Jump to content

HijackThis says: "No Internet Connection Available"


Recommended Posts

<p>The attached screenshot is my issue <a class="ipsAttachLink ipsAttachLink_image" href="//content.invisioncic.com/Mmalware/monthly_11_2012/post-102723-0-80700800-1353797591.jpg" rel="external nofollow"><img src="//content.invisioncic.com/Mmalware/monthly_11_2012/post-102723-0-80700800-1353797591.jpg" data-fileid="88536" class="ipsImage ipsImage_thumbnailed" alt="post-102723-0-80700800-1353797591.jpg"></a>.</p><p>No internet connection... Keep with me and I apologize for the excessively large screenshots.</p><p>The error message caught my attention, though right after this scan. I couldn't "analyze this" I got the 'No internet connection available' pop up.</p><p>I began searching my PC for issues to resolve another issue that brings up the same internet error. The game League of Legends. I came across this error about 2 weeks ago out of random. I hopped back on my PC after not using it for maybe a month solid (I was using my laptop). And I ended up uninstalling and attempting to reinstall the game. And everytime i try and reinstall the game (even after a fresh client download) I get a very similar No internet connection error.

Downloaded OTL by OldTimer to your desktop: http://oldtimer.geekstogo.com/OTL.exe

Downloaded  Security Check    

 

Here I attach :

 

the contents of OTL.txt;

===================

OTL logfile created on: 2018-06-24 15:47:49 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\adier\Downloads
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.17134.0)
Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd
 
15,19 Gb Total Physical Memory | 12,74 Gb Available Physical Memory | 83,87% Memory free
25,19 Gb Paging File | 22,75 Gb Available in Paging File | 90,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 672,03 Gb Total Space | 248,48 Gb Free Space | 36,98% Space Free | Partition Type: NTFS
Drive D: | 24,04 Gb Total Space | 15,23 Gb Free Space | 63,38% Space Free | Partition Type: NTFS
 
Computer Name: CHLAHBI | User Name: reida | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - File not found -- 
PRC - [2018-06-24 14:23:46 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\adier\Downloads\OTL.exe
PRC - [2018-06-06 14:33:28 | 001,194,512 | ---- | M] (Garmin Ltd. or its subsidiaries) -- C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
PRC - [2018-05-18 03:54:50 | 000,288,848 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
PRC - [2018-04-12 00:34:51 | 000,661,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fontdrvhost.exe
PRC - [2017-11-23 02:33:30 | 001,484,296 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe
PRC - [2017-07-27 06:29:24 | 000,082,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2017-07-19 22:17:18 | 000,374,968 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
PRC - [2016-03-03 03:59:34 | 002,021,056 | ---- | M] (Adobe Systems, Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
PRC - [2015-07-03 22:21:48 | 001,402,624 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
PRC - [2015-07-03 22:21:48 | 000,303,360 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
PRC - [2014-10-13 06:57:46 | 000,743,688 | ---- | M] (DEVGURU Co., LTD.) -- C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
PRC - [2014-04-30 16:00:36 | 000,277,360 | ---- | M] (arvato digital services llc) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2017-07-23 20:24:24 | 000,108,032 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_thread-vc140-mt-1_62.dll
MOD - [2017-07-23 20:24:24 | 000,064,000 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_date_time-vc140-mt-1_62.dll
MOD - [2017-07-23 20:24:24 | 000,044,032 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_chrono-vc140-mt-1_62.dll
MOD - [2017-07-23 20:24:24 | 000,035,840 | ---- | M] () -- C:\Program Files\Trend Micro\Titanium\UIFramework\boost_system-vc140-mt-1_62.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - File not found [Auto | Running] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV:64bit: - [2018-06-10 16:45:32 | 001,456,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WpcDesktopMonSvc.dll -- (WpcMonSvc)
SRV:64bit: - [2018-06-10 16:45:30 | 000,835,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
SRV:64bit: - [2018-06-10 16:45:27 | 003,086,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:64bit: - [2018-06-10 16:45:27 | 000,847,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:64bit: - [2018-06-08 19:43:05 | 001,364,992 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\bcastdvruserservice.dll -- (BcastDVRUserService)
SRV:64bit: - [2018-06-08 17:06:33 | 000,976,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Spectrum.exe -- (spectrum)
SRV:64bit: - [2018-06-08 10:29:32 | 004,970,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:64bit: - [2018-06-08 10:29:15 | 000,885,880 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:64bit: - [2018-06-08 10:00:02 | 000,149,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
SRV:64bit: - [2018-06-08 09:59:09 | 003,392,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:64bit: - [2018-06-08 09:59:09 | 000,673,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
SRV:64bit: - [2018-06-08 09:58:51 | 000,266,752 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\CapabilityAccessManager.dll -- (camsvc)
SRV:64bit: - [2018-06-08 09:57:19 | 001,485,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\InstallService.dll -- (InstallService)
SRV:64bit: - [2018-06-08 09:56:52 | 000,684,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:64bit: - [2018-06-08 09:56:46 | 001,395,200 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TokenBroker.dll -- (TokenBroker)
SRV:64bit: - [2018-06-08 09:56:37 | 000,858,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
SRV:64bit: - [2018-06-08 09:55:25 | 002,248,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:64bit: - [2018-06-08 09:55:13 | 001,371,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
SRV:64bit: - [2018-06-08 09:55:04 | 000,667,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:64bit: - [2018-04-12 00:35:21 | 000,681,984 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
SRV:64bit: - [2018-04-12 00:35:21 | 000,427,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
SRV:64bit: - [2018-04-12 00:35:21 | 000,400,896 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Windows.Devices.Picker.dll -- (DevicePickerUserSvc)
SRV:64bit: - [2018-04-12 00:34:44 | 001,359,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lpasvc.dll -- (wlpasvc)
SRV:64bit: - [2018-04-12 00:34:43 | 000,950,272 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:64bit: - [2018-04-12 00:34:43 | 000,824,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NaturalAuth.dll -- (NaturalAuthentication)
SRV:64bit: - [2018-04-12 00:34:43 | 000,637,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WFDSConMgrSvc.dll -- (WFDSConMgrSvc)
SRV:64bit: - [2018-04-12 00:34:43 | 000,590,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:64bit: - [2018-04-12 00:34:43 | 000,121,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:64bit: - [2018-04-12 00:34:42 | 000,712,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SharedRealitySvc.dll -- (SharedRealitySvc)
SRV:64bit: - [2018-04-12 00:34:41 | 000,761,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SecurityHealthService.exe -- (SecurityHealthService)
SRV:64bit: - [2018-04-12 00:34:41 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:64bit: - [2018-04-12 00:34:40 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:64bit: - [2018-04-12 00:34:39 | 000,219,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvc.dll -- (diagsvc)
SRV:64bit: - [2018-04-12 00:34:38 | 000,671,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:64bit: - [2018-04-12 00:34:37 | 000,303,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
SRV:64bit: - [2018-04-12 00:34:37 | 000,198,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:64bit: - [2018-04-12 00:34:34 | 001,273,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:64bit: - [2018-04-12 00:34:33 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PrintWorkflowService.dll -- (PrintWorkflowUserSvc)
SRV:64bit: - [2018-04-12 00:34:33 | 000,153,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
SRV:64bit: - [2018-04-12 00:34:32 | 000,507,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:64bit: - [2018-04-12 00:34:25 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:64bit: - [2018-04-12 00:34:24 | 001,027,584 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
SRV:64bit: - [2018-04-12 00:34:24 | 000,081,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:64bit: - [2018-04-12 00:34:24 | 000,027,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:64bit: - [2018-04-12 00:34:23 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:64bit: - [2018-04-12 00:34:23 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:64bit: - [2018-04-12 00:34:22 | 000,773,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:64bit: - [2018-04-12 00:34:22 | 000,335,360 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:64bit: - [2018-04-12 00:34:22 | 000,089,088 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PrintWorkflowUserSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicesFlowUserSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicePickerUserSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BluetoothUserService_5a7b6)
SRV:64bit: - [2018-04-12 00:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (BcastDVRUserService_5a7b6)
SRV:64bit: - [2018-04-12 00:34:19 | 000,750,080 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\DevicesFlowBroker.dll -- (DevicesFlowUserSvc)
SRV:64bit: - [2018-04-12 00:34:19 | 000,195,584 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
SRV:64bit: - [2018-04-12 00:34:14 | 000,824,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:64bit: - [2018-04-12 00:34:14 | 000,712,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
SRV:64bit: - [2018-04-12 00:34:14 | 000,514,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BTAGService.dll -- (BTAGService)
SRV:64bit: - [2018-04-12 00:34:14 | 000,395,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthAvctpSvc.dll -- (BthAvctpSvc)
SRV:64bit: - [2018-04-12 00:34:14 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:64bit: - [2018-04-12 00:34:14 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:64bit: - [2018-04-12 00:34:12 | 001,495,040 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 001,220,096 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,785,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,582,144 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,463,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:64bit: - [2018-04-12 00:34:12 | 000,392,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WaaSMedicSvc.dll -- (WaaSMedicSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,345,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,307,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,281,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:64bit: - [2018-04-12 00:34:12 | 000,280,576 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
SRV:64bit: - [2018-04-12 00:34:12 | 000,241,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,176,128 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,096,768 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
SRV:64bit: - [2018-04-12 00:34:12 | 000,091,136 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
SRV:64bit: - [2018-04-12 00:34:12 | 000,058,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xboxgipsvc.dll -- (XboxGipSvc)
SRV:64bit: - [2018-04-12 00:34:12 | 000,044,544 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
SRV:64bit: - [2018-04-12 00:34:10 | 001,248,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\SEMgrSvc.dll -- (SEMgrSvc)
SRV:64bit: - [2018-04-12 00:34:10 | 000,376,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:64bit: - [2018-04-12 00:34:10 | 000,262,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PushToInstall.dll -- (PushToInstall)
SRV:64bit: - [2018-04-12 00:34:10 | 000,048,640 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:64bit: - [2018-04-12 00:34:10 | 000,033,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:64bit: - [2018-04-12 00:34:08 | 001,458,176 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
SRV:64bit: - [2018-04-12 00:34:08 | 001,308,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:64bit: - [2018-04-12 00:34:08 | 000,167,424 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:64bit: - [2018-04-12 00:34:08 | 000,090,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GraphicsPerfSvc.dll -- (GraphicsPerfSvc)
SRV:64bit: - [2018-04-12 00:34:08 | 000,059,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xbgmsvc.exe -- (xbgm)
SRV:64bit: - [2018-04-12 00:34:08 | 000,031,744 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.WARP.JITService.dll -- (WarpJITSvc)
SRV:64bit: - [2018-04-12 00:34:07 | 001,115,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:64bit: - [2018-04-12 00:34:07 | 000,092,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
SRV:64bit: - [2018-04-12 00:34:06 | 001,033,584 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:64bit: - [2018-04-12 00:34:06 | 000,632,320 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:64bit: - [2018-04-12 00:34:06 | 000,453,120 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
SRV:64bit: - [2018-04-12 00:34:06 | 000,235,008 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:64bit: - [2018-04-12 00:34:06 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
SRV:64bit: - [2018-04-12 00:34:04 | 001,148,928 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:64bit: - [2018-04-12 00:34:04 | 000,411,256 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vac.dll -- (VacSvc)
SRV:64bit: - [2018-04-12 00:34:04 | 000,356,352 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dusmsvc.dll -- (DusmSvc)
SRV:64bit: - [2018-04-12 00:34:04 | 000,199,680 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LanguageOverlayServer.dll -- (LxpSvc)
SRV:64bit: - [2018-04-12 00:34:04 | 000,163,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SgrmBroker.exe -- (SgrmBroker)
SRV:64bit: - [2018-04-12 00:34:04 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
SRV:64bit: - [2018-04-12 00:34:02 | 000,464,384 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Microsoft.Bluetooth.UserService.dll -- (BluetoothUserService)
SRV:64bit: - [2018-04-12 00:34:02 | 000,063,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipxlatcfg.dll -- (IpxlatCfgSvc)
SRV:64bit: - [2018-04-12 00:33:54 | 002,197,408 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:64bit: - [2018-04-12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
SRV:64bit: - [2018-04-12 00:33:54 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:64bit: - [2018-04-12 00:33:54 | 000,289,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:64bit: - [2018-04-12 00:33:54 | 000,060,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
SRV:64bit: - [2018-04-12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:64bit: - [2018-04-10 22:05:00 | 000,324,608 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:64bit: - [2018-03-10 19:20:00 | 000,495,616 | ---- | M] () [Disabled | Stopped] -- C:\Windows\SysNative\OpenSSH\ssh-agent.exe -- (ssh-agent)
SRV:64bit: - [2017-11-22 11:45:03 | 000,332,216 | ---- | M] (HP Inc.) [Auto | Running] -- C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe -- (HPTouchpointAnalyticsService)
SRV:64bit: - [2017-08-24 05:20:52 | 000,269,912 | ---- | M] (Synaptics Incorporated) [Auto | Running] -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe -- (SynTPEnhService)
SRV:64bit: - [2017-07-23 20:24:24 | 001,129,928 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe -- (Platinum Host Service)
SRV:64bit: - [2017-07-20 15:16:14 | 000,029,256 | ---- | M] (Apache Software Foundation) [Auto | Running] -- C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe -- (VisualSVNServer)
SRV:64bit: - [2017-07-20 15:15:18 | 000,374,856 | ---- | M] (VisualSVN Software Ltd.) [Auto | Running] -- C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe -- (vsvnjobsvc)
SRV:64bit: - [2017-07-20 15:15:14 | 000,104,008 | ---- | M] (VisualSVN Software Ltd.) [Disabled | Stopped] -- C:\Program Files\VisualSVN Server\bin\vdfssvc.exe -- (vdfssvc)
SRV:64bit: - [2017-07-20 15:15:08 | 000,198,728 | ---- | M] (VisualSVN Software Ltd.) [On_Demand | Stopped] -- C:\Program Files\VisualSVN Server\bin\vrepocfgsvc.exe -- (vrepocfgsvc)
SRV:64bit: - [2015-08-01 05:51:30 | 000,263,200 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2015-07-03 22:21:48 | 000,303,360 | ---- | M] (Realtek Semiconductor) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe -- (RtkAudioService)
SRV:64bit: - [2014-10-13 06:57:46 | 000,743,688 | ---- | M] (DEVGURU Co., LTD.) [Auto | Running] -- C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe -- (ss_conn_service)
SRV - [2018-06-23 21:39:53 | 000,195,024 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2018-06-08 10:09:43 | 004,469,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2018-06-08 10:09:40 | 000,567,144 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2018-06-08 09:54:26 | 000,729,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\FlightSettings.dll -- (wisvc)
SRV - [2018-06-08 09:54:04 | 000,999,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\TokenBroker.dll -- (TokenBroker)
SRV - [2018-06-08 09:53:53 | 001,108,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\InstallService.dll -- (InstallService)
SRV - [2018-06-06 14:33:28 | 001,194,512 | ---- | M] (Garmin Ltd. or its subsidiaries) [Auto | Running] -- C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe -- (Garmin Device Interaction Service)
SRV - [2018-06-02 15:03:49 | 004,682,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\NisSrv.exe -- (WdNisSvc)
SRV - [2018-06-02 15:03:49 | 000,101,096 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.16.17656.18052-0\MsMpEng.exe -- (WinDefend)
SRV - [2018-05-02 07:29:50 | 000,332,656 | ---- | M] (HP Inc.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe -- (HPSupportSolutionsFrameworkService)
SRV - [2018-04-12 00:35:22 | 000,312,832 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Windows.Devices.Picker.dll -- (DevicePickerUserSvc)
SRV - [2018-04-12 00:34:57 | 000,138,240 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\PrintWorkflowService.dll -- (PrintWorkflowUserSvc)
SRV - [2018-04-12 00:34:48 | 000,592,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2018-04-12 00:34:45 | 000,965,632 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
SRV - [2018-04-12 00:34:45 | 000,072,192 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\tzautoupdate.dll -- (tzautoupdate)
SRV - [2018-04-12 00:34:45 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2018-04-12 00:33:47 | 003,441,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2018-01-07 17:53:29 | 000,010,752 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe -- (SetupARService)
SRV - [2017-07-27 06:29:24 | 000,082,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2016-06-03 22:08:04 | 001,031,704 | ---- | M] (HP) [On_Demand | Stopped] -- C:\Program Files (x86)\HP\Shared\hpqwmiex.exe -- (hpqcaslwmiex)
SRV - [2016-03-03 03:59:34 | 002,021,056 | ---- | M] (Adobe Systems, Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe -- (AGSService)
SRV - [2014-04-30 16:00:36 | 000,277,360 | ---- | M] (arvato digital services llc) [Auto | Running] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2012-11-08 11:39:36 | 000,174,176 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe -- (PACSPTISVR-Sound_Organizer)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2018-06-10 16:45:27 | 000,382,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:64bit: - [2018-06-10 16:45:27 | 000,105,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:64bit: - [2018-06-08 11:31:08 | 000,029,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:64bit: - [2018-06-08 10:31:16 | 000,226,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:64bit: - [2018-06-08 10:30:50 | 000,565,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:64bit: - [2018-06-08 10:29:39 | 000,164,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:64bit: - [2018-06-08 10:29:22 | 001,921,952 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS)
DRV:64bit: - [2018-06-08 10:29:06 | 000,945,568 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:64bit: - [2018-06-08 09:58:46 | 000,781,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:64bit: - [2018-06-02 15:03:50 | 000,313,384 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdFilter.sys -- (WdFilter)
DRV:64bit: - [2018-06-02 15:03:50 | 000,061,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys -- (WdNisDrv)
DRV:64bit: - [2018-06-02 15:03:49 | 000,046,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wd\WdBoot.sys -- (WdBoot)
DRV:64bit: - [2018-05-11 17:37:46 | 000,034,944 | ---- | M] (HP) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WirelessButtonDriver64.sys -- (WirelessButtonDriver64)
DRV:64bit: - [2018-04-26 21:50:08 | 000,132,512 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\TMUMH.sys -- (tmumh)
DRV:64bit: - [2018-04-12 17:23:17 | 000,037,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:64bit: - [2018-04-12 17:23:15 | 000,057,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpatialGraphFilter.sys -- (SpatialGraphFilter)
DRV:64bit: - [2018-04-12 17:23:13 | 000,030,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2018-04-12 00:34:43 | 000,119,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
DRV:64bit: - [2018-04-12 00:34:40 | 000,091,544 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:64bit: - [2018-04-12 00:34:40 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bam.sys -- (bam)
DRV:64bit: - [2018-04-12 00:34:32 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:64bit: - [2018-04-12 00:34:32 | 000,084,480 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:64bit: - [2018-04-12 00:34:32 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\afunix.sys -- (afunix)
DRV:64bit: - [2018-04-12 00:34:32 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:64bit: - [2018-04-12 00:34:28 | 000,254,464 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:64bit: - [2018-04-12 00:34:25 | 000,088,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:64bit: - [2018-04-12 00:34:22 | 000,175,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
DRV:64bit: - [2018-04-12 00:34:22 | 000,034,208 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2018-04-12 00:34:20 | 000,414,208 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\cldflt.sys -- (CldFlt)
DRV:64bit: - [2018-04-12 00:34:20 | 000,217,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:64bit: - [2018-04-12 00:34:20 | 000,209,816 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:64bit: - [2018-04-12 00:34:19 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
DRV:64bit: - [2018-04-12 00:34:15 | 000,021,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdmCompanionFilter.sys -- (WdmCompanionFilter)
DRV:64bit: - [2018-04-12 00:34:14 | 000,282,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:64bit: - [2018-04-12 00:34:14 | 000,154,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:64bit: - [2018-04-12 00:34:14 | 000,152,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
DRV:64bit: - [2018-04-12 00:34:14 | 000,151,960 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
DRV:64bit: - [2018-04-12 00:34:14 | 000,128,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:64bit: - [2018-04-12 00:34:14 | 000,082,944 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
DRV:64bit: - [2018-04-12 00:34:14 | 000,075,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:64bit: - [2018-04-12 00:34:14 | 000,067,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:64bit: - [2018-04-12 00:34:14 | 000,039,328 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:64bit: - [2018-04-12 00:34:14 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
DRV:64bit: - [2018-04-12 00:34:14 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshwnclx.sys -- (HwNClx0101)
DRV:64bit: - [2018-04-12 00:34:14 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:64bit: - [2018-04-12 00:34:12 | 000,169,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:64bit: - [2018-04-12 00:34:12 | 000,092,056 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bindflt.sys -- (bindflt)
DRV:64bit: - [2018-04-12 00:34:12 | 000,082,432 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:64bit: - [2018-04-12 00:34:12 | 000,082,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:64bit: - [2018-04-12 00:34:12 | 000,072,232 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:64bit: - [2018-04-12 00:34:12 | 000,055,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:64bit: - [2018-04-12 00:34:04 | 000,128,000 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:64bit: - [2018-04-12 00:34:04 | 000,063,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SgrmAgent.sys -- (SgrmAgent)
DRV:64bit: - [2018-04-12 00:34:04 | 000,058,272 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
DRV:64bit: - [2018-04-12 00:34:04 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:64bit: - [2018-04-12 00:34:04 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:64bit: - [2018-04-12 00:33:58 | 000,030,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:64bit: - [2018-04-12 00:33:54 | 000,227,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winnat.sys -- (WinNat)
DRV:64bit: - [2018-04-12 00:33:54 | 000,140,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:64bit: - [2018-04-12 00:33:54 | 000,127,904 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:64bit: - [2018-04-12 00:33:54 | 000,073,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
DRV:64bit: - [2018-04-12 00:33:54 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2018-04-12 00:33:54 | 000,055,808 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:64bit: - [2018-04-12 00:33:54 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:64bit: - [2018-04-12 00:33:54 | 000,039,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ramdisk.sys -- (Ramdisk)
DRV:64bit: - [2018-04-12 00:33:54 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
DRV:64bit: - [2018-04-12 00:33:54 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipt.sys -- (IPT)
DRV:64bit: - [2018-04-12 00:33:52 | 000,434,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:64bit: - [2018-04-12 00:33:52 | 000,287,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2018-04-12 00:33:52 | 000,232,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2018-04-12 00:33:52 | 000,097,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:64bit: - [2018-04-12 00:33:52 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:64bit: - [2018-04-12 00:33:52 | 000,054,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:64bit: - [2018-04-12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:64bit: - [2018-04-12 00:33:52 | 000,050,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:64bit: - [2018-04-12 00:33:52 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:64bit: - [2018-04-12 00:33:52 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:64bit: - [2018-04-12 00:33:52 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:64bit: - [2018-04-12 00:33:52 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:64bit: - [2018-04-12 00:33:52 | 000,018,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:64bit: - [2018-04-12 00:33:51 | 000,292,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:64bit: - [2018-04-12 00:33:51 | 000,144,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:64bit: - [2018-04-12 00:33:51 | 000,112,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:64bit: - [2018-04-12 00:33:51 | 000,098,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:64bit: - [2018-04-12 00:33:51 | 000,086,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys -- (BthLEEnum)
DRV:64bit: - [2018-04-12 00:33:51 | 000,029,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:64bit: - [2018-04-12 00:33:51 | 000,028,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:64bit: - [2018-04-12 00:33:51 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:64bit: - [2018-04-12 00:33:49 | 001,836,952 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
DRV:64bit: - [2018-04-12 00:33:49 | 000,885,144 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAVC.sys -- (iaStorAVC)
DRV:64bit: - [2018-04-12 00:33:49 | 000,842,648 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:64bit: - [2018-04-12 00:33:49 | 000,611,232 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:64bit: - [2018-04-12 00:33:49 | 000,526,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:64bit: - [2018-04-12 00:33:49 | 000,505,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbhost.sys -- (mausbhost)
DRV:64bit: - [2018-04-12 00:33:49 | 000,321,432 | ---- | M] (Chelsio Communications) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
DRV:64bit: - [2018-04-12 00:33:49 | 000,305,560 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:64bit: - [2018-04-12 00:33:49 | 000,197,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc)
DRV:64bit: - [2018-04-12 00:33:49 | 000,156,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:64bit: - [2018-04-12 00:33:49 | 000,128,416 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
DRV:64bit: - [2018-04-12 00:33:49 | 000,108,952 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:64bit: - [2018-04-12 00:33:49 | 000,105,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pmem.sys -- (pmem)
DRV:64bit: - [2018-04-12 00:33:49 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvdimm.sys -- (nvdimm)
DRV:64bit: - [2018-04-12 00:33:49 | 000,079,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:64bit: - [2018-04-12 00:33:49 | 000,075,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:64bit: - [2018-04-12 00:33:49 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2018-04-12 00:33:49 | 000,064,920 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:64bit: - [2018-04-12 00:33:49 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:64bit: - [2018-04-12 00:33:49 | 000,063,488 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:64bit: - [2018-04-12 00:33:49 | 000,061,848 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:64bit: - [2018-04-12 00:33:49 | 000,058,776 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:64bit: - [2018-04-12 00:33:49 | 000,056,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbip.sys -- (mausbip)
DRV:64bit: - [2018-04-12 00:33:49 | 000,048,544 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
DRV:64bit: - [2018-04-12 00:33:49 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:64bit: - [2018-04-12 00:33:49 | 000,038,304 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bttflt.sys -- (bttflt)
DRV:64bit: - [2018-04-12 00:33:49 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2018-04-12 00:33:49 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:64bit: - [2018-04-12 00:33:49 | 000,033,184 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hvcrash.sys -- (hvcrash)
DRV:64bit: - [2018-04-12 00:33:49 | 000,033,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SDFRd.sys -- (SDFRd)
DRV:64bit: - [2018-04-12 00:33:49 | 000,032,152 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
DRV:64bit: - [2018-04-12 00:33:49 | 000,031,128 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2018-04-12 00:33:49 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:64bit: - [2018-04-12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum)
DRV:64bit: - [2018-04-12 00:33:49 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:64bit: - [2018-04-12 00:33:49 | 000,016,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
DRV:64bit: - [2018-04-12 00:33:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:64bit: - [2018-04-12 00:33:49 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:64bit: - [2018-04-12 00:33:49 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:64bit: - [2018-04-12 00:33:49 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
DRV:64bit: - [2018-04-12 00:33:48 | 003,419,032 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2018-04-12 00:33:48 | 002,537,984 | ---- | M] (MediaTek Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:64bit: - [2018-04-12 00:33:48 | 001,135,520 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:64bit: - [2018-04-12 00:33:48 | 000,533,912 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2018-04-12 00:33:48 | 000,259,480 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2018-04-12 00:33:48 | 000,177,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:64bit: - [2018-04-12 00:33:48 | 000,145,816 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ItSas35i.sys -- (ItSas35i)
DRV:64bit: - [2018-04-12 00:33:48 | 000,128,408 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:64bit: - [2018-04-12 00:33:48 | 000,124,312 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:64bit: - [2018-04-12 00:33:48 | 000,123,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
DRV:64bit: - [2018-04-12 00:33:48 | 000,107,416 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:64bit: - [2018-04-12 00:33:48 | 000,104,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rhproxy.sys -- (rhproxy)
DRV:64bit: - [2018-04-12 00:33:48 | 000,083,360 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2018-04-12 00:33:48 | 000,082,848 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:64bit: - [2018-04-12 00:33:48 | 000,082,328 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\megasas35i.sys -- (megasas35i)
DRV:64bit: - [2018-04-12 00:33:48 | 000,075,160 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i)
DRV:64bit: - [2018-04-12 00:33:48 | 000,064,408 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2018-04-12 00:33:48 | 000,063,904 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:64bit: - [2018-04-12 00:33:48 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:64bit: - [2018-04-12 00:33:48 | 000,027,032 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2018-04-12 00:33:48 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
DRV:64bit: - [2018-04-12 00:33:48 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pnpmem.sys -- (PNPMEM)
DRV:64bit: - [2018-04-12 00:33:48 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:64bit: - [2018-04-12 00:33:45 | 000,174,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_BXT_P.sys -- (iaLPSS2i_I2C_BXT_P)
DRV:64bit: - [2018-04-12 00:33:45 | 000,171,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
DRV:64bit: - [2018-04-12 00:33:45 | 000,118,680 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:64bit: - [2018-04-12 00:33:45 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:64bit: - [2018-04-12 00:33:45 | 000,091,648 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
DRV:64bit: - [2018-04-12 00:33:45 | 000,088,576 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_BXT_P.sys -- (iaLPSS2i_GPIO2_BXT_P)
DRV:64bit: - [2018-04-12 00:33:45 | 000,079,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
DRV:64bit: - [2018-04-12 00:33:45 | 000,060,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAD.sys -- (CAD)
DRV:64bit: - [2018-04-12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus)
DRV:64bit: - [2018-04-12 00:33:45 | 000,036,864 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
DRV:64bit: - [2018-04-10 20:25:00 | 000,141,432 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV:64bit: - [2018-04-10 20:24:58 | 000,454,264 | ---- | M] (Trend Micro Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
DRV:64bit: - [2018-04-10 20:24:54 | 000,145,016 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
DRV:64bit: - [2018-01-22 10:03:04 | 000,134,264 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmusa.sys -- (tmusa)
DRV:64bit: - [2018-01-16 17:18:34 | 000,562,296 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tmnciesc.sys -- (tmnciesc)
DRV:64bit: - [2017-12-18 15:00:58 | 000,039,936 | ---- | M] (HP) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:64bit: - [2017-12-18 15:00:56 | 000,053,760 | ---- | M] (HP) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:64bit: - [2017-08-24 05:20:50 | 000,707,672 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2017-05-10 08:46:18 | 000,147,672 | ---- | M] (Trend Micro Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tmeevw.sys -- (tmeevw)
DRV:64bit: - [2017-03-03 16:44:48 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2016-09-29 02:51:22 | 000,110,104 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdWT6.sys -- (AtiHDAudioService)
DRV:64bit: - [2016-09-07 09:51:04 | 000,040,664 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:64bit: - [2016-09-05 06:47:20 | 000,165,504 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudserd.sys -- (ssudserd)
DRV:64bit: - [2016-09-05 06:47:12 | 000,165,504 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:64bit: - [2016-08-13 14:51:02 | 000,065,080 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2016-03-28 12:41:34 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2016-01-05 04:35:34 | 000,072,504 | ---- | M] (Trend Micro Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TMEBC64.sys -- (TMEBC)
DRV:64bit: - [2015-08-01 05:51:32 | 021,637,664 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2015-08-01 05:51:32 | 000,682,016 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2015-06-23 03:49:48 | 000,039,056 | ---- | M] (Trend Micro Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\tmel.sys -- (tmel)
DRV:64bit: - [2015-06-05 03:12:54 | 000,310,528 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsP2Stor.sys -- (RSP2STOR)
DRV:64bit: - [2015-06-03 06:27:02 | 001,219,200 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtbth.sys -- (rtbth)
DRV:64bit: - [2014-08-08 17:31:10 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ptun0901.sys -- (ptun0901)
DRV:64bit: - [2014-01-27 03:26:06 | 000,830,680 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)
DRV:64bit: - [2013-04-30 21:25:00 | 000,677,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:64bit: - [2012-11-30 23:31:02 | 000,026,280 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
DRV:64bit: - [2012-11-30 23:31:00 | 000,080,552 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
DRV:64bit: - [2007-09-06 20:53:00 | 000,016,384 | ---- | M] (Silicon Laboratories) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DSI_SiUSBXp_3_1.sys -- (DSI_SiUSBXp_3_1)
DRV - [2018-04-12 00:34:58 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\afunix.sys -- (afunix)
DRV - [2018-04-12 00:33:49 | 000,018,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_ea7b19c04e7a8136\swenum.sys -- (swenum)
DRV - [2018-04-12 00:33:45 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_bcb89b3386563bd7\CompositeBus.sys -- (CompositeBus)
DRV - [2017-08-01 01:27:53 | 000,027,552 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS -- (HWiNFO32)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = C5 A8 56 71 A5 D8 D3 01  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.countryCode: "MA"
FF - prefs.js..browser.search.region: "MA"
FF - prefs.js..browser.search.widget.inNavBar: true
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.144.2: C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.144.2: C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension.17@acrobat.adobe.com: C:\PROGRAM FILES (X86)\ADOBE\ACROBAT 11.0\ACROBAT\BROWSER\WCFIREFOXEXTN\WEBEXTN\SIGNED_EXTN\ADOBE_ACROBAT-1.0-WINDOWS.XPI [2017-11-01 08:27:32 | 000,467,624 | ---- | M] ()
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fftmtoolbar@trendmicro.com: C:\PROGRAM FILES\TREND MICRO\TITANIUM\UIFRAMEWORK\TOOLBAR\FIREFOXEXTENSION [2018-06-24 15:36:49 | 000,000,000 | ---D | M]
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox Developer Edition 62.0\extensions\\Components: C:\PROGRAM FILES\FIREFOX DEVELOPER EDITION\COMPONENTS
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox Developer Edition 62.0\extensions\\Plugins: C:\PROGRAM FILES\FIREFOX DEVELOPER EDITION\PLUGINS
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 59.0\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 59.0\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension.17@acrobat.adobe.com: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01 08:27:32 | 000,467,624 | ---- | M] ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fftmtoolbar@trendmicro.com: C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2018-06-24 15:36:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 56.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 56.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2018-01-07 03:58:01 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox Developer Edition 62.0\extensions\\Components: C:\Program Files\Firefox Developer Edition\components
FF - HKEY_CURRENT_USER\software\mozilla\Firefox Developer Edition 62.0\extensions\\Plugins: C:\Program Files\Firefox Developer Edition\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 59.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 59.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2017-03-03 22:22:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Extensions
[2017-10-17 18:32:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\SystemExtensionsDev
[2018-02-09 22:29:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\50nzwkok.default-1518211647119\browser-extension-data
[2018-02-09 22:29:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\50nzwkok.default-1518211647119\browser-extension-data\screenshots@mozilla.org
[2017-10-11 15:23:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\browser-extension-data
[2017-10-11 15:23:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\browser-extension-data\screenshots@mozilla.org
[2018-02-23 23:44:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\extensions
[2017-10-11 16:00:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\storage\default\moz-extension+++3be0abaa-fabe-4d9b-8485-c155a06723ac
[2018-06-24 15:33:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\storage\default\moz-extension+++3be0abaa-fabe-4d9b-8485-c155a06723ac\idb
[2018-02-07 00:37:41 | 000,107,316 | ---- | M] () (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\firefox\profiles\t5ddyaf5.dev-edition-default\extensions\1b2383b324c8520974ee097e46301d5ca4e076de387c02886f1c6b1503671586@pokeinthe.io.xpi
[2018-02-23 23:44:05 | 001,065,123 | ---- | M] () (No name found) -- C:\Users\adier\AppData\Roaming\mozilla\firefox\profiles\t5ddyaf5.dev-edition-default\extensions\adbhelper@mozilla.org.xpi
[2017-10-07 12:31:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2017-09-12 13:08:50 | 000,043,424 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll
 
