E10E80F81CC}_is1) (Version: 4.0.1 - IO3O LLC) WinHTTrack Website Copier 3.49-2 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack) WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software) WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) Wireshark 2.2.6 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.2.6 - The Wireshark developer community, hxxps://www.wireshark.org) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\adier\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\adier\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\adier\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier ShellIconOverlayIdentifiers: [ FSOverlayIcon] -> {C0829D19-E5A0-44F5-B56E-D15030C53BB9} => C:\Program Files\Trend Micro\Titanium\plugin\TmOverlayIcon.dll [2017-07-23] (Trend Micro Inc.) ShellIconOverlayIdentifiers: [ Tortoise1Normal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise2Modified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise3Conflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise4Locked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise5ReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise6Deleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise7Added] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise8Ignored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ Tortoise9Unversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ Tortoise1Normal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise2Modified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise3Conflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise4Locked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise5ReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise6Deleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise7Added] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise8Ignored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ Tortoise9Unversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-03-08] () ContextMenuHandlers1: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net) ContextMenuHandlers1: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers1-x32: [{48F45200-91E6-11CE-8A4F-0080C81A28D4}] -> {48F45200-91E6-11CE-8A4F-0080C81A28D4} => C:\Program Files\Trend Micro\UniClient\UiFrmwrk\tmdshell.dll [2017-07-23] (Trend Micro Inc.) ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit) ContextMenuHandlers2: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net) ContextMenuHandlers2: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org) ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit) ContextMenuHandlers4: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net) ContextMenuHandlers4: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org) ContextMenuHandlers5: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net) ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers6: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers6-x32: [{48F45200-91E6-11CE-8A4F-0080C81A28D4}] -> {48F45200-91E6-11CE-8A4F-0080C81A28D4} => C:\Program Files\Trend Micro\UniClient\UiFrmwrk\tmdshell.dll [2017-07-23] (Trend Micro Inc.) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {035B56AF-EFD6-49CA-A446-C8832B27252C} - System32\Tasks\DriverMaxAgent => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe Task: {090450AD-A900-46CD-B7C2-0D51FAF3B866} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2018-06-06] () Task: {0D7652BA-016D-4CDC-8553-E8B524D5C9EC} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {1667C681-F9EA-4AE4-AC82-9B1185355F97} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-05-02] (HP Inc.) Task: {1DD07DBF-7395-4772-8EE6-3D919FB2111E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-05-02] (HP Inc.) Task: {2E78C1F5-48B6-478C-9398-5B1343862994} - \Apple Diagnostics -> Pas de fichier <==== ATTENTION Task: {380F26B0-4D6C-4E34-8855-69B7DBEBD354} - System32\Tasks\DriverMax Notification => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe Task: {3B8B9EB7-3D14-45B5-B45F-3C97AC3AF446} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {45427F42-C5BB-4FA5-A11E-58A221ED2BCC} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-02-23] (Corel Corporation) Task: {503451D4-5A53-48EB-ABC3-21B5A85B31A2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {6054B42F-605E-4F49-B36A-E2DF2EEA601D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {6FD88A97-FA1E-41BF-BFC0-9ADABCC71607} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.) Task: {7A110D69-5309-4FF0-887C-81FAF3F79872} - System32\Tasks\Driver Booster SkipUAC (adier) => C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DriverBooster.exe Task: {8348045D-26F4-476F-B247-1E61D8490C9C} - System32\Tasks\HPCeeScheduleForreida => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-06-24] (HP Inc.) Task: {8591BD3B-53B7-4EE1-A805-93FEE9A52BDB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-03] (Google Inc.) Task: {876045AF-CC85-462F-B273-332DB7BD8835} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-03] (Google Inc.) Task: {9A12EC95-2784-404C-86D8-A2264C1E6ED1} - System32\Tasks\DriverMaxWelcome => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe Task: {9BEFF928-51FA-47DC-81C5-FD0E8DAA559F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.) Task: {A22E453E-6135-41DF-8C98-608F39E3AF6C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-05-11] (HP Inc.) Task: {ACD37BD0-5FCF-4534-BAA7-5ED877D16A97} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {BEB44DCD-4D4F-4AE1-9B42-D96E4E68677C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {C38518D1-F465-4E66-9DAF-E1D5E8D30143} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe Task: {CFE50C79-BB96-4B26-A14E-07F1DD691D45} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-21] () Task: {EA78B15C-FB2E-4717-A856-57C5AA0EED29} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation) Task: {EFE8916B-C2C3-43CA-9903-A6854E0693B9} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\HPCeeScheduleForreida.