========== Chrome  ==========
 
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_1\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjhmfjbfdbeeekiijofbikifokdkfhcc\0.4.5_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ighdmehidhipcmcojjgiloacoafjmpfk\0.10.9_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.4_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf\12.0.0.1236_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
CHR - Extension: No name found = C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6718.423.0.0_0\
 
O1 HOSTS File: ([2017-03-02 21:00:20 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Trend Micro Security Toolbar Helper) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll (Trend Micro Inc.)
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (HP Inc.)
O2:64bit: - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Trend Micro Security Toolbar Helper) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O2 - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (HP Inc.)
O2 - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:64bit: - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:64bit: - HKLM\..\Toolbar: (Trend Micro Security Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll (Trend Micro Inc.)
O3 - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Trend Micro Security Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {093F479D-712E-46CD-9E06-62E734A05F68} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [CNAP2 Launcher] C:\Windows\SysNative\spool\drivers\x64\3\CNAP2LAK.EXE (CANON INC.)
O4:64bit: - HKLM..\Run: [Platinum] C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe (Trend Micro Inc.)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [SecurityHealth] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" File not found
O4 - HKCU..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsHistory = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
O8:64bit: - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 File not found
O8:64bit: - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105 File not found
O9:64bit: - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (HP Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0929f544-b324-4f88-ac20-f3a917509a0e}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll (Trend Micro Inc.)
O18:64bit: - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
O18:64bit: - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2018-06-24 15:31:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\TmSentry
[2018-06-24 15:25:43 | 000,000,000 | -H-D | C] -- C:\TMRescueDisk
[2018-06-24 15:22:38 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Antivirus+
[2018-06-24 15:21:07 | 000,147,672 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmeevw.sys
[2018-06-24 15:21:06 | 000,562,296 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmnciesc.sys
[2018-06-24 15:21:06 | 000,454,264 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmcomm.sys
[2018-06-24 15:21:06 | 000,145,016 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmactmon.sys
[2018-06-24 15:21:06 | 000,141,432 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmevtmgr.sys
[2018-06-24 15:21:05 | 000,132,512 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\TMUMH.sys
[2018-06-24 15:21:05 | 000,072,504 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\TMEBC64.sys
[2018-06-24 15:21:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\tmumh
[2018-06-24 15:21:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\tmumh
[2018-06-24 15:21:04 | 000,134,264 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmusa.sys
[2018-06-24 15:21:00 | 000,039,056 | ---- | C] (Trend Micro Inc.) -- C:\WINDOWS\SysNative\drivers\tmel.sys
[2018-06-24 15:18:20 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2018-06-24 15:01:57 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Trend Micro
[2018-06-24 14:48:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Trend Micro
[2018-06-24 14:43:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Trend Micro Installer
[2018-06-24 14:36:42 | 000,000,000 | ---D | C] -- C:\Users\adier\Desktop\TESTSECURITY
[2018-06-23 19:43:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Packages
[2018-06-13 22:59:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2018-06-13 00:47:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\PCHEALTH
[2018-06-13 00:41:31 | 007,520,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2018-06-13 00:41:31 | 006,569,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2018-06-13 00:41:30 | 025,846,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2018-06-13 00:41:16 | 022,005,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2018-06-13 00:41:11 | 007,581,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2018-06-13 00:41:11 | 004,706,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
[2018-06-13 00:41:10 | 007,900,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll
[2018-06-13 00:41:09 | 009,148,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2018-06-13 00:41:08 | 003,392,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2018-06-13 00:41:08 | 002,371,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2018-06-13 00:41:08 | 001,017,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2adec.dll
[2018-06-13 00:41:07 | 002,331,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2018-06-13 00:41:06 | 000,861,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2adec.dll
[2018-06-13 00:41:05 | 004,372,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeContent.dll
[2018-06-13 00:41:04 | 004,867,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2018-06-13 00:41:03 | 004,392,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2018-06-13 00:41:03 | 001,611,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll
[2018-06-13 00:41:03 | 001,380,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
[2018-06-13 00:41:02 | 006,817,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2018-06-13 00:41:01 | 005,780,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2018-06-13 00:41:01 | 003,653,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2018-06-13 00:41:00 | 004,788,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2018-06-13 00:41:00 | 003,296,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2018-06-13 00:41:00 | 002,364,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpcServices.dll
[2018-06-13 00:40:59 | 006,527,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2018-06-13 00:40:59 | 004,403,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2018-06-13 00:40:59 | 003,283,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2018-06-13 00:40:59 | 002,248,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2018-06-13 00:40:59 | 001,784,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
[2018-06-13 00:40:58 | 001,709,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
[2018-06-13 00:40:58 | 001,676,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreShell.dll
[2018-06-13 00:40:57 | 004,970,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll
[2018-06-13 00:40:57 | 003,180,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll
[2018-06-13 00:40:57 | 002,395,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVCORE.DLL
[2018-06-13 00:40:57 | 001,798,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2018-06-13 00:40:56 | 006,032,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
[2018-06-13 00:40:56 | 003,320,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2018-06-13 00:40:56 | 002,570,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2018-06-13 00:40:55 | 004,469,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll
[2018-06-13 00:40:55 | 002,479,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2018-06-13 00:40:54 | 001,020,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2018-06-13 00:40:53 | 004,563,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2018-06-13 00:40:53 | 002,900,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2018-06-13 00:40:53 | 002,417,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll
[2018-06-13 00:40:53 | 001,034,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe
[2018-06-13 00:40:52 | 000,457,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAudDecMFT.dll
[2018-06-13 00:40:49 | 002,061,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
[2018-06-13 00:40:49 | 000,416,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAudDecMFT.dll
[2018-06-13 00:40:48 | 003,999,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2018-06-13 00:40:48 | 001,461,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2018-06-13 00:40:48 | 001,395,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
[2018-06-13 00:40:48 | 001,371,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2018-06-13 00:40:48 | 001,364,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvruserservice.dll
[2018-06-13 00:40:48 | 001,209,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2018-06-13 00:40:47 | 002,564,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2018-06-13 00:40:47 | 002,546,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UpdateAgent.dll
[2018-06-13 00:40:47 | 002,486,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2018-06-13 00:40:47 | 001,613,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3D12.dll
[2018-06-13 00:40:46 | 004,336,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2018-06-13 00:40:46 | 003,492,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2018-06-13 00:40:46 | 001,485,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallService.dll
[2018-06-13 00:40:46 | 000,894,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll
[2018-06-13 00:40:46 | 000,813,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll
[2018-06-13 00:40:46 | 000,491,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2018-06-13 00:40:45 | 003,348,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
[2018-06-13 00:40:45 | 002,535,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2018-06-13 00:40:45 | 002,172,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
[2018-06-13 00:40:45 | 001,946,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2018-06-13 00:40:45 | 001,318,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ISM.dll
[2018-06-13 00:40:45 | 000,748,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2018-06-13 00:40:44 | 001,934,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2018-06-13 00:40:44 | 001,148,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2018-06-13 00:40:44 | 001,128,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
[2018-06-13 00:40:44 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2018-06-13 00:40:44 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppReadiness.dll
[2018-06-13 00:40:44 | 000,564,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll
[2018-06-13 00:40:43 | 002,961,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2018-06-13 00:40:43 | 002,895,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
[2018-06-13 00:40:43 | 002,789,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
[2018-06-13 00:40:43 | 002,236,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2018-06-13 00:40:43 | 001,299,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3D12.dll
[2018-06-13 00:40:43 | 001,285,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll
[2018-06-13 00:40:43 | 000,944,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.Internal.dll
[2018-06-13 00:40:42 | 001,792,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll
[2018-06-13 00:40:42 | 001,190,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2018-06-13 00:40:42 | 001,171,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
[2018-06-13 00:40:42 | 000,916,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
[2018-06-13 00:40:41 | 001,634,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
[2018-06-13 00:40:41 | 001,457,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2018-06-13 00:40:41 | 000,684,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2018-06-13 00:40:41 | 000,669,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2018-06-13 00:40:41 | 000,594,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe
[2018-06-13 00:40:39 | 002,401,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll
[2018-06-13 00:40:39 | 001,719,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dui70.dll
[2018-06-13 00:40:39 | 001,659,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsPrint.dll
[2018-06-13 00:40:39 | 001,070,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
[2018-06-13 00:40:39 | 000,976,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Spectrum.exe
[2018-06-13 00:40:39 | 000,950,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
[2018-06-13 00:40:39 | 000,550,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll
[2018-06-13 00:40:39 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgeIso.dll
[2018-06-13 00:40:38 | 003,293,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll
[2018-06-13 00:40:38 | 001,675,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
[2018-06-13 00:40:38 | 001,550,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll
[2018-06-13 00:40:38 | 001,363,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
[2018-06-13 00:40:38 | 001,288,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2018-06-13 00:40:38 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll
[2018-06-13 00:40:38 | 001,150,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
[2018-06-13 00:40:38 | 001,112,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfds.dll
[2018-06-13 00:40:38 | 000,652,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActivationManager.dll
[2018-06-13 00:40:38 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcGenral.dll
[2018-06-13 00:40:37 | 002,307,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVDECOD.DLL
[2018-06-13 00:40:37 | 001,364,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webservices.dll
[2018-06-13 00:40:37 | 001,258,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2018-06-13 00:40:37 | 001,140,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2018-06-13 00:40:37 | 001,097,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll
[2018-06-13 00:40:37 | 000,988,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2018-06-13 00:40:37 | 000,908,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSMPEG2ENC.DLL
[2018-06-13 00:40:37 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
[2018-06-13 00:40:37 | 000,770,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfds.dll
[2018-06-13 00:40:37 | 000,722,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2018-06-13 00:40:37 | 000,678,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
[2018-06-13 00:40:36 | 001,586,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2018-06-13 00:40:36 | 001,174,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
[2018-06-13 00:40:36 | 001,077,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webservices.dll
[2018-06-13 00:40:36 | 000,999,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
[2018-06-13 00:40:36 | 000,983,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2018-06-13 00:40:36 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CPFilters.dll
[2018-06-13 00:40:36 | 000,553,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
[2018-06-13 00:40:35 | 001,543,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll
[2018-06-13 00:40:35 | 001,462,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dui70.dll
[2018-06-13 00:40:35 | 001,454,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
[2018-06-13 00:40:35 | 001,121,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll
[2018-06-13 00:40:35 | 001,046,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2018-06-13 00:40:35 | 001,033,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2018-06-13 00:40:35 | 001,012,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
[2018-06-13 00:40:35 | 000,880,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
[2018-06-13 00:40:35 | 000,858,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll
[2018-06-13 00:40:35 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll
[2018-06-13 00:40:35 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SppExtComObj.Exe
[2018-06-13 00:40:35 | 000,567,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe
[2018-06-13 00:40:35 | 000,506,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe
[2018-06-13 00:40:35 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll
[2018-06-13 00:40:35 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll
[2018-06-13 00:40:35 | 000,329,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovs.dll
[2018-06-13 00:40:35 | 000,266,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2018-06-13 00:40:35 | 000,084,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageOverlayUtil.dll
[2018-06-13 00:40:34 | 001,397,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVP9DEC.dll
[2018-06-13 00:40:34 | 001,108,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallService.dll
[2018-06-13 00:40:34 | 000,917,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2018-06-13 00:40:34 | 000,673,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FrameServer.dll
[2018-06-13 00:40:34 | 000,565,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2018-06-13 00:40:34 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DXP.dll
[2018-06-13 00:40:34 | 000,356,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcryptprimitives.dll
[2018-06-13 00:40:34 | 000,264,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovs.dll
[2018-06-13 00:40:33 | 001,708,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSPhotography.dll
[2018-06-13 00:40:33 | 001,605,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2018-06-13 00:40:33 | 001,129,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll
[2018-06-13 00:40:33 | 000,873,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
[2018-06-13 00:40:33 | 000,593,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll
[2018-06-13 00:40:33 | 000,313,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsensorgroup.dll
[2018-06-13 00:40:33 | 000,194,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\skci.dll
[2018-06-13 00:40:33 | 000,064,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LanguageOverlayUtil.dll
[2018-06-13 00:40:32 | 001,180,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2018-06-13 00:40:32 | 001,063,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2018-06-13 00:40:32 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2018-06-13 00:40:32 | 000,723,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll
[2018-06-13 00:40:32 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll
[2018-06-13 00:40:32 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
[2018-06-13 00:40:32 | 000,615,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll
[2018-06-13 00:40:32 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll
[2018-06-13 00:40:32 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll
[2018-06-13 00:40:32 | 000,260,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2018-06-13 00:40:32 | 000,164,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wfplwfs.sys
[2018-06-13 00:40:32 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vertdll.dll
[2018-06-13 00:40:32 | 000,057,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kernel.appcore.dll
[2018-06-13 00:40:32 | 000,050,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kernel.appcore.dll
[2018-06-13 00:40:31 | 002,590,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVDECOD.DLL
[2018-06-13 00:40:31 | 001,921,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refs.sys
[2018-06-13 00:40:31 | 001,466,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2018-06-13 00:40:31 | 001,242,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll
[2018-06-13 00:40:31 | 000,871,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.BackgroundMediaPlayback.dll
[2018-06-13 00:40:31 | 000,869,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2018-06-13 00:40:31 | 000,661,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GenValObj.exe
[2018-06-13 00:40:31 | 000,646,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2018-06-13 00:40:31 | 000,607,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll
[2018-06-13 00:40:31 | 000,567,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2018-06-13 00:40:31 | 000,527,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe
[2018-06-13 00:40:31 | 000,413,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll
[2018-06-13 00:40:31 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll
[2018-06-13 00:40:31 | 000,269,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave_secure.dll
[2018-06-13 00:40:31 | 000,029,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\uefi.sys
[2018-06-13 00:40:30 | 003,640,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstsc.exe
[2018-06-13 00:40:30 | 003,444,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
[2018-06-13 00:40:30 | 001,213,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2018-06-13 00:40:30 | 001,032,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsPrint.dll
[2018-06-13 00:40:30 | 000,945,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys
[2018-06-13 00:40:30 | 000,885,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2018-06-13 00:40:30 | 000,842,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll
[2018-06-13 00:40:30 | 000,715,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll
[2018-06-13 00:40:30 | 000,659,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StateRepository.Core.dll
[2018-06-13 00:40:30 | 000,568,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryPS.dll
[2018-06-13 00:40:30 | 000,528,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll
[2018-06-13 00:40:30 | 000,272,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave.dll
[2018-06-13 00:40:30 | 000,134,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll
[2018-06-13 00:40:30 | 000,094,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2018-06-13 00:40:29 | 000,792,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2018-06-13 00:40:29 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FlightSettings.dll
[2018-06-13 00:40:29 | 000,713,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVideoDSP.dll
[2018-06-13 00:40:29 | 000,625,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll
[2018-06-13 00:40:29 | 000,413,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2018-06-13 00:40:29 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FSClient.dll
[2018-06-13 00:40:29 | 000,239,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FSClient.dll
[2018-06-13 00:40:29 | 000,226,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Ucx01000.sys
[2018-06-13 00:40:29 | 000,137,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcrypt.dll
[2018-06-13 00:40:28 | 001,825,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.dll
[2018-06-13 00:40:28 | 001,361,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSPhotography.dll
[2018-06-13 00:40:28 | 000,908,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll
[2018-06-13 00:40:28 | 000,857,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPEG2ENC.DLL
[2018-06-13 00:40:28 | 000,849,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.MediaPlayer.dll
[2018-06-13 00:40:28 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
[2018-06-13 00:40:28 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.BackgroundMediaPlayback.dll
[2018-06-13 00:40:28 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll
[2018-06-13 00:40:28 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserexport.exe
[2018-06-13 00:40:28 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcredprov.dll
[2018-06-13 00:40:28 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAC3ENC.DLL
[2018-06-13 00:40:28 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\easwrt.dll
[2018-06-13 00:40:28 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhosdeployment.dll
[2018-06-13 00:40:28 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidparse.sys
[2018-06-13 00:40:27 | 002,084,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2018-06-13 00:40:27 | 001,008,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MixedRealityCapture.dll
[2018-06-13 00:40:27 | 000,906,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.PhoneNumberFormatting.dll
[2018-06-13 00:40:27 | 000,868,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MixedRealityCapture.dll
[2018-06-13 00:40:27 | 000,781,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2018-06-13 00:40:27 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcext.dll
[2018-06-13 00:40:27 | 000,466,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2018-06-13 00:40:27 | 000,456,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDEServer.exe
[2018-06-13 00:40:27 | 000,340,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msexcl40.dll
[2018-06-13 00:40:27 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TDLMigration.dll
[2018-06-13 00:40:27 | 000,251,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll
[2018-06-13 00:40:27 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll
[2018-06-13 00:40:27 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallServiceTasks.dll
[2018-06-13 00:40:27 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryUpgrade.dll
[2018-06-13 00:40:26 | 002,019,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll
[2018-06-13 00:40:26 | 002,016,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2018-06-13 00:40:26 | 001,560,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdt.exe
[2018-06-13 00:40:26 | 001,508,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdt.exe
[2018-06-13 00:40:26 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2018-06-13 00:40:26 | 000,401,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll
[2018-06-13 00:40:26 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll
[2018-06-13 00:40:26 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidcredprov.dll
[2018-06-13 00:40:26 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SIHClient.exe
[2018-06-13 00:40:26 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManager.dll
[2018-06-13 00:40:26 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerCsp.dll
[2018-06-13 00:40:26 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryUpgrade.dll
[2018-06-13 00:40:26 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dssvc.dll
[2018-06-13 00:40:26 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManagerClient.dll
[2018-06-13 00:40:26 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usoapi.dll
[2018-06-13 00:40:26 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll
[2018-06-13 00:40:26 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edpnotify.exe
[2018-06-13 00:40:26 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tbauth.dll
[2018-06-13 00:40:26 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryCore.dll
[2018-06-13 00:40:26 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tbauth.dll
[2018-06-13 00:40:26 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerCookies.exe
[2018-06-13 00:40:26 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerCookies.exe
[2018-06-13 00:40:25 | 001,348,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpcServices.dll
[2018-06-12 02:07:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
[2018-06-11 00:09:13 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\PlaceholderTileLogoFolder
[2018-06-10 22:37:55 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\D3DSCache
[2018-06-10 18:37:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2018-06-10 18:37:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data
[2018-06-10 18:10:16 | 000,000,000 | --SD | C] -- C:\Users\adier\AppData\Roaming\Microsoft
[2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2018-06-10 18:10:16 | 000,000,000 | R--D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Voisinage réseau
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Voisinage d'impression
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\AppData\Local\Temporary Internet Files
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\SendTo
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Recent
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Modèles
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Documents\Mes vidéos
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Documents\Mes images
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Mes documents
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Menu Démarrer
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Documents\Ma musique
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Local Settings
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\AppData\Local\Historique
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Cookies
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\Application Data
[2018-06-10 18:10:16 | 000,000,000 | -HSD | C] -- C:\Users\adier\AppData\Local\Application Data
[2018-06-10 18:10:16 | 000,000,000 | -H-D | C] -- C:\Users\adier\AppData
[2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Temp
[2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Microsoft Help
[2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Local\Microsoft
[2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2018-06-10 18:10:16 | 000,000,000 | ---D | C] -- C:\Users\adier\AppData\Roaming\Macromedia
[2018-06-10 18:08:37 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
[2018-06-10 18:08:28 | 002,752,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
[2018-06-10 18:06:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2018-06-10 18:00:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
[2018-06-10 16:59:42 | 000,000,000 | -HSD | C] -- C:\Recovery
[2018-06-10 16:49:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles
[2018-06-10 16:49:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\Microsoft
[2018-06-10 16:45:42 | 013,570,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2018-06-10 16:45:42 | 012,500,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2018-06-10 16:45:42 | 001,559,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2018-06-10 16:45:42 | 001,307,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVPXENC.dll
[2018-06-10 16:45:42 | 001,295,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVPXENC.dll
[2018-06-10 16:45:42 | 001,034,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll
[2018-06-10 16:45:42 | 001,017,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll
[2018-06-10 16:45:42 | 000,861,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll
[2018-06-10 16:45:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSHEIF.dll
[2018-06-10 16:45:41 | 001,947,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2018-06-10 16:45:41 | 001,012,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll
[2018-06-10 16:45:41 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
[2018-06-10 16:45:41 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
[2018-06-10 16:45:41 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll
[2018-06-10 16:45:41 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSHEIF.dll
[2018-06-10 16:45:40 | 023,862,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Hydrogen.dll
[2018-06-10 16:45:40 | 019,525,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramCompositor.dll
[2018-06-10 16:45:40 | 007,987,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2018-06-10 16:45:40 | 001,271,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloSI.PCShell.dll
[2018-06-10 16:45:40 | 000,788,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DHolographicDisplay.dll
[2018-06-10 16:45:40 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MixedReality.Broker.dll
[2018-06-10 16:45:40 | 000,238,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloShellRuntime.dll
[2018-06-10 16:45:40 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Analog.dll
[2018-06-10 16:45:32 | 013,873,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2018-06-10 16:45:32 | 006,661,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2018-06-10 16:45:32 | 006,044,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2018-06-10 16:45:32 | 002,699,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2018-06-10 16:45:32 | 001,665,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2018-06-10 16:45:32 | 001,456,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcDesktopMonSvc.dll
[2018-06-10 16:45:32 | 001,426,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxPackaging.dll
[2018-06-10 16:45:32 | 001,380,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll
[2018-06-10 16:45:32 | 001,235,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpbase.dll
[2018-06-10 16:45:32 | 001,036,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll
[2018-06-10 16:45:32 | 001,005,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
[2018-06-10 16:45:32 | 000,992,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Vpn.dll
[2018-06-10 16:45:32 | 000,864,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmsys.cpl
[2018-06-10 16:45:32 | 000,863,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasdlg.dll
[2018-06-10 16:45:32 | 000,747,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SndVolSSO.dll
[2018-06-10 16:45:32 | 000,653,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll
[2018-06-10 16:45:32 | 000,581,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hhctrl.ocx
[2018-06-10 16:45:32 | 000,560,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2018-06-10 16:45:32 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasplap.dll
[2018-06-10 16:45:32 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWfdProvider.dll
[2018-06-10 16:45:32 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Phoneutil.dll
[2018-06-10 16:45:32 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallServiceTasks.dll
[2018-06-10 16:45:32 | 000,101,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rmclient.dll
[2018-06-10 16:45:32 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
[2018-06-10 16:45:32 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ApiSetHost.AppExecutionAlias.dll
[2018-06-10 16:45:32 | 000,077,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CompPkgSup.dll
[2018-06-10 16:45:31 | 002,366,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll
[2018-06-10 16:45:31 | 001,665,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll
[2018-06-10 16:45:31 | 001,649,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2018-06-10 16:45:31 | 000,947,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmsys.cpl
[2018-06-10 16:45:31 | 000,899,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll
[2018-06-10 16:45:31 | 000,804,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SndVolSSO.dll
[2018-06-10 16:45:31 | 000,695,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hhctrl.ocx
[2018-06-10 16:45:31 | 000,677,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HeadTrackerStorage.dll
[2018-06-10 16:45:31 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RasMediaManager.dll
[2018-06-10 16:45:31 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedPCCSP.dll
[2018-06-10 16:45:31 | 000,088,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\crashdmp.sys
[2018-06-10 16:45:30 | 008,623,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
[2018-06-10 16:45:30 | 000,941,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasdlg.dll
[2018-06-10 16:45:30 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll
[2018-06-10 16:45:30 | 000,835,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll
[2018-06-10 16:45:30 | 000,759,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll
[2018-06-10 16:45:30 | 000,543,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2018-06-10 16:45:30 | 000,486,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasplap.dll
[2018-06-10 16:45:30 | 000,308,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2018-06-10 16:45:30 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUser.dll
[2018-06-10 16:45:27 | 016,592,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2018-06-10 16:45:27 | 008,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
[2018-06-10 16:45:27 | 007,436,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2018-06-10 16:45:27 | 005,951,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll
[2018-06-10 16:45:27 | 004,929,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll
[2018-06-10 16:45:27 | 004,070,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2018-06-10 16:45:27 | 003,392,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2018-06-10 16:45:27 | 003,086,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2018-06-10 16:45:27 | 002,178,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2018-06-10 16:45:27 | 001,565,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxPackaging.dll
[2018-06-10 16:45:27 | 001,534,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2018-06-10 16:45:27 | 001,421,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpbase.dll
[2018-06-10 16:45:27 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
[2018-06-10 16:45:27 | 001,303,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Vpn.dll
[2018-06-10 16:45:27 | 001,292,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2018-06-10 16:45:27 | 001,210,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
[2018-06-10 16:45:27 | 000,917,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2018-06-10 16:45:27 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll
[2018-06-10 16:45:27 | 000,836,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2018-06-10 16:45:27 | 000,788,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
[2018-06-10 16:45:27 | 000,783,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyHrtfEnc.dll
[2018-06-10 16:45:27 | 000,776,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
[2018-06-10 16:45:27 | 000,735,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2018-06-10 16:45:27 | 000,665,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
[2018-06-10 16:45:27 | 000,625,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2018-06-10 16:45:27 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs4.dll
[2018-06-10 16:45:27 | 000,604,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\securekernel.exe
[2018-06-10 16:45:27 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2018-06-10 16:45:27 | 000,585,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs3.dll
[2018-06-10 16:45:27 | 000,553,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PerceptionSimulationExtensions.dll
[2018-06-10 16:45:27 | 000,494,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WerFault.exe
[2018-06-10 16:45:27 | 000,474,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs2.dll
[2018-06-10 16:45:27 | 000,473,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll
[2018-06-10 16:45:27 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs1.dll
[2018-06-10 16:45:27 | 000,434,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WerFault.exe
[2018-06-10 16:45:27 | 000,384,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Phoneutil.dll
[2018-06-10 16:45:27 | 000,382,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\clfs.sys
[2018-06-10 16:45:27 | 000,347,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2018-06-10 16:45:27 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.th.dll
[2018-06-10 16:45:27 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win81.dll
[2018-06-10 16:45:27 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wevtutil.exe
[2018-06-10 16:45:27 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyMATEnc.dll
[2018-06-10 16:45:27 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\HoloShellRuntime.dll
[2018-06-10 16:45:27 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wevtutil.exe
[2018-06-10 16:45:27 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2018-06-10 16:45:27 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win8rtm.dll
[2018-06-10 16:45:27 | 000,131,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rmclient.dll
[2018-06-10 16:45:27 | 000,130,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvsocket.sys
[2018-06-10 16:45:27 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
[2018-06-10 16:45:27 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppHostRegistrationVerifier.exe
[2018-06-10 16:45:27 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApiSetHost.AppExecutionAlias.dll
[2018-06-10 16:45:27 | 000,105,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2018-06-10 16:45:27 | 000,089,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompPkgSup.dll
[2018-06-10 16:45:27 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcimage.dll
[2018-06-10 16:38:42 | 003,398,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
[2018-06-10 16:38:42 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsFilt.dll
[2018-06-10 16:38:41 | 004,492,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
[2018-06-10 16:38:41 | 000,925,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsFilt.dll
[2018-06-10 16:38:41 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XPSSHHDR.dll
[2018-06-10 16:38:41 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XPSSHHDR.dll
[2018-06-10 16:38:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2018-06-10 16:38:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2018-06-10 16:37:47 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2018-06-10 16:37:47 | 000,035,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2018-06-10 16:37:46 | 000,124,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2018-06-10 16:37:46 | 000,103,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2018-06-10 16:37:45 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2018-06-10 16:37:45 | 000,035,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2018-06-10 16:35:52 | 006,350,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsData0009.dll
[2018-06-10 16:35:52 | 005,739,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\prm0009.dll
[2018-06-10 16:35:52 | 002,629,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsLexicons0009.dll
[2018-06-09 01:04:13 | 000,000,000 | ---D | C] -- C:\Camunda_Home
[2018-06-07 22:13:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2018-06-01 02:46:00 | 000,000,000 | ---D | C] -- C:\Users\adier\Desktop\backup
[2014-08-25 00:49:49 | 006,735,816 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_replication_as93.exe
[2014-08-25 00:49:21 | 027,976,104 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_dbserver_as93.exe
[2014-08-25 00:49:08 | 011,596,872 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_connectors_as93.exe
[2014-08-25 00:48:57 | 007,413,576 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_edbplus_as93.exe
[2014-08-25 00:48:46 | 008,099,752 | ---- | C] (EnterpriseDB) -- C:\Users\adier\ppas_mtk_as93.exe
[2014-08-25 00:47:41 | 064,780,416 | ---- | C] (EnterpriseDB) -- C:\Users\adier\pem_client.exe
[2014-08-25 00:47:27 | 013,841,144 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgbouncer9.3.exe
[2014-08-25 00:47:16 | 011,480,448 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_sbp_as93.exe
[2014-08-23 20:26:13 | 057,544,368 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_94.exe-20140823152710
[2014-08-23 20:26:13 | 056,287,640 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_94.exe
[2014-08-23 20:24:38 | 056,552,816 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_93.exe
[2014-08-23 20:24:38 | 054,726,880 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_93.exe-20140823152526
[2014-08-23 20:23:00 | 055,789,672 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_92.exe
[2014-08-23 20:23:00 | 053,958,208 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_92.exe-20140823152349
[2014-08-23 20:21:33 | 053,293,336 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_91.exe
[2014-08-23 20:21:33 | 050,609,952 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_91.exe-20140823152217
[2014-08-23 20:18:28 | 051,895,176 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_90.exe
[2014-08-23 20:18:28 | 050,072,528 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_90.exe-20140823151910
[2014-08-23 20:17:49 | 043,754,240 | ---- | C] (PostgreSQL Global Development Group) -- C:\Users\adier\postgresql_84.exe
[2014-08-23 20:16:46 | 035,072,224 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_xdb.exe
[2014-08-23 20:16:24 | 024,802,288 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_updatemonitor.exe
[2014-08-23 20:16:03 | 011,395,296 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_sqlprotect_pg91.exe
[2014-08-23 20:16:03 | 010,918,640 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_sqlprotect_pg91.exe-20140823151612
[2014-08-23 20:15:58 | 006,382,424 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_slony_i_pg91.exe
[2014-08-23 20:15:36 | 013,468,632 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_psqlodbc.exe
[2014-08-23 20:15:36 | 012,812,240 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_psqlodbc.exe-20140823151546
[2014-08-23 20:15:28 | 007,177,744 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_phppgadmin.exe
[2014-08-23 20:15:22 | 007,084,280 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgjdbc.exe
[2014-08-23 20:15:09 | 014,490,424 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgbouncer.exe
[2014-08-23 20:14:56 | 012,967,360 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pgagent.exe
[2014-08-23 20:14:41 | 006,200,448 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_sqlprofiler_pg91.exe
[2014-08-23 20:14:41 | 006,199,288 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_sqlprofiler_pg91.exe-20140823151448
[2014-08-23 20:12:18 | 168,476,544 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_server.exe
[2014-08-23 20:11:21 | 064,780,416 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_client.exe
[2014-08-23 20:11:07 | 013,558,376 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_pem_agent.exe
[2014-08-23 20:11:00 | 007,711,840 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_npgsql.exe
[2014-08-23 20:10:45 | 017,175,824 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_mtk.exe
[2014-08-23 20:10:10 | 039,414,096 | ---- | C] (EnterpriseDB) -- C:\Users\adier\edb_apachephp.exe
 
========== Files - Modified Within 30 Days ==========
 
[2018-06-24 15:47:50 | 001,766,594 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2018-06-24 15:47:50 | 000,791,208 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat
[2018-06-24 15:47:50 | 000,700,140 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2018-06-24 15:47:50 | 000,149,704 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat
[2018-06-24 15:47:50 | 000,133,080 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2018-06-24 15:42:37 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2018-06-24 15:40:35 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2018-06-24 15:39:42 | 000,065,536 | ---- | M] () -- C:\WINDOWS\SysNative\spu_storage.bin
[2018-06-24 15:22:56 | 000,001,373 | ---- | M] () -- C:\Users\adier\Desktop\Trend Micro Antivirus+.lnk
[2018-06-24 15:19:05 | 000,000,059 | ---- | M] () -- C:\WINDOWS\SysNative\SupportTool.exe.bat
[2018-06-24 14:46:53 | 000,000,036 | ---- | M] () -- C:\Users\adier\AppData\Local\housecall.guid.cache
[2018-06-24 13:37:04 | 000,000,348 | ---- | M] () -- C:\WINDOWS\tasks\HPCeeScheduleForreida.job
[2018-06-21 15:54:03 | 000,000,600 | ---- | M] () -- C:\Users\adier\AppData\Local\PUTTY.RND
[2018-06-19 17:09:15 | 000,089,275 | ---- | M] () -- C:\Users\adier\Documents\1.png
[2018-06-14 00:03:31 | 000,002,265 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2018-06-13 23:09:51 | 000,517,816 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2018-06-13 00:49:48 | 133,315,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MRT-KB890830.exe
[2018-06-12 02:07:49 | 000,001,970 | ---- | M] () -- C:\Users\Public\Desktop\Garmin Express.lnk
[2018-06-10 18:41:46 | 000,001,417 | ---- | M] () -- C:\Users\adier\Desktop\Microsoft Edge.lnk
[2018-06-10 18:40:15 | 000,002,365 | ---- | M] () -- C:\Users\adier\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2018-06-10 18:36:41 | 000,011,433 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2018-06-10 18:36:41 | 000,011,433 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2018-06-10 18:27:01 | 000,023,208 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2018-06-10 16:45:42 | 013,570,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2018-06-10 16:45:42 | 012,500,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2018-06-10 16:45:42 | 001,559,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2018-06-10 16:45:42 | 001,307,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVPXENC.dll
[2018-06-10 16:45:42 | 001,295,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVPXENC.dll
[2018-06-10 16:45:42 | 001,034,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfreadwrite.dll
[2018-06-10 16:45:42 | 001,017,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyDecMFT.dll
[2018-06-10 16:45:42 | 000,861,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DolbyDecMFT.dll
[2018-06-10 16:45:42 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSHEIF.dll
[2018-06-10 16:45:41 | 001,947,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2018-06-10 16:45:41 | 001,012,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfreadwrite.dll
[2018-06-10 16:45:41 | 000,726,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
[2018-06-10 16:45:41 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
[2018-06-10 16:45:41 | 000,154,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll
[2018-06-10 16:45:41 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSHEIF.dll
[2018-06-10 16:45:40 | 023,862,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Hydrogen.dll
[2018-06-10 16:45:40 | 019,525,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramCompositor.dll
[2018-06-10 16:45:40 | 007,987,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2018-06-10 16:45:40 | 001,271,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloSI.PCShell.dll
[2018-06-10 16:45:40 | 000,788,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DHolographicDisplay.dll
[2018-06-10 16:45:40 | 000,256,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MixedReality.Broker.dll
[2018-06-10 16:45:40 | 000,238,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloShellRuntime.dll
[2018-06-10 16:45:40 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Analog.dll
[2018-06-10 16:45:40 | 000,018,716 | ---- | M] () -- C:\WINDOWS\SysWow64\srms-apr.dat
[2018-06-10 16:45:32 | 013,873,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2018-06-10 16:45:32 | 006,661,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2018-06-10 16:45:32 | 006,044,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2018-06-10 16:45:32 | 002,699,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2018-06-10 16:45:32 | 001,665,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2018-06-10 16:45:32 | 001,456,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcDesktopMonSvc.dll
[2018-06-10 16:45:32 | 001,426,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxPackaging.dll
[2018-06-10 16:45:32 | 001,380,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll
[2018-06-10 16:45:32 | 001,235,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpbase.dll
[2018-06-10 16:45:32 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadtb.dll
[2018-06-10 16:45:32 | 001,005,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
[2018-06-10 16:45:32 | 000,992,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Vpn.dll
[2018-06-10 16:45:32 | 000,864,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmsys.cpl
[2018-06-10 16:45:32 | 000,863,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasdlg.dll
[2018-06-10 16:45:32 | 000,747,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SndVolSSO.dll
[2018-06-10 16:45:32 | 000,653,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll
[2018-06-10 16:45:32 | 000,581,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hhctrl.ocx
[2018-06-10 16:45:32 | 000,560,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2018-06-10 16:45:32 | 000,461,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasplap.dll
[2018-06-10 16:45:32 | 000,356,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWfdProvider.dll
[2018-06-10 16:45:32 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Phoneutil.dll
[2018-06-10 16:45:32 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallServiceTasks.dll
[2018-06-10 16:45:32 | 000,101,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rmclient.dll
[2018-06-10 16:45:32 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDataTimeUtil.dll
[2018-06-10 16:45:32 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ApiSetHost.AppExecutionAlias.dll
[2018-06-10 16:45:32 | 000,077,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CompPkgSup.dll
[2018-06-10 16:45:32 | 000,018,716 | ---- | M] () -- C:\WINDOWS\SysNative\srms-apr.dat
[2018-06-10 16:45:31 | 002,366,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll
[2018-06-10 16:45:31 | 001,665,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll
[2018-06-10 16:45:31 | 001,649,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2018-06-10 16:45:31 | 000,947,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmsys.cpl
[2018-06-10 16:45:31 | 000,899,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll
[2018-06-10 16:45:31 | 000,804,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SndVolSSO.dll
[2018-06-10 16:45:31 | 000,695,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hhctrl.ocx
[2018-06-10 16:45:31 | 000,677,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HeadTrackerStorage.dll
[2018-06-10 16:45:31 | 000,344,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RasMediaManager.dll
[2018-06-10 16:45:31 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedPCCSP.dll
[2018-06-10 16:45:31 | 000,088,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\crashdmp.sys
[2018-06-10 16:45:30 | 008,623,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
[2018-06-10 16:45:30 | 000,941,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasdlg.dll
[2018-06-10 16:45:30 | 000,933,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll
[2018-06-10 16:45:30 | 000,835,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll
[2018-06-10 16:45:30 | 000,759,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll
[2018-06-10 16:45:30 | 000,543,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2018-06-10 16:45:30 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasplap.dll
[2018-06-10 16:45:30 | 000,308,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2018-06-10 16:45:30 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TelephonyInteractiveUser.dll
[2018-06-10 16:45:27 | 016,592,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2018-06-10 16:45:27 | 008,188,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
[2018-06-10 16:45:27 | 007,436,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2018-06-10 16:45:27 | 005,951,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll
[2018-06-10 16:45:27 | 004,929,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll
[2018-06-10 16:45:27 | 004,070,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2018-06-10 16:45:27 | 003,392,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2018-06-10 16:45:27 | 003,086,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2018-06-10 16:45:27 | 002,178,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2018-06-10 16:45:27 | 001,953,280 | ---- | M] () -- C:\WINDOWS\SysNative\rdpnano.dll
[2018-06-10 16:45:27 | 001,565,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxPackaging.dll
[2018-06-10 16:45:27 | 001,534,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2018-06-10 16:45:27 | 001,421,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpbase.dll
[2018-06-10 16:45:27 | 001,371,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadtb.dll
[2018-06-10 16:45:27 | 001,303,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Vpn.dll
[2018-06-10 16:45:27 | 001,292,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2018-06-10 16:45:27 | 001,210,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
[2018-06-10 16:45:27 | 000,917,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2018-06-10 16:45:27 | 000,847,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll
[2018-06-10 16:45:27 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2018-06-10 16:45:27 | 000,788,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
[2018-06-10 16:45:27 | 000,783,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyHrtfEnc.dll
[2018-06-10 16:45:27 | 000,776,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
[2018-06-10 16:45:27 | 000,735,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2018-06-10 16:45:27 | 000,665,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wer.dll
[2018-06-10 16:45:27 | 000,625,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2018-06-10 16:45:27 | 000,613,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs4.dll
[2018-06-10 16:45:27 | 000,604,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\securekernel.exe
[2018-06-10 16:45:27 | 000,596,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2018-06-10 16:45:27 | 000,585,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs3.dll
[2018-06-10 16:45:27 | 000,553,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PerceptionSimulationExtensions.dll
[2018-06-10 16:45:27 | 000,494,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WerFault.exe
[2018-06-10 16:45:27 | 000,474,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs2.dll
[2018-06-10 16:45:27 | 000,473,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll
[2018-06-10 16:45:27 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.rs1.dll
[2018-06-10 16:45:27 | 000,434,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WerFault.exe
[2018-06-10 16:45:27 | 000,384,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Phoneutil.dll
[2018-06-10 16:45:27 | 000,382,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\clfs.sys
[2018-06-10 16:45:27 | 000,347,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2018-06-10 16:45:27 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.th.dll
[2018-06-10 16:45:27 | 000,241,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win81.dll
[2018-06-10 16:45:27 | 000,236,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wevtutil.exe
[2018-06-10 16:45:27 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyMATEnc.dll
[2018-06-10 16:45:27 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\HoloShellRuntime.dll
[2018-06-10 16:45:27 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wevtutil.exe
[2018-06-10 16:45:27 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2018-06-10 16:45:27 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.win8rtm.dll
[2018-06-10 16:45:27 | 000,131,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rmclient.dll
[2018-06-10 16:45:27 | 000,130,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvsocket.sys
[2018-06-10 16:45:27 | 000,119,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataTimeUtil.dll
[2018-06-10 16:45:27 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppHostRegistrationVerifier.exe
[2018-06-10 16:45:27 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApiSetHost.AppExecutionAlias.dll
[2018-06-10 16:45:27 | 000,105,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2018-06-10 16:45:27 | 000,089,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompPkgSup.dll
[2018-06-10 16:45:27 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcimage.dll
[2018-06-10 16:38:42 | 003,398,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
[2018-06-10 16:38:42 | 000,575,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsFilt.dll
[2018-06-10 16:38:42 | 000,076,060 | ---- | M] () -- C:\WINDOWS\SysWow64\xpsrchvw.xml
[2018-06-10 16:38:41 | 004,492,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
[2018-06-10 16:38:41 | 000,925,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsFilt.dll
[2018-06-10 16:38:41 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XPSSHHDR.dll
[2018-06-10 16:38:41 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XPSSHHDR.dll
[2018-06-10 16:38:41 | 000,076,060 | ---- | M] () -- C:\WINDOWS\SysNative\xpsrchvw.xml
[2018-06-10 16:37:47 | 000,778,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2018-06-10 16:37:47 | 000,103,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2018-06-10 16:37:47 | 000,035,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2018-06-10 16:37:46 | 000,124,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2018-06-10 16:37:45 | 001,166,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2018-06-10 16:37:45 | 000,035,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2018-06-10 16:35:53 | 002,629,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsLexicons0009.dll
[2018-06-10 16:35:52 | 006,350,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsData0009.dll
[2018-06-10 16:35:52 | 005,739,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\prm0009.dll
[2018-06-08 20:07:06 | 000,506,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe
[2018-06-08 20:05:19 | 000,094,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2018-06-08 20:02:55 | 000,661,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GenValObj.exe
[2018-06-08 20:02:19 | 001,634,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
[2018-06-08 20:01:46 | 002,395,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVCORE.DLL
[2018-06-08 20:01:11 | 001,046,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2018-06-08 19:48:47 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iemigplugin.dll
[2018-06-08 19:46:37 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2018-06-08 19:45:54 | 004,392,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2018-06-08 19:45:53 | 000,808,960 | ---- | M] () -- C:\WINDOWS\SysNative\MBR2GPT.EXE
[2018-06-08 19:45:39 | 001,560,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdt.exe
[2018-06-08 19:44:44 | 000,285,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidcredprov.dll
[2018-06-08 19:44:40 | 000,340,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcGenral.dll
[2018-06-08 19:44:27 | 000,625,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll
[2018-06-08 19:44:03 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TSWorkspace.dll
[2018-06-08 19:43:24 | 001,719,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dui70.dll
[2018-06-08 19:43:20 | 001,659,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XpsPrint.dll
[2018-06-08 19:43:11 | 003,640,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstsc.exe
[2018-06-08 19:43:06 | 001,543,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtctm.dll
[2018-06-08 19:43:05 | 001,364,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvruserservice.dll
[2018-06-08 19:42:57 | 001,605,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2018-06-08 19:42:50 | 003,999,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2018-06-08 19:42:39 | 003,653,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2018-06-08 19:42:21 | 002,084,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2018-06-08 19:42:01 | 000,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcext.dll
[2018-06-08 19:41:45 | 000,878,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CPFilters.dll
[2018-06-08 19:41:22 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\easwrt.dll
[2018-06-08 19:41:16 | 000,758,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2018-06-08 19:41:13 | 000,577,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SppExtComObj.Exe
[2018-06-08 19:41:06 | 002,019,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll
[2018-06-08 19:41:02 | 001,180,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2018-06-08 19:40:48 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DXP.dll
[2018-06-08 18:04:16 | 001,454,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
[2018-06-08 17:58:40 | 000,917,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2018-06-08 17:50:10 | 001,508,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdt.exe
[2018-06-08 17:47:51 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidcredprov.dll
[2018-06-08 17:47:50 | 001,032,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XpsPrint.dll
[2018-06-08 17:47:31 | 002,895,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
[2018-06-08 17:47:30 | 003,492,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2018-06-08 17:47:19 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll
[2018-06-08 17:47:12 | 001,462,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dui70.dll
[2018-06-08 17:46:55 | 000,908,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TSWorkspace.dll
[2018-06-08 17:46:41 | 002,016,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2018-06-08 17:46:35 | 003,444,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
[2018-06-08 17:45:51 | 002,401,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll
[2018-06-08 17:06:33 | 000,976,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Spectrum.exe
[2018-06-08 17:05:59 | 000,944,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Mirage.Internal.dll
[2018-06-08 17:05:24 | 001,008,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.MixedRealityCapture.dll
[2018-06-08 15:00:19 | 000,658,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Mirage.Internal.dll
[2018-06-08 15:00:16 | 000,868,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.MixedRealityCapture.dll
[2018-06-08 11:37:27 | 002,417,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll
[2018-06-08 11:35:09 | 001,613,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3D12.dll
[2018-06-08 11:34:40 | 000,748,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2018-06-08 11:34:21 | 001,299,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3D12.dll
[2018-06-08 11:31:54 | 003,180,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll
[2018-06-08 11:31:39 | 007,900,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll
[2018-06-08 11:31:08 | 000,029,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\uefi.sys
[2018-06-08 10:34:40 | 001,140,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2018-06-08 10:34:11 | 000,983,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2018-06-08 10:33:58 | 001,034,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ApplyTrustOffline.exe
[2018-06-08 10:33:53 | 001,213,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2018-06-08 10:33:24 | 000,272,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave.dll
[2018-06-08 10:33:22 | 000,269,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SgrmEnclave_secure.dll
[2018-06-08 10:31:16 | 000,226,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Ucx01000.sys
[2018-06-08 10:31:07 | 001,012,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
[2018-06-08 10:31:00 | 001,174,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
[2018-06-08 10:30:55 | 000,491,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2018-06-08 10:30:55 | 000,134,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll
[2018-06-08 10:30:53 | 001,063,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2018-06-08 10:30:52 | 000,567,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcblaunch.exe
[2018-06-08 10:30:50 | 000,565,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2018-06-08 10:30:49 | 000,194,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\skci.dll
[2018-06-08 10:30:41 | 000,723,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll
[2018-06-08 10:30:37 | 000,527,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe
[2018-06-08 10:30:32 | 001,798,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2018-06-08 10:30:31 | 001,017,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2adec.dll
[2018-06-08 10:30:15 | 000,722,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2018-06-08 10:30:08 | 003,296,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2018-06-08 10:30:06 | 001,363,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
[2018-06-08 10:30:03 | 000,137,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcrypt.dll
[2018-06-08 10:30:01 | 009,148,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2018-06-08 10:29:45 | 002,546,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UpdateAgent.dll
[2018-06-08 10:29:39 | 000,164,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wfplwfs.sys
[2018-06-08 10:29:38 | 001,946,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2018-06-08 10:29:36 | 000,594,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe
[2018-06-08 10:29:35 | 001,934,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2018-06-08 10:29:34 | 001,792,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll
[2018-06-08 10:29:33 | 001,457,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2018-06-08 10:29:33 | 001,209,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2018-06-08 10:29:32 | 004,970,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll
[2018-06-08 10:29:31 | 000,413,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll
[2018-06-08 10:29:26 | 006,817,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2018-06-08 10:29:25 | 002,570,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2018-06-08 10:29:25 | 002,371,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2018-06-08 10:29:23 | 000,792,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2018-06-08 10:29:22 | 002,564,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2018-06-08 10:29:22 | 001,921,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refs.sys
[2018-06-08 10:29:21 | 004,403,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2018-06-08 10:29:20 | 002,590,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVDECOD.DLL
[2018-06-08 10:29:20 | 001,288,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2018-06-08 10:29:20 | 001,097,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll
[2018-06-08 10:29:20 | 000,678,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SHCore.dll
[2018-06-08 10:29:20 | 000,057,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kernel.appcore.dll
[2018-06-08 10:29:19 | 001,611,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfnetsrc.dll
[2018-06-08 10:29:19 | 000,413,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2018-06-08 10:29:18 | 000,416,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSAudDecMFT.dll
[2018-06-08 10:29:17 | 001,784,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfasfsrcsnk.dll
[2018-06-08 10:29:17 | 001,112,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfds.dll
[2018-06-08 10:29:15 | 003,283,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2018-06-08 10:29:15 | 001,190,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2018-06-08 10:29:15 | 001,148,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2018-06-08 10:29:15 | 000,885,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2018-06-08 10:29:13 | 001,364,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webservices.dll
[2018-06-08 10:29:11 | 007,520,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2018-06-08 10:29:11 | 000,659,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StateRepository.Core.dll
[2018-06-08 10:29:11 | 000,266,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2018-06-08 10:29:10 | 000,260,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2018-06-08 10:29:07 | 001,150,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
[2018-06-08 10:29:07 | 000,084,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LanguageOverlayUtil.dll
[2018-06-08 10:29:06 | 000,945,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys
[2018-06-08 10:29:04 | 000,313,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsensorgroup.dll
[2018-06-08 10:29:04 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vertdll.dll
[2018-06-08 10:29:03 | 001,258,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2018-06-08 10:13:12 | 025,846,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2018-06-08 10:12:04 | 000,861,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2adec.dll
[2018-06-08 10:11:59 | 000,550,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll
[2018-06-08 10:11:05 | 001,461,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2018-06-08 10:10:35 | 002,479,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2018-06-08 10:10:32 | 000,880,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
[2018-06-08 10:10:31 | 000,457,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAudDecMFT.dll
[2018-06-08 10:10:25 | 002,331,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2018-06-08 10:10:19 | 001,397,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVP9DEC.dll
[2018-06-08 10:10:09 | 002,307,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVDECOD.DLL
[2018-06-08 10:09:55 | 000,356,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcryptprimitives.dll
[2018-06-08 10:09:54 | 000,553,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SHCore.dll
[2018-06-08 10:09:51 | 001,077,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webservices.dll
[2018-06-08 10:09:48 | 006,569,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2018-06-08 10:09:47 | 004,788,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2018-06-08 10:09:46 | 002,535,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2018-06-08 10:09:44 | 001,380,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfasfsrcsnk.dll
[2018-06-08 10:09:44 | 001,020,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2018-06-08 10:09:43 | 006,527,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2018-06-08 10:09:43 | 004,469,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll
[2018-06-08 10:09:43 | 001,709,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfnetsrc.dll
[2018-06-08 10:09:43 | 000,988,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2018-06-08 10:09:41 | 002,486,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2018-06-08 10:09:41 | 000,770,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfds.dll
[2018-06-08 10:09:40 | 000,567,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2018-06-08 10:09:40 | 000,050,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\kernel.appcore.dll
[2018-06-08 10:09:37 | 001,129,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll
[2018-06-08 10:09:32 | 000,607,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll
[2018-06-08 10:09:31 | 000,568,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryPS.dll
[2018-06-08 10:09:31 | 000,064,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LanguageOverlayUtil.dll
[2018-06-08 10:04:02 | 004,706,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
[2018-06-08 10:03:35 | 022,005,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2018-06-08 10:03:34 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryCore.dll
[2018-06-08 10:03:12 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallServiceTasks.dll
[2018-06-08 10:03:07 | 000,906,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Globalization.PhoneNumberFormatting.dll
[2018-06-08 10:02:51 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usoapi.dll
[2018-06-08 10:02:35 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edpnotify.exe
[2018-06-08 10:02:00 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerCookies.exe
[2018-06-08 10:01:56 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerCsp.dll
[2018-06-08 10:01:54 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserexport.exe
[2018-06-08 10:01:46 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tbauth.dll
[2018-06-08 10:01:36 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidparse.sys
[2018-06-08 10:01:30 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FSClient.dll
[2018-06-08 10:01:10 | 002,961,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2018-06-08 10:01:07 | 000,209,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXApplicabilityBlob.dll
[2018-06-08 10:01:03 | 004,563,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2018-06-08 10:01:01 | 000,294,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TDLMigration.dll
[2018-06-08 10:00:55 | 001,285,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Maps.dll
[2018-06-08 10:00:30 | 000,329,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovs.dll
[2018-06-08 10:00:23 | 004,372,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeContent.dll
[2018-06-08 10:00:19 | 003,320,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2018-06-08 10:00:19 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManagerClient.dll
[2018-06-08 10:00:02 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dssvc.dll
[2018-06-08 10:00:01 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SIHClient.exe
[2018-06-08 09:59:55 | 000,564,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll
[2018-06-08 09:59:47 | 000,456,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDEServer.exe
[2018-06-08 09:59:43 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhosdeployment.dll
[2018-06-08 09:59:39 | 001,318,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ISM.dll
[2018-06-08 09:59:32 | 004,867,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2018-06-08 09:59:20 | 006,032,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d2d1.dll
[2018-06-08 09:59:19 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryUpgrade.dll
[2018-06-08 09:59:09 | 003,392,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2018-06-08 09:59:09 | 000,673,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FrameServer.dll
[2018-06-08 09:58:58 | 000,894,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll
[2018-06-08 09:58:51 | 000,266,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CapabilityAccessManager.dll
[2018-06-08 09:58:46 | 000,781,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2018-06-08 09:58:41 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerCookies.exe
[2018-06-08 09:58:40 | 000,898,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebFilter.dll
[2018-06-08 09:58:17 | 000,239,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FSClient.dll
[2018-06-08 09:58:07 | 007,581,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2018-06-08 09:58:05 | 000,813,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll
[2018-06-08 09:58:00 | 001,676,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreShell.dll
[2018-06-08 09:57:57 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tbauth.dll
[2018-06-08 09:57:51 | 000,150,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryUpgrade.dll
[2018-06-08 09:57:20 | 001,708,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSPhotography.dll
[2018-06-08 09:57:19 | 001,485,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallService.dll
[2018-06-08 09:57:17 | 002,172,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
[2018-06-08 09:57:17 | 000,310,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wincorlib.dll
[2018-06-08 09:57:01 | 000,483,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTMediaFrame.dll
[2018-06-08 09:57:00 | 003,348,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
[2018-06-08 09:56:52 | 005,780,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2018-06-08 09:56:52 | 000,684,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2018-06-08 09:56:49 | 004,336,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2018-06-08 09:56:49 | 000,264,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovs.dll
[2018-06-08 09:56:46 | 001,395,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
[2018-06-08 09:56:42 | 001,550,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll
[2018-06-08 09:56:37 | 000,858,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FlightSettings.dll
[2018-06-08 09:56:36 | 001,361,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSPhotography.dll
[2018-06-08 09:56:26 | 002,900,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2018-06-08 09:56:24 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll
[2018-06-08 09:56:23 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2018-06-08 09:56:23 | 000,331,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll
[2018-06-08 09:56:21 | 000,908,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSMPEG2ENC.DLL
[2018-06-08 09:56:20 | 000,916,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
[2018-06-08 09:56:17 | 000,615,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll
[2018-06-08 09:56:14 | 002,364,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OpcServices.dll
[2018-06-08 09:56:09 | 000,871,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.BackgroundMediaPlayback.dll
[2018-06-08 09:56:08 | 000,715,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Web.dll
[2018-06-08 09:56:01 | 003,293,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\esent.dll
[2018-06-08 09:56:01 | 000,466,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2018-06-08 09:55:57 | 001,242,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll
[2018-06-08 09:55:54 | 001,192,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.Maps.dll
[2018-06-08 09:55:48 | 001,171,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncCore.dll
[2018-06-08 09:55:41 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll
[2018-06-08 09:55:41 | 000,401,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll
[2018-06-08 09:55:40 | 001,070,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Streaming.dll
[2018-06-08 09:55:34 | 002,236,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2018-06-08 09:55:31 | 000,849,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.MediaPlayer.dll
[2018-06-08 09:55:28 | 000,630,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll
[2018-06-08 09:55:26 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2018-06-08 09:55:25 | 002,248,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2018-06-08 09:55:13 | 001,371,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2018-06-08 09:55:12 | 000,776,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2018-06-08 09:55:04 | 000,667,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppReadiness.dll
[2018-06-08 09:55:01 | 000,652,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActivationManager.dll
[2018-06-08 09:55:00 | 002,061,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
[2018-06-08 09:54:59 | 001,586,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2018-06-08 09:54:58 | 000,842,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll
[2018-06-08 09:54:57 | 000,646,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2018-06-08 09:54:53 | 000,505,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgeIso.dll
[2018-06-08 09:54:52 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
[2018-06-08 09:54:51 | 000,857,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSMPEG2ENC.DLL
[2018-06-08 09:54:51 | 000,375,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTMediaFrame.dll
[2018-06-08 09:54:49 | 001,348,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OpcServices.dll
[2018-06-08 09:54:26 | 000,729,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FlightSettings.dll
[2018-06-08 09:54:25 | 002,789,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
[2018-06-08 09:54:22 | 000,251,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll
[2018-06-08 09:54:20 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WpcWebFilter.dll
[2018-06-08 09:54:13 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSAC3ENC.DLL
[2018-06-08 09:54:12 | 000,593,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Web.dll
[2018-06-08 09:54:07 | 000,950,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncCore.dll
[2018-06-08 09:54:04 | 000,999,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
[2018-06-08 09:53:59 | 000,873,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Streaming.dll
[2018-06-08 09:53:57 | 000,677,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
[2018-06-08 09:53:53 | 001,108,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallService.dll
[2018-06-08 09:53:47 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.BackgroundMediaPlayback.dll
[2018-06-08 09:53:45 | 001,675,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
[2018-06-08 09:53:27 | 001,466,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2018-06-08 09:53:19 | 000,528,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActivationManager.dll
[2018-06-08 09:53:15 | 000,669,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2018-06-08 08:41:12 | 000,001,310 | ---- | M] () -- C:\WINDOWS\SysNative\tcbres.wim
[2018-06-06 19:57:40 | 003,733,320 | ---- | M] () -- C:\WINDOWS\SysNative\Windows.Mirage.dll
[2018-06-06 05:20:40 | 002,841,312 | ---- | M] () -- C:\WINDOWS\SysWow64\Windows.Mirage.dll
[2018-06-06 00:29:25 | 000,835,056 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2018-06-06 00:29:25 | 000,179,704 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2018-06-05 17:20:47 | 000,000,951 | ---- | M] () -- C:\Users\adier\Desktop\TouchPad - Raccourci.lnk
[2018-06-05 17:19:59 | 000,000,096 | ---- | M] () -- C:\Users\adier\Desktop\TouchPad.bat
[2018-06-04 23:35:19 | 000,086,132 | ---- | M] () -- C:\Users\adier\Desktop\Tree.javaBackup
[2018-06-02 15:03:50 | 000,313,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdFilter.sys
[2018-06-02 15:03:50 | 000,061,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdNisDrv.sys
[2018-06-02 15:03:49 | 000,046,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wd\WdBoot.sys
[2018-06-02 00:24:40 | 000,713,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVideoDSP.dll
[2018-06-01 23:54:24 | 001,825,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.dll
[2018-06-01 00:13:54 | 000,337,385 | ---- | M] () -- C:\Users\adier\Desktop\plan_3.png
[2018-05-31 23:18:50 | 000,247,981 | ---- | M] () -- C:\Users\adier\Desktop\plan_2.png
[2018-05-31 16:48:09 | 000,333,762 | ---- | M] () -- C:\Users\adier\Desktop\plan_1.png
[2018-05-31 01:05:46 | 000,231,892 | ---- | M] () -- C:\Users\adier\Desktop\plan.png
 