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier) Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier) Shortcut: C:\Users\adier\Desktop\Maestro.lnk -> C:\Program Files (x86)\JPL\Maestro\WITS.bat () Shortcut: C:\Users\adier\Desktop\TouchPad - Raccourci.lnk -> C:\Users\adier\Desktop\TouchPad.bat () Shortcut: C:\Users\adier\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox Developer Edition.lnk -> C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Developer Edition.lnk -> C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) Shortcut: C:\Users\Public\Desktop\Firefox Developer Edition.lnk -> C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation) ==================== Modules chargés (Avec liste blanche) ============== 2018-06-24 15:18 - 2017-01-13 08:39 - 000076288 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc140-mt-1_62.dll 2018-06-24 15:18 - 2017-01-13 08:41 - 000039424 _____ () C:\Program Files\Trend Micro\AMSP\boost_system-vc140-mt-1_62.dll 2018-06-24 15:18 - 2017-01-13 09:01 - 000737792 _____ () C:\Program Files\Trend Micro\AMSP\sqlite3.dll 2018-06-24 15:18 - 2017-01-13 08:42 - 000131072 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc140-mt-1_62.dll 2018-06-24 15:18 - 2017-01-13 08:39 - 000048640 _____ () C:\Program Files\Trend Micro\AMSP\boost_chrono-vc140-mt-1_62.dll 2018-06-24 15:18 - 2017-01-13 08:55 - 002333184 _____ () C:\Program Files\Trend Micro\AMSP\libprotobuf.dll 2018-06-24 15:15 - 2017-07-23 20:24 - 000182568 _____ () C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll 2018-06-24 15:20 - 2017-07-23 20:24 - 000039424 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_system-vc140-mt-1_62.dll 2018-06-24 15:20 - 2017-07-23 20:24 - 000076288 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_date_time-vc140-mt-1_62.dll 2018-06-24 15:20 - 2017-07-23 20:24 - 000131072 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_thread-vc140-mt-1_62.dll 2018-06-24 15:20 - 2017-07-23 20:24 - 000048640 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_chrono-vc140-mt-1_62.dll 2018-06-24 15:20 - 2017-07-23 20:24 - 001016320 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_regex-vc140-mt-1_62.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll 2017-08-08 23:30 - 2017-08-08 23:30 - 000094432 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll 2017-03-20 16:44 - 2017-03-20 16:44 - 000052392 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-06-13 00:40 - 2018-06-08 09:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-05-25 21:58 - 2018-05-25 21:58 - 027118080 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe 2018-05-25 21:53 - 2018-05-25 21:57 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-05-25 21:53 - 2018-05-25 21:57 - 006748672 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\EntCommon.dll 2017-09-26 23:57 - 2017-09-26 23:58 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-05-25 21:53 - 2018-05-25 21:57 - 009358848 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\EntPlat.dll 2018-05-22 16:53 - 2018-05-22 16:56 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-05-22 16:53 - 2018-05-22 16:56 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2018-05-22 16:53 - 2018-05-22 16:56 - 022374400 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2018-05-22 16:53 - 2018-05-22 16:56 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\skypert.dll 2018-04-17 12:46 - 2018-04-17 12:49 - 001922232 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.9328.1700.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2018-06-14 00:03 - 2018-06-12 06:36 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.87\libglesv2.dll 2018-06-14 00:03 - 2018-06-12 06:36 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.87\libegl.dll 2018-06-24 14:27 - 2018-06-24 14:28 - 000852798 _____ () C:\Users\adier\Downloads\SecurityCheck.exe 2018-06-08 23:01 - 2018-06-08 23:05 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2018-06-08 23:01 - 2018-06-08 23:05 - 067232256 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2017-10-05 10:14 - 2017-10-05 10:20 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll 2018-05-30 19:40 - 2018-05-30 19:45 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll 2018-04-28 22:51 - 2018-04-28 22:55 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll 2018-05-30 19:40 - 2018-05-30 19:42 - 004214784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2018-05-30 19:40 - 2018-05-30 