========== Files Created - No Company Name ==========
 
[2018-06-24 15:22:37 | 000,001,373 | ---- | C] () -- C:\Users\adier\Desktop\Trend Micro Antivirus+.lnk
[2018-06-24 15:19:05 | 000,000,059 | ---- | C] () -- C:\WINDOWS\SysNative\SupportTool.exe.bat
[2018-06-24 14:46:52 | 000,000,036 | ---- | C] () -- C:\Users\adier\AppData\Local\housecall.guid.cache
[2018-06-19 17:09:15 | 000,089,275 | ---- | C] () -- C:\Users\adier\Documents\1.png
[2018-06-13 00:41:02 | 003,733,320 | ---- | C] () -- C:\WINDOWS\SysNative\Windows.Mirage.dll
[2018-06-13 00:40:53 | 002,841,312 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Mirage.dll
[2018-06-13 00:40:28 | 000,808,960 | ---- | C] () -- C:\WINDOWS\SysNative\MBR2GPT.EXE
[2018-06-13 00:40:26 | 000,001,310 | ---- | C] () -- C:\WINDOWS\SysNative\tcbres.wim
[2018-06-12 02:07:49 | 000,001,970 | ---- | C] () -- C:\Users\Public\Desktop\Garmin Express.lnk
[2018-06-10 18:41:46 | 000,001,417 | ---- | C] () -- C:\Users\adier\Desktop\Microsoft Edge.lnk
[2018-06-10 18:35:33 | 000,011,433 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2018-06-10 18:35:33 | 000,011,433 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2018-06-10 18:21:00 | 001,766,594 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2018-06-10 18:13:45 | 000,001,576 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2018-06-10 18:10:16 | 000,001,105 | ---- | C] () -- C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
[2018-06-10 18:10:16 | 000,000,352 | ---- | C] () -- C:\Users\adier\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2018-06-10 18:10:16 | 000,000,334 | ---- | C] () -- C:\Users\adier\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2018-06-10 18:00:27 | 000,517,816 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2018-06-10 16:50:37 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2018-06-10 16:45:40 | 000,018,716 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr.dat
[2018-06-10 16:45:32 | 000,018,716 | ---- | C] () -- C:\WINDOWS\SysNative\srms-apr.dat
[2018-06-10 16:45:27 | 001,953,280 | ---- | C] () -- C:\WINDOWS\SysNative\rdpnano.dll
[2018-06-10 16:38:42 | 000,076,060 | ---- | C] () -- C:\WINDOWS\SysWow64\xpsrchvw.xml
[2018-06-10 16:38:41 | 000,076,060 | ---- | C] () -- C:\WINDOWS\SysNative\xpsrchvw.xml
[2018-06-05 17:20:36 | 000,000,951 | ---- | C] () -- C:\Users\adier\Desktop\TouchPad - Raccourci.lnk
[2018-06-05 17:19:58 | 000,000,096 | ---- | C] () -- C:\Users\adier\Desktop\TouchPad.bat
[2018-06-04 23:35:19 | 000,086,132 | ---- | C] () -- C:\Users\adier\Desktop\Tree.javaBackup
[2018-06-01 00:13:53 | 000,337,385 | ---- | C] () -- C:\Users\adier\Desktop\plan_3.png
[2018-05-31 23:18:49 | 000,247,981 | ---- | C] () -- C:\Users\adier\Desktop\plan_2.png
[2018-05-31 16:48:09 | 000,333,762 | ---- | C] () -- C:\Users\adier\Desktop\plan_1.png
[2018-05-31 01:05:46 | 000,231,892 | ---- | C] () -- C:\Users\adier\Desktop\plan.png
[2018-04-12 00:38:34 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2018-04-12 00:38:34 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2018-04-12 00:34:55 | 000,518,144 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2018-04-12 00:34:50 | 000,054,272 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2018-04-12 00:34:49 | 000,002,404 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2018-04-12 00:34:47 | 000,364,200 | ---- | C] () -- C:\WINDOWS\SysWow64\InputHost.dll
[2018-04-12 00:34:46 | 003,575,808 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.Analysis.dll
[2018-04-12 00:34:46 | 000,025,600 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.WARP.JITService.exe
[2018-04-12 00:34:45 | 000,329,216 | ---- | C] () -- C:\WINDOWS\SysWow64\ssdm.dll
[2018-04-12 00:34:45 | 000,223,232 | ---- | C] () -- C:\WINDOWS\SysWow64\HeatCore.dll
[2018-04-12 00:34:45 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2018-04-12 00:34:45 | 000,111,616 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowsDefaultHeatProcessor.dll
[2018-04-12 00:34:45 | 000,055,808 | ---- | C] () -- C:\WINDOWS\SysWow64\xboxgipsynthetic.dll
[2018-04-12 00:34:36 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2018-04-12 00:34:30 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2017-08-10 00:35:00 | 000,000,087 | ---- | C] () -- C:\Users\reida\.jboss-cli-history
[2017-08-10 00:35:00 | 000,000,000 | ---- | C] () -- C:\Users\reida\.aesh_aliases
[2017-07-27 00:00:58 | 006,990,107 | ---- | C] () -- C:\Users\adier\Video_1501113658.wmv
[2017-06-06 00:30:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2017-04-23 04:18:08 | 000,004,557 | ---- | C] () -- C:\Users\reida\.bash_history
[2017-04-21 17:13:47 | 000,000,600 | ---- | C] () -- C:\Users\adier\AppData\Roaming\winscp.rnd
[2017-04-21 16:32:23 | 000,000,050 | ---- | C] () -- C:\Users\reida\.j2e
[2017-04-13 22:26:53 | 000,000,746 | ---- | C] () -- C:\Users\adier\AppData\Local\recently-used.xbel
[2017-04-05 15:20:36 | 000,000,066 | ---- | C] () -- C:\Users\reida\.gitconfig
[2017-03-25 22:05:24 | 000,000,600 | ---- | C] () -- C:\Users\adier\AppData\Local\PUTTY.RND
[2017-03-24 21:24:35 | 000,007,605 | ---- | C] () -- C:\Users\adier\AppData\Local\Resmon.ResmonCfg
[2017-03-22 02:49:32 | 000,000,347 | ---- | C] () -- C:\Users\adier\MyProject.komodoproject
[2017-03-21 18:11:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MinGW.INI
[2017-03-21 01:38:48 | 002,525,184 | ---- | C] () -- C:\Users\adier\prevayler.EAP
[2014-12-14 02:32:24 | 000,000,144 | ---- | C] () -- C:\Users\reida\.appletviewer
[2014-08-23 20:17:16 | 021,017,439 | ---- | C] () -- C:\Users\adier\postgis_2_0_pg91.exe
[2014-08-23 20:17:16 | 018,184,980 | ---- | C] () -- C:\Users\adier\postgis_2_0_pg91.exe-20140823151731
[2014-06-06 22:50:41 | 000,000,096 | ---- | C] () -- C:\Users\reida\.asadminpass
 
========== ZeroAccess Check ==========
 
[2018-06-12 02:08:05 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2018-06-10 16:45:27 | 007,436,632 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2018-06-10 16:45:32 | 006,044,104 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2018-04-12 00:34:40 | 000,973,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2018-04-12 00:34:55 | 000,785,408 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2018-04-12 00:34:40 | 000,524,288 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2017-04-21 19:01:08 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\ActiveState
[2017-07-28 14:22:03 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\AMD
[2018-02-14 17:18:04 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\AVAST Software
[2018-02-14 17:15:00 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\AVG
[2017-03-20 17:03:06 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\calibre
[2017-08-09 00:22:15 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\camunda-modeler
[2017-03-04 01:14:13 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Base64
[2017-03-04 01:14:10 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft MAC Scanner Pro
[2017-03-04 01:14:13 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Packet Builder
[2017-03-04 01:14:12 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Packet Player
[2017-03-04 01:14:11 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Colasoft Ping Tool
[2017-03-25 01:03:30 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2017-08-01 02:05:54 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Dashlane
[2018-01-16 14:35:49 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Dev-Cpp
[2017-04-21 17:00:57 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Far Manager
[2018-06-24 15:48:17 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\FileZilla
[2018-02-01 00:32:56 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Garmin
[2017-04-09 01:54:55 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Innovative Solutions
[2017-08-01 01:27:22 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\IObit
[2017-08-08 23:57:06 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\LogExpert
[2018-03-30 21:33:11 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\MusicBrainz
[2017-07-28 15:39:11 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\MySQL
[2017-08-21 13:17:19 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Neo4j Community Edition
[2018-03-25 23:58:45 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Notepad++
[2017-03-03 20:58:18 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\PDAppFlex
[2017-08-01 01:25:29 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\ProductData
[2017-03-11 21:06:24 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\SolidDocuments
[2017-03-21 01:36:04 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Sparx Systems
[2017-03-15 20:57:33 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Subversion
[2017-03-25 23:25:40 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\SumatraPDF
[2018-02-09 23:37:29 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Synaptics
[2017-07-17 17:44:01 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\TeamViewer
[2017-03-15 21:37:00 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Triana4
[2017-04-10 02:50:51 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\uTorrent
[2017-04-13 21:01:50 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Wireshark
[2017-04-08 20:41:01 | 000,000,000 | ---D | M] -- C:\Users\adier\AppData\Roaming\Youtomato
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 94 bytes -> C:\Users\adier\SkyDrive:ms-properties
@Alternate Data Stream - 57 bytes -> C:\Users\adier\SkyDrive.old:ms-properties

< End of report >
 

 

 

the contents of Extras.txt 

====================

OTL Extras logfile created on: 2018-06-24 15:47:49 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\adier\Downloads
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.17134.0)
Locale: 00000C0C | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd
 
15,19 Gb Total Physical Memory | 12,74 Gb Available Physical Memory | 83,87% Memory free
25,19 Gb Paging File | 22,75 Gb Available in Paging File | 90,31% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 672,03 Gb Total Space | 248,48 Gb Free Space | 36,98% Space Free | Partition Type: NTFS
Drive D: | 24,04 Gb Total Space | 15,23 Gb Free Space | 63,38% Space Free | Partition Type: NTFS
 
Computer Name: CHLAHBI | User Name: reida | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Directory [UpdateEncryptionSettings] -- Reg Error: Key error.
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = B1 64 EF 9C E1 00 D4 01  [binary data]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
"EnableFirewall" = 1
"DefaultOutboundAction" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
"DefaultInboundAction" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
"EnableFirewall" = 1
"DefaultOutboundAction" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
"DefaultInboundAction" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
"EnableFirewall" = 1
"DefaultOutboundAction" = 0 -- [2018-01-03 15:26:16 | 000,000,000 | ---D | M]
"DefaultInboundAction" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1E7A5A01-829F-4FDA-A07C-DD03B7FB26FA}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | 
"{ED2DBBA0-88B5-41DA-B32B-841A712E94F8}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06140242-66FD-43AD-8DAE-E12A9E4650EB}" = dir=in | name=@{microsoft.zunevideo_10.18041.14611.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{0875B103-5516-442F-8010-60A2EFFFB660}" = dir=in | name=@{microsoft.zunemusic_10.18052.11111.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{091C0447-793B-4599-8506-37F806A160A8}" = dir=in | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{0A731057-0186-4E94-A13D-8364295C2B55}" = dir=out | name=@{microsoft.bingnews_4.24.11382.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{0B718ADC-F59B-4319-9DE1-DF6392A12CB1}" = dir=in | name=@{microsoft.microsoftofficehub_17.9328.1700.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{0CDCFC91-122D-44F3-BB07-EB16560B8F1A}" = dir=in | name=xbox | 
"{134D4055-57A0-4B3B-BF13-5C40E114D325}" = protocol=6 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | 
"{137B8CB6-94BB-4132-8966-1C7868D5611D}" = dir=out | name=@{microsoft.commsphone_3.34.12002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | 
"{1450C5EB-F817-4CEC-A775-57E0206579CB}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"{15D483F1-6B28-4A94-B071-6C2933A7F6D0}" = dir=out | name=@{microsoft.zunemusic_10.18052.11111.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{172AFC2F-15FB-4742-99AB-4755483BE22D}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{17666B0A-C923-4849-9B27-FA45A7177E93}" = dir=out | name=@{microsoft.windowscamera_2018.227.30.1000_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/resources/appstorename} | 
"{19262755-70D6-491E-9C64-2CB719203BFB}" = dir=out | name=twitter | 
"{1C083B1F-807E-4BE6-A98B-0E8BA653BDF8}" = dir=out | name=microsoft sticky notes | 
"{1C94A922-06CF-4EE2-935F-3169091C47B4}" = protocol=6 | dir=in | app=c:\program files\driverscloud.com\driverscloud.exe | 
"{2354D357-5589-48D0-BF2F-C85C63904EB2}" = dir=out | name=@{microsoft.bingweather_4.24.11294.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{24A48F74-4D8E-4A70-B234-2C5ED851C599}" = dir=in | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{262C890B-FA6C-4D98-B868-E918DBCCDECC}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | 
"{29829991-B0F5-4D61-828F-210B0375C48F}" = dir=out | name=win32webviewhost | 
"{2E651961-5A53-4AB8-A046-B3652147646E}" = dir=out | name=xbox | 
"{2ECE696D-9A3D-40E4-9B3C-19A5BF9C62AC}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x8\programs64\coreldrw.exe | 
"{33E3B00F-077A-421B-82E8-753584C91ED9}" = dir=out | name=tunein radio | 
"{363025C9-35E6-4739-939F-B72B2C52BF8A}" = dir=out | name=@{microsoft.mspaint_4.1805.15037.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | 
"{372328AB-4FE3-41E9-9F01-402C8F1C8CF2}" = dir=out | name=@{microsoft.windows.cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{39210061-2B7D-4B12-B85F-BFD0BDCC1B10}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | 
"{3BF92005-77D9-4FF3-909A-757E0EF973AD}" = dir=out | name=microsoft pay | 
"{3EC9E632-C908-4A56-AE1F-F510888C5BAB}" = dir=out | name=@{microsoft.microsoftofficehub_17.9328.1700.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{41216D34-C945-4ABA-B338-43789E6975EB}" = dir=in | name=netflix | 
"{4352D5F6-2034-465C-93FC-A19FADB20A42}" = dir=out | name=shell input application | 
"{4478A886-E168-4D86-9117-8EBF38582D1B}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{48FB3836-9266-47AE-A152-D95D4806A77B}" = dir=out | name=windows_ie_ac_001 | 
"{4BAD3205-0331-4106-8332-830A09AC41DB}" = dir=out | name=@{microsoft.lockapp_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{4CE74E69-D7DF-4CD9-A7E0-05BC32D0AAB8}" = dir=out | name=@{microsoft.storepurchaseapp_11805.1001.5.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | 
"{5166BD89-56BE-4DF8-8EFC-15B8F155EA29}" = dir=out | name=xbox gaming overlay | 
"{533C5749-DA36-47B9-AF19-ECBF1A44BB19}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{53BD0097-7678-43F0-9302-58884B383668}" = dir=out | name=@{microsoft.gethelp_10.1706.10952.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | 
"{55B0B1A2-EE5E-4927-9D81-6AC847582346}" = dir=out | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{55EA6460-A2B2-4F28-9AFE-1AA600AEB72E}" = dir=out | name=caesars slots | 
"{5B302737-F53D-459B-A500-AF665939D192}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | 
"{5C42C92A-C8F1-459D-934E-F4D6ED383EA5}" = protocol=6 | dir=in | app=c:\users\adier\appdata\local\programs\fiddler\fiddler.exe | 
"{5D7FD56D-DDE4-4698-B400-041F7E646B1D}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | 
"{5E2EF255-5159-4426-8368-003F0F0A3EAD}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 
"{5E4308E5-2173-4C4A-BDCD-F69AB52E8A96}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | 
"{5F3A9AD3-6E45-4D36-A40F-BA5F0F11173D}" = protocol=17 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | 
"{61775D98-E72E-470E-9817-39BAF82CDD8E}" = dir=out | name=@{microsoft.windowscalculator_10.1805.1201.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | 
"{660FF480-0486-4514-A087-FE4AFFFBACD2}" = dir=out | name=@{microsoft.microsoft3dviewer_4.1804.19012.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | 
"{68F5C19D-956F-44C6-9E9A-45BED9159DC1}" = dir=out | name=candy crush soda saga | 
"{6A097C64-B072-4695-87DB-4E00EFC764D8}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | 
"{6A906B88-EE54-48AD-ABE8-93EFC37A23A7}" = dir=in | name=@{microsoft.messaging_3.38.22001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{6AAE7BAC-ED24-4A14-85F9-429075BC913D}" = dir=out | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{6B5442C2-5C14-44FC-B663-EF64EF8EC795}" = dir=in | name=@{microsoft.messaging_3.37.23004.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{708688E0-C146-48B9-BCAC-E52B4C376D2D}" = dir=out | name=@{microsoft.windows.holographicfirstrun_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.holographicfirstrun/resources/pkgdisplayname} | 
"{74E0860C-C289-47D7-B90F-B7F362CDCE2A}" = dir=out | name=xbox tcui | 
"{761C7655-598E-4026-A445-498F471ADD4C}" = dir=in | name=win32webviewhost | 
"{76D5218E-838E-4FE4-90A7-2EE67071B9C1}" = dir=in | name=print 3d | 
"{772C2D19-636F-45F1-82DA-F41FF3FCD7E2}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | 
"{77A5EDBE-7E85-4504-A5A3-0487E6694183}" = dir=out | name=@{microsoft.messaging_3.38.22001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{7DA9281C-D361-4DF6-8FA5-C7327EEE4F90}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{7EBC605B-712F-4B8E-A880-A169B0492455}" = protocol=6 | dir=in | app=c:\program files\visualsvn server\bin\visualsvnserver.exe | 
"{8074B55D-CAB1-4FC0-A376-D9FBF60E21F4}" = dir=out | name=@{microsoft.windowsmaps_5.1805.1431.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 
"{89A45E04-C600-47BF-8173-30CA7084E638}" = dir=out | name=@{microsoft.oneconnect_4.1805.1291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | 
"{8A18CDAE-E67D-4C81-8D9A-51FB6B3413E3}" = dir=in | name=minecraft for windows 10 | 
"{8B0FD9E8-3683-4FE3-87E7-C20960C018A6}" = dir=out | name=@{microsoft.windows.photos_2018.18041.15530.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{8B9A1F74-1CC1-4345-9415-2E9D7F4DBDD7}" = dir=in | name=@{microsoft.windows.photos_2018.18041.15530.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{8CA7253F-093F-4840-B893-29612E44E9A3}" = dir=out | name=@{microsoft.getstarted_6.10.10872.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 
"{8F941917-2561-4E9E-A282-DEA2A65B4067}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1712.1141.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 
"{8FD34F82-7C0F-437F-AEA3-641A8BB0E4AD}" = protocol=17 | dir=in | app=c:\program files\driverscloud.com\driverscloud.exe | 
"{90AA489A-FFA6-4300-B781-5540B86FF310}" = dir=out | name=@{microsoft.zunevideo_10.18041.14611.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{91516225-1C5D-4257-9A96-7F2FA1F8B949}" = dir=out | name=@{microsoft.skypeapp_12.1815.209.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | 
"{938B879F-A4B0-4337-8068-B578B75269E8}" = dir=out | app=c:\program files (x86)\iobit\advanced systemcare\surfing protection\ffnativemessage.exe | 
"{94270236-53AB-40B7-9ACA-511D8EE0A2AD}" = dir=out | name=@{microsoft.people_10.1805.1361.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 
"{94BC41D3-D152-496F-91A9-01E9FD6184AA}" = dir=out | name=@{microsoft.windowsstore_11805.1001.42.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{972B8D52-2903-41F0-89CC-871B4FD17610}" = dir=out | name=@{microsoft.microsoftedge_42.17134.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{9756E662-A1FC-4FB2-B399-F67EAC6B4AF3}" = dir=in | name=@{microsoft.skypeapp_12.1815.209.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | 
"{97838A83-6114-43D2-8C4C-48EAF66FAF94}" = dir=out | name=minecraft for windows 10 | 
"{9B25DD43-7335-443A-92B8-7FF5EBCF6385}" = dir=in | name=@{microsoft.oneconnect_4.1805.1291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | 
"{9E8557FA-FB4C-41D4-AC7D-0B518716E799}" = dir=out | name=@{microsoft.accountscontrol_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{A23A5B18-DFC5-4D93-8272-191CF9443FA0}" = dir=in | name=tunein radio | 
"{B527A8DA-763D-43CE-8C65-71A378812D62}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | 
"{B7C3EC26-5F71-4564-BC11-7B09A06DD284}" = dir=out | name=print 3d | 
"{B91BBD4C-F0DA-4D01-AA9E-F6811F9AAF4D}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.17134.1_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | 
"{BA26BC4B-4F19-4F3E-82DD-932E03BFBFBF}" = dir=out | name=@{microsoft.xboxidentityprovider_12.41.24002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | 
"{BCAB4E34-58DA-4622-AF33-CB2CD8D25725}" = dir=out | name=3d builder | 
"{BDB7758B-E22B-4171-B7A9-06559084D6BD}" = dir=out | name=@{microsoft.desktopappinstaller_1.0.20921.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 
"{BE3BF079-4486-4EBB-A656-726856000534}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.17134.112_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{BE3F843C-6723-4A53-85CE-E89428C579F6}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | 
"{BF22206A-27A3-4722-A4C2-83F9FEAAC5F6}" = dir=in | name=@{microsoft.windowsstore_11805.1001.42.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{BF53C993-5349-4426-A367-5C8960721A74}" = dir=in | name=@{microsoft.microsoftedge_42.17134.1.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{C2FB71A1-3B36-4F67-86BF-947F97FE170B}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{C5AA8680-A416-4F43-8EAC-747786F42DFD}" = dir=out | name=microsoft solitaire collection | 
"{C79A5D7D-8D34-4802-8E94-FFCC7926DF6C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | 
"{C9EC658C-F307-45E2-BCBA-D4D8379D67AB}" = dir=out | name=@{microsoft.ppiprojection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{CC72D954-887E-42FF-B3E5-03DA685825C9}" = dir=in | name=@{microsoft.commsphone_3.34.12002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.commsphone/resources/appstorename} | 
"{CF6273E7-4DBE-49B3-9B01-F8018C0447C2}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"{D0C812E2-14C9-4FB2-B9D8-44B52EB29EB7}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{D1BE3DC2-38DC-4AAB-99E4-565E630E4665}" = dir=in | app=c:\program files (x86)\iobit\advanced systemcare\surfing protection\ffnativemessage.exe | 
"{D4AFC7AB-4360-41F3-A5A0-30D96D6A5464}" = dir=in | name=microsoft sticky notes | 
"{D733B687-F087-4298-9EB9-BA3CC9A3AA12}" = dir=out | name=xbox game bar | 
"{D7E24D6B-E57E-40C2-ADD6-9E608F910463}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{D89AB05F-7913-403A-A55D-809C7B4AA4EA}" = dir=out | name=windows_ie_ac_001 | 
"{DE237C64-C0B6-4F43-9F0A-C81EB4ECBD6A}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{DEF9A6AB-7D76-4F7D-8A4C-B24CB34B1BA1}" = dir=in | name=@{microsoft.windows.cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{E31E2BDF-963F-4C09-A95D-6C69C3AAC706}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1712.1141.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 
"{EA494DF0-D3AF-4570-9CB0-6EC3C5E5C1C9}" = dir=out | name=onenote | 
"{EA9E9F6C-B402-4456-A725-2654F44174BC}" = dir=in | name=@{microsoft.desktopappinstaller_1.0.20921.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 
"{EDCBF46E-D214-4C2B-8796-4BA12D201D46}" = protocol=6 | dir=in | app=c:\program files\corel\coreldraw graphics suite x8\programs64\corelpp.exe | 
"{EFC74D77-7E58-4780-87BC-0C3B55811129}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"{F61B84E3-CEA9-4E11-97F2-B319F028827F}" = dir=in | name=onenote | 
"{F66E08EF-82A9-4D4C-BF60-EAA059B10F34}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{FF1A601F-2052-4975-9FFA-9113B8E1BD38}" = dir=out | name=netflix | 
"TCP Query User{02E907D9-A2AE-4670-AB9C-9310F3F80C24}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe" = protocol=6 | dir=in | app=c:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe | 
"TCP Query User{04DCE8CF-EA24-4697-A781-6A268C11368B}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.8.0_144\jre\bin\java.exe | 
"TCP Query User{0D8423A1-11E8-443D-8E15-D1E771C9DE17}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | 
"TCP Query User{38EBA2CD-1AE0-49FD-B4FD-168CC32FFD32}C:\program files\firefox developer edition\firefox.exe" = protocol=6 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | 
"TCP Query User{49EEF936-AFAA-42C0-82E9-D20F3AEA3A35}C:\program files (x86)\spider\spider.exe" = protocol=6 | dir=in | app=c:\program files (x86)\spider\spider.exe | 
"TCP Query User{6008AD76-6D21-4F73-B405-914097332A81}D:\neo4j\data\bin\neo4j-ce.exe" = protocol=6 | dir=in | app=d:\neo4j\data\bin\neo4j-ce.exe | 
"TCP Query User{6191D5D7-430B-4238-A0D7-89397E9A6921}C:\program files\java\jre1.8.0_121\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.8.0_121\bin\javaw.exe | 
"TCP Query User{92682207-557B-4DEC-822F-BCAA59052C81}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"TCP Query User{96F973D7-2C28-4A08-9DF5-4125760A2A82}C:\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\eclipse\eclipse.exe | 
"TCP Query User{9FD5BA76-35BF-49BB-8238-8DEA83C552E4}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | 
"TCP Query User{A5832E93-3307-4BF6-91EB-2DF2EA3E2502}C:\program files\filezilla ftp client\filezilla.exe" = protocol=6 | dir=in | app=c:\program files\filezilla ftp client\filezilla.exe | 
"TCP Query User{AA44C8BF-42DA-47BB-B1C0-82AE91197713}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
"TCP Query User{BFDF8410-F181-485B-8A03-DDEB098C6BCB}C:\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\eclipse\eclipse.exe | 
"UDP Query User{22F72AFE-F3BA-4D03-9A7A-913DF5C53235}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | 
"UDP Query User{3276320C-C8C5-4A55-9653-8AF12F3971F2}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"UDP Query User{3EBFAEC8-0F13-4290-AAF0-838D1F56FC93}C:\program files (x86)\spider\spider.exe" = protocol=17 | dir=in | app=c:\program files (x86)\spider\spider.exe | 
"UDP Query User{5F058398-A48E-48C1-B78F-CD00E456FF9A}D:\neo4j\data\bin\neo4j-ce.exe" = protocol=17 | dir=in | app=d:\neo4j\data\bin\neo4j-ce.exe | 
"UDP Query User{8E7F3A8E-E2D8-4579-9514-050046FC43E2}C:\program files\filezilla ftp client\filezilla.exe" = protocol=17 | dir=in | app=c:\program files\filezilla ftp client\filezilla.exe | 
"UDP Query User{A032039A-4090-49C2-8A21-6E7C6FA96D09}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
"UDP Query User{B24E7D1B-4221-4C37-80CF-BBAC5F144FBF}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe" = protocol=17 | dir=in | app=c:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe | 
"UDP Query User{B885D944-2E61-4BD3-B9DB-A046CB01E414}C:\program files\firefox developer edition\firefox.exe" = protocol=17 | dir=in | app=c:\program files\firefox developer edition\firefox.exe | 
"UDP Query User{B8B95EED-481C-4ED8-982C-0E50A0E11EF3}C:\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\eclipse\eclipse.exe | 
"UDP Query User{D9385A3D-ECC4-4EBC-ABFD-F027BDEF5B2F}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.8.0_144\jre\bin\java.exe | 
"UDP Query User{D9927547-02EA-4F31-9EAB-574322C87BB7}C:\program files\java\jdk1.8.0_144\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.8.0_144\bin\java.exe | 
"UDP Query User{DA3CAF95-5983-41CC-9854-35697CDDEC14}C:\program files\java\jre1.8.0_121\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.8.0_121\bin\javaw.exe | 
"UDP Query User{DDB31545-0F24-46F1-AFE2-CEF51B9F3F7A}C:\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\eclipse\eclipse.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}" = Corel Graphics - Windows Shell Extension
"_{4B3FC55D-E999-4BEC-AF29-1091E574961F}" = CorelDRAW Graphics Suite X8 (64-Bit)
"{02C85FBD-87D3-4352-BF2E-AFE897CD5559}" = CorelDRAW Graphics Suite X8 - Custom Data (x64)
"{04D8C47E-C0FE-4CA5-8878-91ECD9552109}" = CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64)
"{0A182180-3BAF-4B94-BFD0-CF082CC5FF0D}" = CorelDRAW Graphics Suite X8 - FR (x64)
"{1253ED86-69FD-4A7B-BDF2-96A522583A88}" = CorelDRAW Graphics Suite X8 - Capture (x64)
"{1D4B870D-A5A8-4B88-9520-ED8EFD545AA1}" = CorelDRAW Graphics Suite X8 - Workspaces (x64)
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{20AB389B-8602-403C-B19B-F0A1D6C510A5}" = ANT Drivers Installer x64
"{20C1086D-C843-36B1-B678-990089D1BD44}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40649
"{23A2ABD8-8231-48AD-AD71-FF0566A7DD8F}" = CorelDRAW Graphics Suite X8 - Writing Tools (x64)
"{26A24AE4-039D-4CA4-87B4-2F06417076FF}" = Java 7 Update 76 (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F64180144F0}" = Java 8 Update 144 (64-bit)
"{300DB480-7301-436A-A312-B695B2BC6D71}" = CorelDRAW Graphics Suite X8 - CS (x64)
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{3C28BFD4-90C7-3138-87EF-418DC16E9598}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106
"{3CAAE169-6001-48ED-B2C6-5B6F511552FD}" = Corel Graphics - Windows Shell Extension
"{43C4A17D-93D9-41C6-8ACA-370EA390ED2A}" = CorelDRAW Graphics Suite X8 - CT (x64)
"{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}" = Energy Star
"{48DD8181-A983-447B-9660-A55A935CA751}" = CorelDRAW Graphics Suite X8 - VBA (x64)
"{4AA43BE3-D21B-44D7-B9CD-86692DEF3706}" = CorelDRAW Graphics Suite X8 - DE (x64)
"{4B3FC55D-E999-4BEC-AF29-1091E574961F}" = CorelDRAW Graphics Suite X8 - Setup Files (x64)
"{5051E668-4430-F42C-5822-886DFF87AC0A}" = ccc-utility64
"{50D1BD2D-6D8C-45A8-9DB5-CDAB7227DB36}" = CorelDRAW Graphics Suite X8 - Redist (x64)
"{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106
"{5FB5FF89-0938-49D9-850B-53B78B84A7E4}" = CorelDRAW Graphics Suite X8 - Font Manager (x64)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64A3A4F4-B792-11D6-A78A-00B0D0170760}" = Java SE Development Kit 7 Update 76 (64-bit)
"{64A3A4F4-B792-11D6-A78A-00B0D0180144}" = Java SE Development Kit 8 Update 144 (64-bit)
"{67D57366-EFCC-46DA-BB1F-BBE89B377177}" = CorelDRAW Graphics Suite X8 - BR (x64)
"{6D0ED930-AE5C-3289-ADA3-E6C3B13050DE}" = Microsoft Visual Studio Tools for Applications 2015 x64 Hosting Support
"{6E6D1438-33CC-413B-BC96-3497B1271CDD}" = CorelDRAW Graphics Suite X8 - Filters (x64)
"{6F03D92C-48DB-4182-8A51-BEF8FE64B72C}" = CorelDRAW Graphics Suite X8 - PL (x64)
"{72922AB6-F920-4C98-985D-EC90CE0918D4}" = CorelDRAW Graphics Suite X8 - Common (x64)
"{7D9351AA-66C2-4185-ACE6-85AD06F5BA78}" = VisualSVN Server 3.6.3
"{81EBD8D4-9142-4D33-BF34-D99EFC1180F5}" = CorelDRAW Graphics Suite X8 - VideoBrowser (x64)
"{8285FEBA-D373-493F-BC78-934F84A0A298}" = CorelDRAW Graphics Suite X8 - IT (x64)
"{8D0A0EC6-9A3C-354F-9BFC-A61E96BE1846}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA
"{90120064-0070-0000-0000-4000000FF1CE}" = Microsoft Visual Basic for Applications 7.1 (x64)
"{90150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
"{90150000-0015-040C-1000-0000000FF1CE}" = Microsoft Access MUI (French) 2013
"{90150000-0016-040C-1000-0000000FF1CE}" = Microsoft Excel MUI (French) 2013
"{90150000-0018-040C-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (French) 2013
"{90150000-0019-040C-1000-0000000FF1CE}" = Microsoft Publisher MUI (French) 2013
"{90150000-001A-040C-1000-0000000FF1CE}" = Microsoft Outlook MUI (French) 2013
"{90150000-001B-040C-1000-0000000FF1CE}" = Microsoft Word MUI (French) 2013
"{90150000-001F-0401-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - اللغة العربية
"{90150000-001F-0407-1000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français
"{90150000-001F-0413-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Nederlands
"{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español
"{90150000-002C-040C-1000-0000000FF1CE}" = Microsoft Office Proofing (French) 2013
"{90150000-0044-040C-1000-0000000FF1CE}" = Microsoft InfoPath MUI (French) 2013
"{90150000-006E-040C-1000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2013
"{90150000-0090-040C-1000-0000000FF1CE}" = Microsoft DCF MUI (French) 2013
"{90150000-00A1-040C-1000-0000000FF1CE}" = Microsoft OneNote MUI (French) 2013
"{90150000-00BA-040C-1000-0000000FF1CE}" = Microsoft Groove MUI (French) 2013
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-040C-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (French) 2013
"{90150000-00E1-040C-1000-0000000FF1CE}" = Microsoft Office OSM MUI (French) 2013
"{90150000-00E2-040C-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (French) 2013
"{90150000-012B-040C-1000-0000000FF1CE}" = Microsoft Lync MUI (French) 2013
"{90F60409-7000-11D3-8CFE-0150048383C9}" = Microsoft Visual Basic for Applications 7.1 (x64) English
"{90F6040C-7000-11D3-8CFE-0150048383C9}" = Microsoft Visual Basic for Applications 7.1 (x64) French
"{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{9782A612-03A7-488F-A598-33558163D8F8}" = CorelDRAW Graphics Suite X8 - Connect (x64)
"{9AD6DCBE-15AB-9B73-5BD2-FD137073BF4F}" = AMD Install Manager
"{A040C72A-0ADC-4FB9-9DB4-19B18F6053F1}" = CorelDRAW Graphics Suite X8 - IPM (x64)
"{A0845CAD-ED13-46A4-A050-5ACE4631FDEC}" = CorelDRAW Graphics Suite X8 - EN (x64)
"{A1C31BA5-5438-3A07-9EEE-A5FB2D0FDE36}" = Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.23506
"{A66E09BB-9892-421D-9EB9-311D12AA5244}" = CorelDRAW Graphics Suite X8 - Draw (x64)
"{A67AEE14-0435-4B8C-A367-F5EDE6CAF9F6}" = CorelDRAW Graphics Suite X8 - CZ (x64)
"{A7922CC8-0EBD-497B-B381-5B3992905327}" = CorelDRAW Graphics Suite X8 - NL (x64)
"{ABB19BB4-838D-3082-BDA4-87C6604181A2}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40649
"{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Antivirus+
"{ACC8C1B0-E560-4B42-AA52-9CAD14883B29}" = CorelDRAW Graphics Suite X8 -TR (x64)
"{B0B194F8-E0CE-33FE-AA11-636428A4B73D}" = Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.23506
"{B1452C41-DC90-4B58-8320-ABB515E87FFB}" = CorelDRAW Graphics Suite X8 - ES (x64)
"{B83D220A-33AB-4AF5-963A-887BD971270E}" = CorelDRAW Graphics Suite X8 - RU (x64)
"{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}" = Corel Update Manager
"{C8730B1A-133D-4546-8E21-9EC186341F20}" = Corel Graphics - Windows Shell Extension 32 Bit Keys
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}" = HP Touchpoint Analytics Client
"{ECFAF1D6-342D-4AE2-B6BF-82B22F9FE8DE}" = CorelDRAW Graphics Suite X8
"{F5A1D3E4-416E-4723-AD35-86A372B99174}" = CorelDRAW Graphics Suite X8 - JP (x64)
"{F819C151-FFEE-4F01-BE68-0D1F76574F44}" = HP AC Power Control
"{FB081BA0-08D2-4C8C-9E55-788A90430BE3}" = CorelDRAW Graphics Suite X8 - IPM Content (x64)
"{FBD345DC-093A-4D89-A9B8-10C1BA356048}" = TortoiseSVN 1.9.7.27907 (64 bit)
"AMD Catalyst Install Manager" = AMD Install Manager
"Canon LBP3010/LBP3018/LBP3050" = Canon LBP3010/LBP3018/LBP3050
"CPUID HWMonitorPro_is1" = CPUID HWMonitor Pro 1.29
"D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2" = Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1)
"EaseUS Data Recovery Wizard_is1" = EaseUS Data Recovery Wizard
"F9D2A789F9CFF8CEC36B544F53877C80F1F73C46" = Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201)
"Firefox Developer Edition 62.0 (x64 en-US)" = Firefox Developer Edition 62.0 (x64 en-US)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA" = Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA
"Mozilla Firefox 59.0 (x64 en-US)" = Mozilla Firefox 59.0 (x64 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Office15.PROPLUS" = Microsoft Office Professionnel Plus 2013
"SynTPDeinstKey" = Synaptics Pointing Device Driver
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}" = Ghostscript GPL 8.64 (Msi Setup)
"{010D45A1-093D-4534-8147-4E10E80F81CC}_is1" = Who Is On My Wifi version 4.0.1
"{037F0FF4-E80E-48DB-389B-A7890E45E18E}" = CCC Help German
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{05F81C27-62A5-4A0C-8519-60CB66CF87C6}" = HP Support Assistant
"{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}" = Ghostscript GPL 8.64 (Msi Setup)
"{0EB8D099-E537-E3D3-039A-CBC50899C25B}" = CCC Help Chinese Standard
"{10047D9D-3EC2-F25F-AEE5-250AB94D96A6}" = CCC Help Portuguese
"{183B354B-11F5-A109-A77A-CAECC420E0C9}" = Catalyst Control Center Localization All
"{1B38B23D-449A-AD28-6F4F-E8796FFB8DF9}" = CCC Help Japanese
"{20D2A362-23EB-3BDB-BAD3-F4510B2B32A5}" = Microsoft Visual Studio Tools for Applications 2015 Finalizer
"{25A60C59-0FDC-4D73-81F4-D4A6D4E0CB92}" = Adobe AIR
"{29A389C5-0345-C38A-2ADE-7EB39281B46B}" = CCC Help Finnish
"{2DD25842-EE28-844F-0769-A0C55F9137D3}" = CCC Help Korean
"{3225B377-6E8E-78F1-4CD9-7C90F503BCFE}" = CCC Help Czech
"{39D18BB4-D8F9-5940-6A7B-DA74A3BCA57C}" = CCC Help Chinese Traditional
"{3e534d41-dcc4-4f51-9858-70dd42beb3d5}" = Garmin Express
"{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}" = Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506
"{408D0747-D910-6303-11B3-331A43D792F9}" = CCC Help Greek
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{53F7486D-41B5-4117-8914-A85B0DBDDC07}" = Sound Organizer
"{5490AEC3-909E-8B5C-E51E-A1BB5385D9DA}" = CCC Help Italian
"{5A216534-EFDA-0AAA-E716-DA6771244656}" = CCC Help Polish
"{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader
"{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649
"{5E980195-F909-70F7-6269-4169FDB31886}" = CCC Help Thai
"{5EBEDD03-4E31-C4AF-D54F-26C3454E6596}" = CCC Help Spanish
"{5F618047-4637-C9DB-384D-1D97937918E6}" = AMD Catalyst Control Center
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6C772996-BFF3-3C8C-860B-B3D48FF05D65}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
"{6E257EB0-5EFF-416D-82D4-592924566BB4}" = Elevated Installer
"{6e8f74e0-43bd-4dce-8477-6ff6828acc07}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
"{706DDDCA-FC25-26D8-8E2C-DCC5E95351CD}" = CCC Help Norwegian
"{78237D85-8F06-3755-21AF-9F46F0BBC19F}" = Catalyst Control Center Graphics Previews Common
"{78DA9894-13E4-4858-9A4A-4F7A523203BA}" = Jar2Exe Wizard
"{7f51bdb9-ee21-49ee-94d6-90afc321780e}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
"{84DD3A17-A979-39BC-8816-8226CB7DF8A7}" = Microsoft Visual Studio Tools for Applications 2015 x86 Hosting Support
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{884CF059-9A11-4DF7-A2A7-17EFE90B9278}" = Graphviz
"{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
"{90C443D7-A615-D053-A662-020A8F1C0B03}" = CCC Help English
"{96ACB628-825A-29A2-2ADC-BF7D7E211C59}" = CCC Help Dutch
"{9720A595-3D2D-440E-9523-0B6F970745DD}" = HP Customer Experience Enhancements
"{9866E5F0-121F-E018-E2D1-2E1770847ABF}" = Adobe Download Assistant
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D4757D6-6C0D-B98D-CCA5-BB00D0E91872}" = CCC Help Russian
"{9F79033A-84FC-4137-BCDC-C505246F78E1}" = HP Support Solutions Framework
"{AC76BA86-1033-FFFF-7760-000000000006}" = Adobe Acrobat XI Pro
"{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}" = OEM Application Profile
"{C019EF7D-A6D6-65EE-76BD-C73E6E0F3EC6}" = CCC Help Swedish
"{CAE3D1CA-7211-E7E3-F045-414ACFA5222E}" = CCC Help Danish
"{D21B4A41-3327-4CA5-A218-C751706DFF27}" = EPubsoft ToolBox 9.5.5
"{D2437C5C-2D8C-40D2-8059-689AD7239FA3}" = Intel(R) C++ Redistributables for Windows* on Intel(R) 64
"{D3C49D06-7FA6-CE04-A17A-2074E314DBB6}" = Catalyst Control Center - Branding
"{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1" = aTube Catcher version 3.8
"{dd8b09df-3ef8-49f1-bd1a-65278435860b}" = Microsoft Visual Studio Tools for Applications 2015
"{E1C18A5C-63D7-4DC5-977F-5B4BAB4169D9}" = Garmin Express
"{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
"{E8758B5B-DAD2-3CF2-234A-D560B8EED49E}" = CCC Help Turkish
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3B6E13B-8949-D194-D2F3-628B16EFAB14}" = CCC Help Hungarian
"{FE7A3EC9-93A9-1B25-0A9C-A0E460A6CFD1}" = CCC Help French
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"5517-2803-0637-4585" = SoapUI 5.3.0 5.3.0
"Adobe AIR" = Adobe AIR
"Advanced SystemCare_is1" = Advanced SystemCare 10
"Amazon Kindle" = Amazon Kindle
"Battery Status" = Battery Status
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"Dev-C++" = Dev-C++
"ExamDiff_is1" = ExamDiff 1.9 (Build 1.9.0.2)
"FileZilla Client" = FileZilla Client 3.25.1
"Google Chrome" = Google Chrome
"ISO/TS 14048 data editor_is1" = ISO/TS 14048 data editor version 1.1b
"Maestro_is1" = Maestro 2004.01 (Public)
"Mozilla Firefox 56.0 (x86 fr)" = Mozilla Firefox 56.0 (x86 fr)
"MusicBrainz Picard" = MusicBrainz Picard
"Notepad++" = Notepad++ (32-bit x86)
"Spider_is1" = Spider Version 1.1b
"SumatraPDF" = SumatraPDF
"Tunatic" = Tunatic
"WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.49-2
"WinMerge_is1" = WinMerge 2.14.0
"WinRAR archiver" = WinRAR 5.40 (32-bit)
"Wireshark" = Wireshark 2.2.6 (64-bit)
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Fiddler2" = Progress Telerik Fiddler
"SourceTree" = SourceTree
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 2018-06-24 09:02:04 | Computer Name = adier | Source = SetupARService | ID = 0
Description = Le service ne peut pas être démarré. System.NullReferenceException:
 La référence d'objet n'est pas définie à une instance d'un objet.     à SetupAfterRebootService.SetupARService.OnStart(String[]
 args)     à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 
Error - 2018-06-24 09:26:02 | Computer Name = adier | Source = Application Hang | ID = 1002
Description = Le programme OTL.exe version 3.2.69.0 a cessé d'interagir avec Windows
 et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles,
 consultez l'historique du problème dans le panneau de configuration Sécurité et
 maintenance.    ID de processus : b20    Heure de début : 01d40bbea0acaa78    Heure de fin :
 4294967295    Chemin d'accès de l'application : C:\Users\adier\Downloads\OTL.exe    ID 
de rapport : ae6ab375-a11c-4881-bf36-837013887dc8    Nom complet du package défaillant :
 ?    ID de l'application relative au package défaillant : ?  
 
Error - 2018-06-24 09:40:55 | Computer Name = adier | Source = Application Hang | ID = 1002
Description = Le programme eclipse.exe version 0.0.0.0 a cessé d'interagir avec 
Windows et a été fermé. Pour déterminer si des informations supplémentaires sont
 disponibles, consultez l'historique du problème dans le panneau de configuration
 Sécurité et maintenance.    ID de processus : 9c0    Heure de début : 01d40bc0ca4af978    Heure
 de fin : 12    Chemin d'accès de l'application : C:\eclipse\eclipse.exe    ID de rapport
 : ce7d3a29-7902-4b80-a25b-1013997cc0ac    Nom complet du package défaillant : ?    ID de
 l'application relative au package défaillant : ?  
 