19:45 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll 2018-04-05 11:18 - 2018-04-05 11:25 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll 2018-06-08 23:01 - 2018-06-08 23:05 - 014851072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2018-05-30 19:40 - 2018-05-30 19:45 - 004058624 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2018-06-08 23:01 - 2018-06-08 23:05 - 003266048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2018-05-30 19:40 - 2018-05-30 19:45 - 001393664 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll 2018-05-30 19:40 - 2018-05-30 19:45 - 004218080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-05-30 19:40 - 2018-05-30 19:45 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-06-21 23:18 - 2018-06-21 23:20 - 000093696 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll 2018-06-21 23:18 - 2018-06-21 23:20 - 002447072 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-06-21 23:18 - 2018-06-21 23:20 - 007813632 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll 2017-05-08 10:35 - 2017-05-08 10:35 - 000325632 _____ () C:\Program Files (x86)\Garmin\Device Interaction Service\GpsImgWrapper.dll 2018-06-06 14:31 - 2018-06-06 14:31 - 000073216 _____ () C:\Program Files (x86)\Garmin\Device Interaction Service\FixBootSector.dll 2018-06-24 15:15 - 2017-07-23 20:24 - 000108032 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_thread-vc140-mt-1_62.dll 2018-06-24 15:15 - 2017-07-23 20:24 - 000035840 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_system-vc140-mt-1_62.dll 2018-06-24 15:15 - 2017-07-23 20:24 - 000064000 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_date_time-vc140-mt-1_62.dll 2018-06-24 15:15 - 2017-07-23 20:24 - 000044032 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_chrono-vc140-mt-1_62.dll 2018-03-19 00:40 - 2018-03-19 00:40 - 000021680 _____ () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\WINDOWS\system32\msln.exe:d8e5e202df606324abe82f1f62dab53d [1494] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2017-03-02 21:03 - 2017-03-02 21:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == HKLM\...\StartupApproved\StartupFolder: => "Who Is On My Wifi.lnk" HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\StartupApproved\Run: => "uTorrent" HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\StartupApproved\Run: => "OneDriveSetup" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{6A097C64-B072-4695-87DB-4E00EFC764D8}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{39210061-2B7D-4B12-B85F-BFD0BDCC1B10}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{BE3F843C-6723-4A53-85CE-E89428C579F6}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{B527A8DA-763D-43CE-8C65-71A378812D62}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [UDP Query User{22F72AFE-F3BA-4D03-9A7A-913DF5C53235}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe FirewallRules: [TCP Query User{0D8423A1-11E8-443D-8E15-D1E771C9DE17}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe FirewallRules: [UDP Query User{B8B95EED-481C-4ED8-982C-0E50A0E11EF3}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe FirewallRules: [TCP Query User{BFDF8410-F181-485B-8A03-DDEB098C6BCB}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe FirewallRules: [{5C42C92A-C8F1-459D-934E-F4D6ED383EA5}] => (Allow) C:\Users\adier\AppData\Local\Programs\Fiddler\Fiddler.exe FirewallRules: [UDP Query User{B885D944-2E61-4BD3-B9DB-A046CB01E414}C:\program files\firefox developer edition\firefox.exe] => (Block) C:\program files\firefox developer edition\firefox.exe FirewallRules: [TCP Query User{38EBA2CD-1AE0-49FD-B4FD-168CC32FFD32}C:\program files\firefox developer edition\firefox.exe] => (Block) C:\program files\firefox developer edition\firefox.exe FirewallRules: [UDP Query User{8E7F3A8E-E2D8-4579-9514-050046FC43E2}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe FirewallRules: [TCP Query User{A5832E93-3307-4BF6-91EB-2DF2EA3E2502}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe FirewallRules: [{8FD34F82-7C0F-437F-AEA3-641A8BB0E4AD}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe FirewallRules: [{1C94A922-06CF-4EE2-935F-3169091C47B4}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe FirewallRules: [{1450C5EB-F817-4CEC-A775-57E0206579CB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{6191D5D7-430B-4238-A0D7-89397E9A6921}C:\program files\java\jre1.8.0_121\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_121\bin\javaw.exe FirewallRules: [UDP Query User{DA3CAF95-5983-41CC-9854-35697CDDEC14}C:\program files\java\jre1.8.0_121\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_121\bin\javaw.exe FirewallRules: [TCP Query User{49EEF936-AFAA-42C0-82E9-D20F3AEA3A35}C:\program files (x86)\spider\spider.exe] => (Allow) C:\program files (x86)\spider\spider.exe FirewallRules: [UDP Query User{3EBFAEC8-0F13-4290-AAF0-838D1F56FC93}C:\program files (x86)\spider\spider.exe] => (Allow) C:\program files (x86)\spider\spider.exe FirewallRules: [TCP Query User{96F973D7-2C28-4A08-9DF5-4125760A2A82}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe FirewallRules: [UDP Query User{DDB31545-0F24-46F1-AFE2-CEF51B9F3F7A}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe FirewallRules: [TCP Query User{92682207-557B-4DEC-822F-BCAA59052C81}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{3276320C-C8C5-4A55-9653-8AF12F3971F2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{2ECE696D-9A3D-40E4-9B3C-19A5BF9C62AC}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe FirewallRules: [{EDCBF46E-D214-4C2B-8796-4BA12D201D46}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe FirewallRules: [{D1BE3DC2-38DC-4AAB-99E4-565E630E4665}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe FirewallRules: [{938B879F-A4B0-4337-8068-B578B75269E8}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe FirewallRules: [{7EBC605B-712F-4B8E-A880-A169B0492455}] => (Allow) C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe FirewallRules: [{4BF33C26-E3F7-4DD8-B5B6-3A551C50379D}] => (Allow) C:\Program Files\VisualSVN Server\bin\vdfssvc.exe FirewallRules: [{14259735-5997-4068-A533-3BBF94590337}] => (Allow) C:\Program Files\VisualSVN Server\bin\vdfssvc.exe FirewallRules: [TCP Query User{02E907D9-A2AE-4670-AB9C-9310F3F80C24}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe] => (Allow) C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe FirewallRules: [UDP Query User{B24E7D1B-4221-4C37-80CF-BBAC5F144FBF}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe] => (Allow) C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe FirewallRules: [TCP Query User{04DCE8CF-EA24-4697-A781-6A268C11368B}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\jre\bin\java.exe FirewallRules: [UDP Query User{D9385A3D-ECC4-4EBC-ABFD-F027BDEF5B2F}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\jre\bin\java.exe FirewallRules: [TCP Query User{9FD5BA76-35BF-49BB-8238-8DEA83C552E4}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe FirewallRules: [UDP Query User{D9927547-02EA-4F31-9EAB-574322C87BB7}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe FirewallRules: [TCP Query User{6008AD76-6D21-4F73-B405-914097332A81}D:\neo4j\data\bin\neo4j-ce.exe] => (Allow) D:\neo4j\data\bin\neo4j-ce.exe FirewallRules: [UDP Query User{5F058398-A48E-48C1-B78F-CD00E456FF9A}D:\neo4j\data\bin\neo4j-ce.exe] => (Allow) D:\neo4j\data\bin\neo4j-ce.exe FirewallRules: [{EFC74D77-7E58-4780-87BC-0C3B55811129}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{CF6273E7-4DBE-49B3-9B01-F8018C0447C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{134D4055-57A0-4B3B-BF13-5C40E114D325}] => (Allow) C:\Program Files\Firefox Developer Edition\firefox.exe FirewallRules: [{5F3A9AD3-6E45-4D36-A40F-BA5F0F11173D}] => (Allow) C:\Program Files\Firefox Developer Edition\firefox.exe FirewallRules: [{5E4308E5-2173-4C4A-BDCD-F69AB52E8A96}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{C79A5D7D-8D34-4802-8E94-FFCC7926DF6C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe FirewallRules: [{5D7FD56D-DDE4-4698-B400-041F7E646B1D}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{5B302737-F53D-459B-A500-AF665939D192}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe FirewallRules: [TCP Query User{AA44C8BF-42DA-47BB-B1C0-82AE91197713}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [UDP Query User{A032039A-4090-49C2-8A21-6E7C6FA96D09}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [{1E7A5A01-829F-4FDA-A07C-DD03B7FB26FA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Points de restauration ========================= 20-06-2018 22:28:28 Point de contrôle planifié ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (06/24/2018 03:40:41 PM) (Source: SetupARService) (EventID: 0) (User: ) Description: Le service ne peut pas être démarré. System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet. à SetupAfterRebootService.SetupARService.OnStart(String[] args) à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (06/24/2018 03:40:38 PM) (Source: ATIeRecord) (EventID: 16396) (User: ) Description: ATI EEU PnP start/stop failed Error: (06/24/2018 03:39:12 PM) (Source: ATIeRecord) (EventID: 16396) (User: ) Description: ATI EEU PnP start/stop failed Error: (06/24/2018 03:30:14 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: adier) Description: httphttp-2147467263 Error: (06/24/2018 03:08:10 PM) (Source: SetupARService) (EventID: 0) (User: ) Description: Le service ne peut pas être démarré. System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet. à SetupAfterRebootService.SetupARService.OnStart(String[] args) à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) Error: (06/24/2018 03:08:09 PM) (Source: ATIeRecord) (EventID: 16396) (User: ) Description: ATI EEU PnP start/stop failed Error: (06/24/2018 03:06:53 PM) (Source: ATIeRecord) (EventID: 16396) (User: ) Description: ATI EEU PnP start/stop failed Error: (06/24/2018 02:40:55 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme eclipse.