Error - 2018-06-24 10:06:53 | Computer Name = adier | Source = ATIeRecord | ID = 16396
Description = ATI EEU PnP start/stop failed
 
Error - 2018-06-24 10:08:09 | Computer Name = adier | Source = ATIeRecord | ID = 16396
Description = ATI EEU PnP start/stop failed
 
Error - 2018-06-24 10:08:10 | Computer Name = adier | Source = SetupARService | ID = 0
Description = Le service ne peut pas être démarré. System.NullReferenceException:
 La référence d'objet n'est pas définie à une instance d'un objet.     à SetupAfterRebootService.SetupARService.OnStart(String[]
 args)     à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 
Error - 2018-06-24 10:30:14 | Computer Name = adier | Source = Microsoft-Windows-SpellChecker | ID = 33
Description = 
 
Error - 2018-06-24 10:39:12 | Computer Name = adier | Source = ATIeRecord | ID = 16396
Description = ATI EEU PnP start/stop failed
 
Error - 2018-06-24 10:40:38 | Computer Name = adier | Source = ATIeRecord | ID = 16396
Description = ATI EEU PnP start/stop failed
 
Error - 2018-06-24 10:40:41 | Computer Name = adier | Source = SetupARService | ID = 0
Description = Le service ne peut pas être démarré. System.NullReferenceException:
 La référence d'objet n'est pas définie à une instance d'un objet.     à SetupAfterRebootService.SetupARService.OnStart(String[]
 args)     à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
 
[ System Events ]
Error - 2018-06-24 10:11:15 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
Error - 2018-06-24 10:11:15 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
Error - 2018-06-24 10:11:15 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
Error - 2018-06-24 10:12:02 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
Error - 2018-06-24 10:34:38 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
Error - 2018-06-24 10:40:37 | Computer Name = adier | Source = Microsoft-Windows-Directory-Services-SAM | ID = 16953
Description = Échec du chargement de la DLL de notification du mot de passe C:\Program
 Files\TrueKey\McAfeeTrueKeyPasswordFilter avec l’erreur 126. Vérifiez que le chemin
 d’accès de la DLL de notification défini dans le Registre, HKLM\System\CurrentControlSet\Control\Lsa\Notification
 Packages, fait référence à un chemin d’accès correct et absolu (<lecteur>:\<chemin_d’accès>\<nom_fichier>.<ext>)
 et non à un chemin d’accès relatif ou non valide. Si le chemin d’accès de la DLL
 est correct, vérifiez que tous les fichiers de prise en charge se trouvent dans
 le même répertoire et que le compte système dispose d’un accès en lecture au chemin
 d’accès de la DLL et aux fichiers de prise en charge. Contactez le fournisseur 
de la DLL de notification pour une assistance supplémentaire. D’autres détails sont
 disponibles sur le Web à l’adresse http://go.microsoft.com/fwlink/?LinkId=245898.
 
Error - 2018-06-24 10:42:34 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
Error - 2018-06-24 10:46:48 | Computer Name = adier | Source = Service Control Manager | ID = 7022
Description = Le service Update Orchestrator Service est en attente de démarrage.
 
Error - 2018-06-24 10:47:08 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
Error - 2018-06-24 10:48:00 | Computer Name = adier | Source = DCOM | ID = 10016
Description = 
 
 
< End of report >
 

 

the contents of checkup.txt 

======================

 

Results of screen317's Security Check version 1.014 --- 12/23/15  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender         
Trend Micro Antivirus+   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java version 32-bit out of Date! 
 Mozilla Firefox (56.0) 
 Google Chrome (67.0.3396.87) 
 Google Chrome (SetupMetrics...) 
````````Process Check: objlist.exe by Laurent````````  
 Windows Defender MSASCuiL.exe   
 Trend Micro AMSP coreServiceShell.exe  
 Trend Micro Titanium plugin Pt\PtSvcHost.exe 
 Trend Micro UniClient UiFrmWrk uiWatchDog.exe 
 Trend Micro AMSP coreFrameworkHost.exe  
 Trend Micro Titanium plugin Pt\PtWatchDog.exe 
 Trend Micro AMSP module 10011\8.0.1061\8.0.1061\TmsaInstance64.exe 
 Trend Micro Titanium plugin Pt\PtSessionAgent.exe 
 Trend Micro UniClient UiFrmWrk uiSeAgnt.exe 
 Trend Micro Titanium UIFramework uiWinMgr.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log`````````````````````` 
 

 

Hijackthis.log

===========

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:14:56, on 2018-06-24
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal

Running processes:
C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2RPK.EXE
C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAB8SWK.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\WINDOWS\SysWOW64\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O2 - BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - .DEFAULT User Startup: SynRemoveUserSettings.bat (User 'Default user')
O4 - Global Startup: Who Is On My Wifi.lnk = C:\Program Files (x86)\IO3O LLC\Who Is On My Wifi\mywifi.exe
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Cliquer pour appeler Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Cliquer pour appeler Lync - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll
O18 - Protocol: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Genuine Software Integrity Service (AGSService) - Adobe Systems, Incorporated - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service: @%SystemRoot%\system32\AJRouter.dll,-2 (AJRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\AppReadiness.dll,-1000 (AppReadiness) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\appxdeploymentserver.dll,-1 (AppXSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AudioEndpointBuilder.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\BcastDVRUserService.dll,-100 (BcastDVRUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service utilisateur de diffusion et GameDVR_5a7b6 (BcastDVRUserService_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101 (BluetoothUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service de support des utilisateurs du Bluetooth_5a7b6 (BluetoothUserService_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%windir%\system32\bisrv.dll,-100 (BrokerInfrastructure) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\BTAGService.dll,-101 (BTAGService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\BthAvctpSvc.dll,-101 (BthAvctpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\CapabilityAccessManager.dll,-1 (camsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cdpsvc.dll,-100 (CDPSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cdpusersvc.dll,-100 (CDPUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service pour utilisateur de plateforme d’appareils connectés_5a7b6 (CDPUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ClipSVC.dll,-103 (ClipSVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\coremessaging.dll,-1 (CoreMessagingRegistrar) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @combase.dll,-5012 (DcomLaunch) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\das.dll,-100 (DeviceAssociationService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (DeviceInstall) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006 (DevicePickerUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: DevicePicker_5a7b6 (DevicePickerUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DevicesFlowBroker.dll,-103 (DevicesFlowUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Flux d’appareils_5a7b6 (DevicesFlowUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DevQueryBroker.dll,-100 (DevQueryBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%systemroot%\system32\DiagSvc.dll,-100 (diagsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\diagtrack.dll,-3001 (DiagTrack) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\Windows.Internal.Management.dll,-100 (DmEnrollmentSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dmwappushsvc.dll,-200 (dmwappushservice) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dosvc.dll,-100 (DoSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DeviceSetupManager.dll,-1000 (DsmSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dssvc.dll,-10003 (DsSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dusmsvc.dll,-1 (DusmSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (Eaphost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\embeddedmodesvc.dll,-201 (embeddedmode) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @EnterpriseAppMgmtSvc.dll,-1 (EntAppSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (EventLog) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fhsvc.dll,-101 (fhsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FrameServer.dll,-100 (FrameServer) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Garmin Device Interaction Service - Garmin Ltd. or its subsidiaries - C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\GraphicsPerfSvc.dll,-100 (GraphicsPerfSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: HP CASL Framework Service (hpqcaslwmiex) - HP - C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HP Touchpoint Analytics (HPTouchpointAnalyticsService) - HP Inc. - C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
O23 - Service: @%SystemRoot%\system32\hvhostsvc.dll,-100 (HvHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\tetheringservice.dll,-4097 (icssvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\InstallService.dll,-200 (InstallService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\ipxlatcfg.dll,-500 (IpxlatCfgSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\irmon.dll,-2000 (irmon) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\lfsvc.dll,-1 (lfsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\licensemanagersvc.dll,-200 (LicenseManager) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%windir%\system32\lsm.dll,-1001 (LSM) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\LanguageOverlayServer.dll,-100 (LxpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\moshost.dll,-100 (MapsBroker) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\MessagingService.dll,-100 (MessagingService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: MessagingService_5a7b6 - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (mpssvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\WINDOWS\system32\msiexec.exe
O23 - Service: @%systemroot%\system32\NaturalAuth.dll,-100 (NaturalAuthentication) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ncasvc.dll,-3009 (NcaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ncbservice.dll,-500 (NcbService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\NcdAutoSetup.dll,-100 (NcdAutoSetup) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofmsvc.dll,-202 (netprofm) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\NetSetupSvc.dll,-3 (NetSetupSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\NgcCtnrSvc.dll,-1 (NgcCtnrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\APHostRes.dll,-10002 (OneSyncSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Hôte de synchronisation_5a7b6 (OneSyncSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: PACSPTISVR-Sound_Organizer - Sony Corporation - C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\WINDOWS\SysWow64\perfhost.exe
O23 - Service: @%SystemRoot%\system32\PhoneserviceRes.dll,-10000 (PhoneSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-15001 (PimIndexMaintenanceSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Données de contacts_5a7b6 (PimIndexMaintenanceSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Platinum Host Service - Trend Micro Inc. - C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-200 (PlugPlay) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-1 (PrintNotify) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\PrintWorkflowService.dll,-100 (PrintWorkflowUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: PrintWorkflow_5a7b6 (PrintWorkflowUserSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Corel License Validation Service V2, Powered by arvato (PSI_SVC_2) - arvato digital services llc - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @%SystemRoot%\system32\pushtoinstall.dll,-200 (PushToInstall) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\RDXService.dll,-256 (RetailDemo) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\RMapi.dll,-1001 (RmSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @combase.dll,-5010 (RpcSs) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ScDeviceEnum.dll,-100 (ScDeviceEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SEMgrSvc.dll,-1001 (SEMgrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\sensorservice.dll,-1000 (SensorService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: SetupARService - Unknown owner - C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SharedRealitySvc.dll,-100 (SharedRealitySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\smphost.dll,-102 (smphost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SmsRouterSvc.dll,-10001 (SmsRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
O23 - Service: @%SystemRoot%\system32\windows.staterepository.dll,-1 (StateRepository) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\svsvc.dll,-101 (svsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%windir%\system32\SystemEventsBrokerServer.dll,-1001 (SystemEventsBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%windir%\system32\TimeBrokerServer.dll,-1001 (TimeBrokerSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\tokenbroker.dll,-100 (TokenBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\WINDOWS\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\tzautoupdate.dll,-200 (tzautoupdate) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-10003 (UnistoreSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Stockage des données utilisateur_5a7b6 (UnistoreSvc_5a7b6) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-14001 (UserDataSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Accès aux données utilisateur_5a7b6 (UserDataSvc_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\usermgr.dll,-100 (UserManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\usocore.dll,-101 (UsoSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vac.dll,-200 (VacSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VisualSVN Server (VisualSVNServer) - Apache Software Foundation - C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-801 (vmicguestinterface) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-101 (vmicheartbeat) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-201 (vmickvpexchange) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvcext.dll,-601 (vmicrdv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-301 (vmicshutdown) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-401 (vmictimesync) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-901 (vmicvmsession) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvcext.dll,-501 (vmicvss) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: VisualSVN Repository Configurator Service (vrepocfgsvc) - VisualSVN Software Ltd. - C:\Program Files\VisualSVN Server\bin\vrepocfgsvc.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: VisualSVN Background Job Service (vsvnjobsvc) - VisualSVN Software Ltd. - C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @WaaSMedicSvc.dll,-100 (WaaSMedicSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\WalletService.dll,-1000 (WalletService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\Windows.WARP.JITService.dll,-100 (WarpJITSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wcmsvc.dll,-4097 (Wcmsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wephostsvc.dll,-100 (WEPHOSTSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wfdsconmgrsvc.dll,-9000 (WFDSConMgrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiarpc.dll,-2 (WiaRpc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\flightsettings.dll,-103 (wisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (WlanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wlidsvc.dll,-100 (wlidsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lpasvc.dll,-1000 (wlpasvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\workfolderssvc.dll,-102 (workfolderssvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\WpcRefreshTask.dll,-100 (WpcMonSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpnservice.dll,-1 (WpnService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WpnUserService.dll,-1 (WpnUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service utilisateur de notifications Push Windows_5a7b6 (WpnUserService_5a7b6) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\WINDOWS\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\XblAuthManager.dll,-100 (XblAuthManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\XblGameSave.dll,-100 (XblGameSave) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\xboxgipsvc.dll,-100 (XboxGipSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\XboxNetApiSvc.dll,-100 (XboxNetApiSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe

--
End of file - 38182 bytes
 

Link to post
Share on other sites

  • Staff

***This is an automated reply***

Hi,

Thanks for posting in the Malware Removal for Windows Help forum. Being infected is not fun and can be very frustrating to resolve, but don't worry because we have a team of experts here help you!!

Note: Please be patient. When the site is busy it can take up to 48 hours before a malware removal helper can assist you. If no one has replied to your new topic after 48 hours please contact an Administrator to let them know.

First, if you haven't done so, please run a Threat Scan with the latest version of Malwarebytes. This may resolve your malware infection issue without the need for additional support. Click "Reveal Hidden Contents" below for details:

Spoiler

Malwarebytes can detect and remove most malware with no further actions required for free.

If you do not have Malwarebytes, please download it here and install. Be sure to post back the log as shown below.

  1. Open Malwarebytes for Windows
  2. To the left, click Scan > Scan Types.

    auto-reply-scan-types2.jpg.86e24e955a95d
     
  3. Select Threat Scan. Threat Scan is the most thorough and recommended scan method available.

    auto-reply-scan-types1.jpg.f4eee0e0c9375
     
  4. Click Start Scan
     

Next, if you're still experiencing issues after running Malwarebytes, then technical logs will be required to assist you. Click "Reveal Hidden Contents" below and follow the instructions to run the Farbar Recovery Scan Tool:

Spoiler

Don't use any temporary file cleaners unless requested - this can cause data loss and make a recovery difficult.

Please download the Farbar Recovery Scan Tool here and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

  1. Double-click to run it. When the tool opens click Yes to the disclaimer.
  2. Press the Scan button.

    _frst_scan.jpg.d79beccbb6e66628e557f6c28
     
  3. It will make a log (FRST.txt) in the same directory the tool is run. Please attach or copy and paste it to your reply.
  4. The first time the tool is run, it also makes another log (Addition.txt). If you've run it before it may not and you may need to select it manually.
     

Finally, attach the Malwarebytes Threat Scan, FRST.txt and Additional.txt logs to your reply. Before submitting your reply, be sure to enable "Notify me of replies" like so:   notify me.jpeg
 

Click "Reveal Hidden Contents" below for details on how to add attachments to your post.
Note: If you are unable to attach files, please copy and past the contents of the requested files in your Reply instead. 

Spoiler

To save attachments, please click the link as shown below. You can click and drag the files to this bar or you can click the choose files, then browse to where your files are located, select them and click the Open button.

mb_attach.jpg.220985d559e943927cbe3c078b
 

Please Note the Following:

  • One of our expert helpers will give you one-on-one assistance when one becomes available.
  • Refrain from making any further changes to your computer (such as Install/Uninstall programs, using special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  • Do not 'bump' or add a reply to your topic once it is started. Topics which appear to have replies are considered to have a helper assisting them and may be overlooked, resulting in a longer waiting period for help
  • If you're using Peer 2 Peer software such as uTorrent or similar, please completely disable it from running while being assisted here.

Troubleshooting Tips

 

 

Link to post
Share on other sites

Hello adier and welcome to Malwarebytes,

Continue with the following:

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"
    user posted image
     
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.


Let me see those logs in your reply...

Thank you,

Kevin....
Link to post
Share on other sites

Thank you very much kevinf80 for your replay

 

here I paste the required  log files 

FRST.txt

=======

Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Exécuté par adier (administrateur) sur CHLAHBI (24-06-2018 17:04:48)
Exécuté depuis C:\Users\adier\Downloads
Profils chargés: adier (Profils disponibles: adier & postgres)
Platform: Windows 10 Home Version 1803 17134.112 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Apache Software Foundation) C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
(Apache Software Foundation) C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\module\10011\8.0.1061\8.0.1061\TmsaInstance64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2LAK.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAB8SWK.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.9328.1700.0_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe
(VisualSVN Software Ltd.) C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(OldTimer Tools) C:\Users\adier\Downloads\OTL.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Simon Tatham) C:\Users\adier\Desktop\putty.exe
() C:\Users\adier\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe
(Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe
(Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe
(Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe
(Mozilla Corporation) C:\Program Files\Firefox Developer Edition\firefox.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Alexander Roshal) C:\Program Files (x86)\WinRAR\WinRAR.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8505088 2015-07-03] (Realtek Semiconductor)
HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [245872 2017-07-23] (Trend Micro Inc.)
HKLM\...\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1242568 2017-07-23] (Trend Micro Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-07-06] (Advanced Micro Devices, Inc.)
HKLM\...\Policies\Explorer: [ForceActiveDesktopOn] 0 [0 2018-01-03] ()
HKLM\...\Policies\Explorer: [NoRecentDocsHistory] 0 [0 2018-01-03] ()
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Corporation)
HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Who Is On My Wifi.lnk [2017-03-04]
ShortcutTarget: Who Is On My Wifi.lnk -> C:\Program Files (x86)\IO3O LLC\Who Is On My Wifi\mywifi.exe (IO3O LLC)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SynRemoveUserSettings.bat [2016-12-26] ()
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SynRemoveUserSettings.bat [2016-12-26] ()
Startup: C:\Users\postgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SynRemoveUserSettings.bat [2016-12-26] ()

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{0929f544-b324-4f88-ac20-f3a917509a0e}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-02-15] (Microsoft Corporation)
BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-02] (Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems Incorporated)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-02] (Oracle Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-04-07] (HP Inc.)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-09-12] (Microsoft Corporation)
BHO-x32: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems Incorporated)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-04-07] (HP Inc.)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-07-26] (Adobe Systems Incorporated)
Toolbar: HKLM - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-07-27] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Trend Micro Security Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.)
Toolbar: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002 -> Pas de nom - {093F479D-712E-46CD-9E06-62E734A05F68} -  Pas de fichier
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2017-07-23] (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll [2017-07-23] (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2017-07-23] (Trend Micro Inc.)

FireFox:
========
FF DefaultProfile: 50nzwkok.default-1518211647119
FF ProfilePath: C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default [2018-06-24]
FF Extension: (Laboratory) - C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\Extensions\1b2383b324c8520974ee097e46301d5ca4e076de387c02886f1c6b1503671586@pokeinthe.io.xpi [2018-02-07]
FF Extension: (ADB Helper) - C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\t5ddyaf5.dev-edition-default\Extensions\adbhelper@mozilla.org.xpi [2018-02-23] [Legacy]
FF ProfilePath: C:\Users\adier\AppData\Roaming\Mozilla\Firefox\Profiles\50nzwkok.default-1518211647119 [2018-05-04]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01]
FF HKLM\...\Firefox\Extensions: [fftmtoolbar@trendmicro.com] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: (Trend Micro Toolbar) - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2018-06-24]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF HKLM-x32\...\Firefox\Extensions: [fftmtoolbar@trendmicro.com] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-02] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems)
StartMenuInternet: Firefox-CA9422711AE1A81C - C:\Program Files\Firefox Developer Edition\firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default [2018-06-24]
CHR Extension: (Docs) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-19]
CHR Extension: (Google Drive) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-03]
CHR Extension: (YouTube) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-07]
CHR Extension: (AngularJS Inspector) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjhmfjbfdbeeekiijofbikifokdkfhcc [2017-10-14]
CHR Extension: (AngularJS Batarang) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ighdmehidhipcmcojjgiloacoafjmpfk [2017-10-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-20]
CHR Extension: (Trend Micro Toolbar) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf [2018-06-24]
CHR Extension: (Gmail) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-03]
CHR Extension: (Chrome Media Router) - C:\Users\adier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-18]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ohhcpmplhhiiaoiddkfboafbhiknefdf] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021056 2016-03-03] (Adobe Systems, Incorporated)
R2 Amsp; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [374968 2017-07-19] (Trend Micro Inc.)
R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1194512 2018-06-06] (Garmin Ltd. or its subsidiaries)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332656 2018-05-02] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.)
S3 PACSPTISVR-Sound_Organizer; C:\Program Files (x86)\Sony\Sound Organizer\Sony.Earth\PACSPTISVR.exe [174176 2012-11-08] (Sony Corporation)
R2 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [1129928 2017-07-23] (Trend Micro Inc.)
R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-07-03] (Realtek Semiconductor)
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2018-01-07] () [Fichier non signé]
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269912 2017-08-24] (Synaptics Incorporated)
S4 vdfssvc; C:\Program Files\VisualSVN Server\bin\vdfssvc.exe [104008 2017-07-20] (VisualSVN Software Ltd.)
R2 VisualSVNServer; C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe [29256 2017-07-20] (Apache Software Foundation)
S3 vrepocfgsvc; C:\Program Files\VisualSVN Server\bin\vrepocfgsvc.exe [198728 2017-07-20] (VisualSVN Software Ltd.)
R2 vsvnjobsvc; C:\Program Files\VisualSVN Server\bin\vsvnjobsvc.exe [374856 2017-07-20] (VisualSVN Software Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\NisSrv.exe [4682552 2018-06-02] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.16.17656.18052-0\MsMpEng.exe [101096 2018-06-02] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 Accelerometer; C:\WINDOWS\System32\drivers\Accelerometer.sys [53760 2017-12-18] (HP)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110104 2016-09-29] (Advanced Micro Devices)
S3 DSI_SiUSBXp_3_1; C:\WINDOWS\system32\drivers\DSI_SiUSBXp_3_1.sys [16384 2007-09-06] (Silicon Laboratories)
R0 hpdskflt; C:\WINDOWS\System32\drivers\hpdskflt.sys [39936 2017-12-18] (HP)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-08-01] (REALiX(tm))
R3 netr28x; C:\WINDOWS\System32\drivers\netr28x.sys [2537984 2018-04-12] (MediaTek Inc.)
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2014-08-08] (The OpenVPN Project)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2017-03-03] (Corel Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.)
R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [1219200 2015-06-03] (Ralink Technology, Corp.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 tmactmon; C:\WINDOWS\system32\DRIVERS\tmactmon.sys [145016 2018-04-10] (Trend Micro Inc.)
R0 tmcomm; C:\WINDOWS\System32\DRIVERS\tmcomm.sys [454264 2018-04-10] (Trend Micro Inc.)
R0 TMEBC; C:\WINDOWS\System32\DRIVERS\TMEBC64.sys [72504 2016-01-05] (Trend Micro Inc.)
R3 tmeevw; C:\WINDOWS\system32\DRIVERS\tmeevw.sys [147672 2017-05-10] (Trend Micro Inc.)
S0 tmel; C:\WINDOWS\System32\DRIVERS\tmel.sys [39056 2015-06-23] (Trend Micro Inc.)
R1 tmevtmgr; C:\WINDOWS\system32\DRIVERS\tmevtmgr.sys [141432 2018-04-10] (Trend Micro Inc.)
R3 tmnciesc; C:\WINDOWS\system32\DRIVERS\tmnciesc.sys [562296 2018-01-16] (Trend Micro Inc.)
R1 tmumh; C:\WINDOWS\system32\DRIVERS\TMUMH.sys [132512 2018-04-26] (Trend Micro Inc.)
R2 tmusa; C:\WINDOWS\system32\DRIVERS\tmusa.sys [134264 2018-01-22] (Trend Micro Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2018-06-02] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [313384 2018-06-02] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-06-02] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP)
U2 TMAgent; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-06-24 17:04 - 2018-06-24 17:05 - 000026329 _____ C:\Users\adier\Downloads\FRST.txt
2018-06-24 17:04 - 2018-06-24 17:04 - 000000000 ____D C:\FRST
2018-06-24 17:03 - 2018-06-24 17:04 - 002412544 _____ (Farbar) C:\Users\adier\Downloads\FRST64.exe
2018-06-24 16:25 - 2018-06-24 16:25 - 000408860 _____ C:\Users\adier\Downloads\OTL.Txt
2018-06-24 16:25 - 2018-06-24 16:25 - 000101816 _____ C:\Users\adier\Downloads\Extras.Txt
2018-06-24 16:23 - 2018-06-24 16:23 - 000000000 ____D C:\Users\adier\Desktop\HijackThis
2018-06-24 16:22 - 2018-06-24 16:22 - 000307075 _____ C:\Users\adier\Downloads\HijackThis.zip
2018-06-24 15:31 - 2018-06-24 15:31 - 000000000 ____D C:\Program Files\Common Files\TmSentry
2018-06-24 15:25 - 2018-06-24 15:25 - 000000000 ___HD C:\TMRescueDisk
2018-06-24 15:22 - 2018-06-24 15:22 - 000001373 _____ C:\Users\adier\Desktop\Trend Micro Antivirus+.lnk
2018-06-24 15:22 - 2018-06-24 15:22 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Antivirus+
2018-06-24 15:21 - 2018-06-24 15:21 - 000000000 ____D C:\WINDOWS\SysWOW64\tmumh
2018-06-24 15:21 - 2018-06-24 15:21 - 000000000 ____D C:\WINDOWS\system32\tmumh
2018-06-24 15:21 - 2018-04-26 21:50 - 000132512 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\TMUMH.sys
2018-06-24 15:21 - 2018-04-10 20:25 - 000141432 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmevtmgr.sys
2018-06-24 15:21 - 2018-04-10 20:24 - 000454264 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmcomm.sys
2018-06-24 15:21 - 2018-04-10 20:24 - 000145016 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmactmon.sys
2018-06-24 15:21 - 2018-01-22 10:03 - 000134264 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmusa.sys
2018-06-24 15:21 - 2018-01-16 17:18 - 000562296 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmnciesc.sys
2018-06-24 15:21 - 2017-05-10 08:46 - 000147672 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmeevw.sys
2018-06-24 15:21 - 2016-01-05 04:35 - 000072504 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\TMEBC64.sys
2018-06-24 15:21 - 2015-06-23 03:49 - 000039056 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmel.sys
2018-06-24 15:19 - 2018-06-24 15:19 - 000000059 _____ C:\WINDOWS\system32\SupportTool.exe.bat
2018-06-24 15:18 - 2018-06-24 15:18 - 000000000 ____D C:\Program Files\Trend Micro
2018-06-24 15:13 - 2018-06-24 15:19 - 134443808 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\Non confirmé 87144.crdownload
2018-06-24 15:01 - 2018-06-24 15:56 - 000000000 ____D C:\Users\adier\AppData\Local\Trend Micro
2018-06-24 14:48 - 2018-06-24 16:13 - 000000000 ____D C:\ProgramData\Trend Micro
2018-06-24 14:46 - 2018-06-24 14:46 - 000000036 _____ C:\Users\adier\AppData\Local\housecall.guid.cache
2018-06-24 14:43 - 2018-06-24 15:24 - 000000000 ____D C:\ProgramData\Trend Micro Installer
2018-06-24 14:36 - 2018-06-24 14:36 - 000000000 ____D C:\Users\adier\Desktop\TESTSECURITY
2018-06-24 14:27 - 2018-06-24 14:28 - 000852798 _____ C:\Users\adier\Downloads\SecurityCheck.exe
2018-06-24 14:23 - 2018-06-24 14:23 - 000602112 _____ (OldTimer Tools) C:\Users\adier\Downloads\OTL.exe
2018-06-24 14:18 - 2018-06-24 14:50 - 309704408 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\TrendMicro_12.0_HE_Full.exe
2018-06-24 14:18 - 2018-06-24 14:44 - 219520480 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\TrendMicro_12.0_EL_Full.exe
2018-06-24 14:18 - 2018-06-24 14:42 - 221472256 _____ (Trend Micro Inc.) C:\Users\adier\Downloads\TrendMicro_12.0_MR_Full.exe
2018-06-23 19:43 - 2018-06-23 19:43 - 000000000 ____D C:\ProgramData\Packages
2018-06-13 22:59 - 2018-06-13 22:59 - 000000000 ____D C:\WINDOWS\Minidump
2018-06-13 22:59 - 2018-06-13 22:59 - 000000000 _____ C:\WINDOWS\Minidump\061318-40718-01.dmp
2018-06-13 00:47 - 2018-06-13 00:47 - 000000000 ____D C:\WINDOWS\PCHEALTH