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 9c0 Heure de début : 01d40bc0ca4af978 Heure de fin : 12 Chemin d'accès de l'application : C:\eclipse\eclipse.exe ID de rapport : ce7d3a29-7902-4b80-a25b-1013997cc0ac Nom complet du package défaillant : ID de l'application relative au package défaillant : Erreurs système: ============= Error: (06/24/2018 03:48:00 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID Windows.SecurityCenter.WscBrokerManager et l’APPID Non disponible au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/24/2018 03:47:08 PM) (Source: DCOM) (EventID: 10016) (User: adier) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID adier\adier de l’utilisateur (S-1-5-21-4206151704-2492553960-1182160334-1002) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/24/2018 03:46:48 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Le service Update Orchestrator Service est en attente de démarrage. Error: (06/24/2018 03:42:34 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/24/2018 03:40:37 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: AUTORITE NT) Description: Échec du chargement de la DLL de notification du mot de passe C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter avec l’erreur 126. Vérifiez que le chemin d’accès de la DLL de notification défini dans le Registre, HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages, fait référence à un chemin d’accès correct et absolu (<lecteur>:\<chemin_d’accès>\<nom_fichier>.<ext>) et non à un chemin d’accès relatif ou non valide. Si le chemin d’accès de la DLL est correct, vérifiez que tous les fichiers de prise en charge se trouvent dans le même répertoire et que le compte système dispose d’un accès en lecture au chemin d’accès de la DLL et aux fichiers de prise en charge. Contactez le fournisseur de la DLL de notification pour une assistance supplémentaire. D’autres détails sont disponibles sur le Web à l’adresse http://go.microsoft.com/fwlink/?LinkId=245898. Error: (06/24/2018 03:34:38 PM) (Source: DCOM) (EventID: 10016) (User: adier) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID adier\adier de l’utilisateur (S-1-5-21-4206151704-2492553960-1182160334-1002) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/24/2018 03:12:02 PM) (Source: DCOM) (EventID: 10016) (User: adier) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID adier\adier de l’utilisateur (S-1-5-21-4206151704-2492553960-1182160334-1002) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/24/2018 03:11:15 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Windows Defender: =================================== Date: 2018-06-23 03:35:32.163 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {AEE863B6-AA7F-4568-A368-AFB1B5EA3F17} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-06-14 00:46:03.379 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {99A560AA-3317-43D7-BC4B-A1135D967540} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-06-12 02:17:36.834 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {44916A80-7C3A-4CB6-AF70-2E6A31E61999} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-06-12 01:55:16.265 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {EEBAB837-EC76-40EB-BA08-B3C4F372D766} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-06-12 01:38:20.819 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {B250492B-61EF-4F8D-89A4-32054F6274C3} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-06-24 13:47:53.906 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.269.1834.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14901.4 Code d’erreur : 0x8024402c Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2018-06-23 19:10:12.761 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.269.1786.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14901.4 Code d’erreur : 0x80240438 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2018-06-23 15:44:38.375 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.269.1786.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14901.4 Code d’erreur : 0x80240438 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2018-06-23 12:35:14.504 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.269.1786.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14901.4 Code d’erreur : 0x80240438 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2018-06-22 15:25:05.577 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.269.1708.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.14901.4 Code d’erreur : 0x80240438 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. ==================== Infos Mémoire =========================== Processeur: AMD A10-5745M APU with Radeon(tm) HD Graphics Pourcentage de mémoire utilisée: 33% Mémoire physique - RAM - totale: 15558.27 MB Mémoire physique - RAM - disponible: 10417.82 MB Mémoire virtuelle totale: 25798.27 MB Mémoire virtuelle disponible: 20528.68 MB ==================== Lecteurs ================================ Drive ? (Windows) (Fixed) (Total:672.03 GB) (Free:248.34 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] Drive d: (RECOVERY) (Fixed) (Total:24.04 GB) (Free:15.23 GB) NTFS \\?\Volume{38286ea2-20ad-4d49-a13c-14b3a22a5d90}\ (WINRE) (Fixed) (Total:0.39 GB) (Free:0.13 GB) NTFS \\?\Volume{a78fbaa2-571f-4d84-9a10-ca4b292691f1}\ () (Fixed) (Total:0.87 GB) (Free:0.34 GB) NTFS \\?\Volume{4277f7b2-738b-45dc-b9cb-7704e1c25116}\ () (Fixed) (Total:0.25 GB) (Free:0.14 GB) FAT32 ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 698.6 GB) (Disk ID: BC9E3119) Partition: GPT. ==================== Fin de Addition.txt ============================ THANK YOU VERY MUCH FOR YOUR HELP. Link to post Share on other sites
Recommended Posts