2018-06-13 00:41 - 2018-06-08 20:02 - 004527680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2018-06-13 00:41 - 2018-06-08 19:45 - 012712448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2018-06-13 00:41 - 2018-06-08 19:45 - 004392448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2018-06-13 00:41 - 2018-06-08 19:43 - 002922496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2018-06-13 00:41 - 2018-06-08 19:42 - 003653120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2018-06-13 00:41 - 2018-06-08 17:51 - 011903488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2018-06-13 00:41 - 2018-06-08 11:31 - 007900984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2018-06-13 00:41 - 2018-06-08 10:30 - 009148320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2018-06-13 00:41 - 2018-06-08 10:30 - 003296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2018-06-13 00:41 - 2018-06-08 10:30 - 001017080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2018-06-13 00:41 - 2018-06-08 10:29 - 007520000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2018-06-13 00:41 - 2018-06-08 10:29 - 006817384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2018-06-13 00:41 - 2018-06-08 10:29 - 002371392 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2018-06-13 00:41 - 2018-06-08 10:29 - 001611592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2018-06-13 00:41 - 2018-06-08 10:13 - 025846784 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2018-06-13 00:41 - 2018-06-08 10:12 - 000861616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-06-13 00:41 - 2018-06-08 10:10 - 002331584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-06-13 00:41 - 2018-06-08 10:09 - 006569960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-13 00:41 - 2018-06-08 10:09 - 004788512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2018-06-13 00:41 - 2018-06-08 10:09 - 001380200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2018-06-13 00:41 - 2018-06-08 10:04 - 004706816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2018-06-13 00:41 - 2018-06-08 10:03 - 022005760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2018-06-13 00:41 - 2018-06-08 10:02 - 022713856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2018-06-13 00:41 - 2018-06-08 10:00 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2018-06-13 00:41 - 2018-06-08 10:00 - 004372992 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2018-06-13 00:41 - 2018-06-08 09:59 - 004867072 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2018-06-13 00:41 - 2018-06-08 09:59 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2018-06-13 00:41 - 2018-06-08 09:58 - 007581696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2018-06-13 00:41 - 2018-06-08 09:56 - 005780992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2018-06-13 00:41 - 2018-06-08 09:56 - 002364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2018-06-13 00:41 - 2018-06-06 19:57 - 003733320 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2018-06-13 00:40 - 2018-06-08 20:07 - 000506184 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2018-06-13 00:40 - 2018-06-08 20:05 - 000094112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2018-06-13 00:40 - 2018-06-08 20:02 - 001634808 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2018-06-13 00:40 - 2018-06-08 20:02 - 000661160 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenValObj.exe
2018-06-13 00:40 - 2018-06-08 20:01 - 002395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2018-06-13 00:40 - 2018-06-08 20:01 - 001046944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2018-06-13 00:40 - 2018-06-08 19:48 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2018-06-13 00:40 - 2018-06-08 19:47 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2018-06-13 00:40 - 2018-06-08 19:46 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2018-06-13 00:40 - 2018-06-08 19:45 - 001560576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdt.exe
2018-06-13 00:40 - 2018-06-08 19:45 - 000808960 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2018-06-13 00:40 - 2018-06-08 19:44 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2018-06-13 00:40 - 2018-06-08 19:44 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2018-06-13 00:40 - 2018-06-08 19:44 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2018-06-13 00:40 - 2018-06-08 19:44 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2018-06-13 00:40 - 2018-06-08 19:43 - 003640832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2018-06-13 00:40 - 2018-06-08 19:43 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2018-06-13 00:40 - 2018-06-08 19:43 - 001659904 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2018-06-13 00:40 - 2018-06-08 19:43 - 001543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2018-06-13 00:40 - 2018-06-08 19:43 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2018-06-13 00:40 - 2018-06-08 19:43 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2018-06-13 00:40 - 2018-06-08 19:42 - 003999232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2018-06-13 00:40 - 2018-06-08 19:42 - 002084864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2018-06-13 00:40 - 2018-06-08 19:42 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2018-06-13 00:40 - 2018-06-08 19:42 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2018-06-13 00:40 - 2018-06-08 19:41 - 002019840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2018-06-13 00:40 - 2018-06-08 19:41 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2018-06-13 00:40 - 2018-06-08 19:41 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2018-06-13 00:40 - 2018-06-08 19:41 - 000758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2018-06-13 00:40 - 2018-06-08 19:41 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2018-06-13 00:40 - 2018-06-08 19:41 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2018-06-13 00:40 - 2018-06-08 19:40 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXP.dll
2018-06-13 00:40 - 2018-06-08 18:04 - 001454024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2018-06-13 00:40 - 2018-06-08 17:58 - 002206544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2018-06-13 00:40 - 2018-06-08 17:58 - 000917408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2018-06-13 00:40 - 2018-06-08 17:50 - 001508352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdt.exe
2018-06-13 00:40 - 2018-06-08 17:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2018-06-13 00:40 - 2018-06-08 17:48 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-06-13 00:40 - 2018-06-08 17:47 - 003492864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2018-06-13 00:40 - 2018-06-08 17:47 - 002895872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2018-06-13 00:40 - 2018-06-08 17:47 - 001462784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2018-06-13 00:40 - 2018-06-08 17:47 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2018-06-13 00:40 - 2018-06-08 17:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2018-06-13 00:40 - 2018-06-08 17:47 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2018-06-13 00:40 - 2018-06-08 17:46 - 003444224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2018-06-13 00:40 - 2018-06-08 17:46 - 002016256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2018-06-13 00:40 - 2018-06-08 17:46 - 000908288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2018-06-13 00:40 - 2018-06-08 17:45 - 002401280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2018-06-13 00:40 - 2018-06-08 17:06 - 000976384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2018-06-13 00:40 - 2018-06-08 17:05 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2018-06-13 00:40 - 2018-06-08 17:05 - 000944640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2018-06-13 00:40 - 2018-06-08 15:00 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2018-06-13 00:40 - 2018-06-08 15:00 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-06-13 00:40 - 2018-06-08 11:38 - 005821544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2018-06-13 00:40 - 2018-06-08 11:37 - 002417840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2018-06-13 00:40 - 2018-06-08 11:35 - 001613200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2018-06-13 00:40 - 2018-06-08 11:35 - 000613144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2018-06-13 00:40 - 2018-06-08 11:34 - 001299056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2018-06-13 00:40 - 2018-06-08 11:34 - 000748512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2018-06-13 00:40 - 2018-06-08 11:31 - 003180176 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2018-06-13 00:40 - 2018-06-08 11:31 - 000029600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uefi.sys
2018-06-13 00:40 - 2018-06-08 11:30 - 000705440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2018-06-13 00:40 - 2018-06-08 10:34 - 001140576 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2018-06-13 00:40 - 2018-06-08 10:34 - 000983016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2018-06-13 00:40 - 2018-06-08 10:33 - 001213368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2018-06-13 00:40 - 2018-06-08 10:33 - 001034632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2018-06-13 00:40 - 2018-06-08 10:33 - 000272296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2018-06-13 00:40 - 2018-06-08 10:33 - 000269224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2018-06-13 00:40 - 2018-06-08 10:31 - 001174432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2018-06-13 00:40 - 2018-06-08 10:31 - 001012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2018-06-13 00:40 - 2018-06-08 10:31 - 000226720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ucx01000.sys
2018-06-13 00:40 - 2018-06-08 10:30 - 001798552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2018-06-13 00:40 - 2018-06-08 10:30 - 001363632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2018-06-13 00:40 - 2018-06-08 10:30 - 001063328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2018-06-13 00:40 - 2018-06-08 10:30 - 000723360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2018-06-13 00:40 - 2018-06-08 10:30 - 000722808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2018-06-13 00:40 - 2018-06-08 10:30 - 000709824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2018-06-13 00:40 - 2018-06-08 10:30 - 000567184 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2018-06-13 00:40 - 2018-06-08 10:30 - 000565152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2018-06-13 00:40 - 2018-06-08 10:30 - 000527264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2018-06-13 00:40 - 2018-06-08 10:30 - 000491328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2018-06-13 00:40 - 2018-06-08 10:30 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2018-06-13 00:40 - 2018-06-08 10:30 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2018-06-13 00:40 - 2018-06-08 10:30 - 000137568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2018-06-13 00:40 - 2018-06-08 10:30 - 000134584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 004970360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 004403280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 003283408 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 002836384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 002753048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 002590400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2018-06-13 00:40 - 2018-06-08 10:29 - 002570712 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 002564984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 002546592 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 002462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 002422688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 001946328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001934400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001921952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 001792808 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001784584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001457136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2018-06-13 00:40 - 2018-06-08 10:29 - 001364184 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001288816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001258288 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2018-06-13 00:40 - 2018-06-08 10:29 - 001209800 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001190152 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001150416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001148808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001112608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001097648 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 001026976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 000945568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 000885880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000792992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 000678840 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000659096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000594128 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2018-06-13 00:40 - 2018-06-08 10:29 - 000416144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000413824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000413088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 000375712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 000313592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000266656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000164768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2018-06-13 00:40 - 2018-06-08 10:29 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageOverlayUtil.dll
2018-06-13 00:40 - 2018-06-08 10:29 - 000057960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel.appcore.dll
2018-06-13 00:40 - 2018-06-08 10:12 - 000786176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-06-13 00:40 - 2018-06-08 10:11 - 001461744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-06-13 00:40 - 2018-06-08 10:11 - 000550616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2018-06-13 00:40 - 2018-06-08 10:10 - 002479272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2018-06-13 00:40 - 2018-06-08 10:10 - 002307336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2018-06-13 00:40 - 2018-06-08 10:10 - 001988072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2018-06-13 00:40 - 2018-06-08 10:10 - 001397200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2018-06-13 00:40 - 2018-06-08 10:10 - 001011992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2018-06-13 00:40 - 2018-06-08 10:10 - 000880152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2018-06-13 00:40 - 2018-06-08 10:10 - 000457152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-06-13 00:40 - 2018-06-08 10:10 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 006527064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 004469832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 002535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 002486992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 002242216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001980872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001805776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001709720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001584128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001129648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001077504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 001020168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000988136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000770160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000607648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000568720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000567144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000553248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000356960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000064648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LanguageOverlayUtil.dll
2018-06-13 00:40 - 2018-06-08 10:09 - 000050208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel.appcore.dll
2018-06-13 00:40 - 2018-06-08 10:03 - 000906752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.PhoneNumberFormatting.dll
2018-06-13 00:40 - 2018-06-08 10:03 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2018-06-13 00:40 - 2018-06-08 10:03 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2018-06-13 00:40 - 2018-06-08 10:03 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2018-06-13 00:40 - 2018-06-08 10:02 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2018-06-13 00:40 - 2018-06-08 10:02 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2018-06-13 00:40 - 2018-06-08 10:02 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2018-06-13 00:40 - 2018-06-08 10:01 - 004563456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2018-06-13 00:40 - 2018-06-08 10:01 - 002961408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2018-06-13 00:40 - 2018-06-08 10:01 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2018-06-13 00:40 - 2018-06-08 10:01 - 000295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2018-06-13 00:40 - 2018-06-08 10:01 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2018-06-13 00:40 - 2018-06-08 10:01 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2018-06-13 00:40 - 2018-06-08 10:01 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2018-06-13 00:40 - 2018-06-08 10:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2018-06-13 00:40 - 2018-06-08 10:01 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2018-06-13 00:40 - 2018-06-08 10:00 - 003320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2018-06-13 00:40 - 2018-06-08 10:00 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2018-06-13 00:40 - 2018-06-08 10:00 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll
2018-06-13 00:40 - 2018-06-08 10:00 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2018-06-13 00:40 - 2018-06-08 10:00 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2018-06-13 00:40 - 2018-06-08 10:00 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2018-06-13 00:40 - 2018-06-08 10:00 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2018-06-13 00:40 - 2018-06-08 09:59 - 006032384 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2018-06-13 00:40 - 2018-06-08 09:59 - 001767936 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2018-06-13 00:40 - 2018-06-08 09:59 - 001318400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2018-06-13 00:40 - 2018-06-08 09:59 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2018-06-13 00:40 - 2018-06-08 09:59 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2018-06-13 00:40 - 2018-06-08 09:59 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2018-06-13 00:40 - 2018-06-08 09:59 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2018-06-13 00:40 - 2018-06-08 09:59 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2018-06-13 00:40 - 2018-06-08 09:59 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 003712512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 001676800 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 000781824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2018-06-13 00:40 - 2018-06-08 09:58 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2018-06-13 00:40 - 2018-06-08 09:58 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2018-06-13 00:40 - 2018-06-08 09:57 - 003348992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2018-06-13 00:40 - 2018-06-08 09:57 - 002172416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2018-06-13 00:40 - 2018-06-08 09:57 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2018-06-13 00:40 - 2018-06-08 09:57 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2018-06-13 00:40 - 2018-06-08 09:57 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2018-06-13 00:40 - 2018-06-08 09:57 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2018-06-13 00:40 - 2018-06-08 09:57 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2018-06-13 00:40 - 2018-06-08 09:57 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2018-06-13 00:40 - 2018-06-08 09:57 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 004336128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 003293696 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 002902016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 002900480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 001804288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 001550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2018-06-13 00:40 - 2018-06-08 09:56 - 000871424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000869376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000715776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 003441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 002248192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 002236928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2018-06-13 00:40 - 2018-06-08 09:55 - 002061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001371648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001242112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001192448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Maps.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001171968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 001033728 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2018-06-13 00:40 - 2018-06-08 09:55 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000667648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-06-13 00:40 - 2018-06-08 09:55 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 002789376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 001586176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 001128448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000999936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2018-06-13 00:40 - 2018-06-08 09:54 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2018-06-13 00:40 - 2018-06-08 09:54 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAC3ENC.DLL
2018-06-13 00:40 - 2018-06-08 09:53 - 001675264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2018-06-13 00:40 - 2018-06-08 09:53 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-06-13 00:40 - 2018-06-08 09:53 - 001108992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2018-06-13 00:40 - 2018-06-08 09:53 - 000873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2018-06-13 00:40 - 2018-06-08 09:53 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2018-06-13 00:40 - 2018-06-08 09:53 - 000669696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2018-06-13 00:40 - 2018-06-08 09:53 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-13 00:40 - 2018-06-08 09:53 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-06-13 00:40 - 2018-06-08 08:41 - 000001310 _____ C:\WINDOWS\system32\tcbres.wim
2018-06-13 00:40 - 2018-06-06 05:20 - 002841312 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-06-13 00:40 - 2018-06-02 00:24 - 000713376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll
2018-06-13 00:40 - 2018-06-01 23:54 - 001825792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2018-06-13 00:40 - 2018-05-25 04:24 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2018-06-12 02:07 - 2018-06-12 02:07 - 000001970 _____ C:\Users\Public\Desktop\Garmin Express.lnk
2018-06-12 02:07 - 2018-06-12 02:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2018-06-12 00:58 - 2018-06-12 00:58 - 000000094 _____ C:\Users\adier\Desktop\new 107.txt
2018-06-11 04:16 - 2018-06-11 04:16 - 000000171 _____ C:\Users\adier\Desktop\ToBeIncorported.txt
2018-06-11 00:09 - 2018-06-11 03:42 - 000000000 ____D C:\Users\adier\AppData\Local\PlaceholderTileLogoFolder
2018-06-10 22:37 - 2018-06-11 05:11 - 000000000 ____D C:\Users\adier\AppData\Local\D3DSCache
2018-06-10 18:41 - 2018-06-10 18:41 - 000001417 _____ C:\Users\adier\Desktop\Microsoft Edge.lnk
2018-06-10 18:38 - 2018-06-10 18:38 - 000000020 ___SH C:\Users\adier\ntuser.ini
2018-06-10 18:36 - 2018-06-24 16:52 - 000004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1D579E07-98CC-4A80-9EFF-AC1441AC3603}
2018-06-10 18:36 - 2018-06-24 15:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-06-10 18:36 - 2018-06-24 00:08 - 000003240 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForreida
2018-06-10 18:36 - 2018-06-12 02:07 - 000003626 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2018-06-10 18:36 - 2018-06-10 18:37 - 000003516 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-06-10 18:36 - 2018-06-10 18:37 - 000003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-06-10 18:36 - 2018-06-10 18:37 - 000003236 _____ C:\WINDOWS\System32\Tasks\DriverMaxWelcome
2018-06-10 18:36 - 2018-06-10 18:37 - 000003108 _____ C:\WINDOWS\System32\Tasks\KMSAutoNet
2018-06-10 18:36 - 2018-06-10 18:37 - 000002598 _____ C:\WINDOWS\System32\Tasks\CorelUpdateHelperTaskCore
2018-06-10 18:36 - 2018-06-10 18:37 - 000002278 _____ C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (adier)
2018-06-10 18:36 - 2018-06-10 18:36 - 000002914 _____ C:\WINDOWS\System32\Tasks\DriverMax Notification
2018-06-10 18:36 - 2018-06-10 18:36 - 000002886 _____ C:\WINDOWS\System32\Tasks\DriverMaxAgent
2018-06-10 18:36 - 2018-06-10 18:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2018-06-10 18:36 - 2018-06-10 18:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\Hewlett-Packard
2018-06-10 18:35 - 2018-06-10 18:36 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2018-06-10 18:35 - 2018-06-10 18:36 - 000011433 _____ C:\WINDOWS\diagerr.xml
2018-06-10 18:21 - 2018-06-24 15:47 - 001766594 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-10 18:13 - 2018-06-10 18:13 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2018-06-10 18:10 - 2018-06-24 13:55 - 000000000 ____D C:\Users\adier
2018-06-10 18:10 - 2018-06-10 18:20 - 000000000 ____D C:\Users\postgres
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Voisinage réseau
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Voisinage d'impression
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Modèles
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Mes documents
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Menu Démarrer
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Documents\Mes vidéos
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Documents\Mes images
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\Documents\Ma musique
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\adier\AppData\Local\Historique
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Voisinage réseau
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Voisinage d'impression
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Modèles
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Mes documents
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Menu Démarrer
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Documents\Mes vidéos
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Documents\Mes images
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\Documents\Ma musique
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2018-06-10 18:10 - 2018-06-10 18:10 - 000000000 _SHDL C:\Users\postgres\AppData\Local\Historique
2018-06-10 18:10 - 2018-04-12 00:34 - 000001105 _____ C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-10 18:10 - 2018-04-12 00:34 - 000001105 _____ C:\Users\postgres\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-10 18:10 - 2018-01-05 23:47 - 000000000 ____D C:\Users\adier\AppData\Local\Microsoft Help
2018-06-10 18:10 - 2018-01-05 23:47 - 000000000 ____D C:\Users\postgres\AppData\Local\Microsoft Help
2018-06-10 18:10 - 2017-03-25 01:03 - 000000000 ____D C:\Users\adier\AppData\Roaming\Macromedia
2018-06-10 18:10 - 2017-03-25 01:03 - 000000000 ____D C:\Users\postgres\AppData\Roaming\Macromedia
2018-06-10 18:08 - 2018-06-10 18:08 - 000000000 ____D C:\ProgramData\USOShared
2018-06-10 18:08 - 2018-04-12 00:33 - 002752000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-06-10 18:00 - 2018-06-24 17:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-06-10 18:00 - 2018-06-13 23:09 - 000517816 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-10 16:51 - 2018-06-10 16:59 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2018-06-10 16:49 - 2018-06-10 16:51 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2018-06-10 16:49 - 2018-06-10 16:49 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2018-06-10 16:45 - 2018-06-10 16:45 - 023862784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 021389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 020383712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 019525120 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 016592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 013873152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 013570560 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 012500992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 008623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 007987712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 007436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 006661120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 006044104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 005951488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 004929024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 004070400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 003392512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 003086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 002699776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 002366976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 002178136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001953280 _____ C:\WINDOWS\system32\rdpnano.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001947808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001855488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001665920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001665024 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001649760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001585664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001565592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001559368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001534976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001490144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001456640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001426328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001421312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001380864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001295360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2018-06-10 16:45 - 2018-06-10 16:45 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001235968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001210880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001034096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001017088 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001012408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000992768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2018-06-10 16:45 - 2018-06-10 16:45 - 000941056 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000899072 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2018-06-10 16:45 - 2018-06-10 16:45 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000861096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000860160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000847360 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000788480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000788216 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000776880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000759192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000735560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2018-06-10 16:45 - 2018-06-10 16:45 - 000677376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000665320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000653208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000625152 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs4.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000606448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000604568 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2018-06-10 16:45 - 2018-06-10 16:45 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs3.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2018-06-10 16:45 - 2018-06-10 16:45 - 000561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000560488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PerceptionSimulationExtensions.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2018-06-10 16:45 - 2018-06-10 16:45 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000474624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs2.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000473496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.rs1.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000434584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2018-06-10 16:45 - 2018-06-10 16:45 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000382872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2018-06-10 16:45 - 2018-06-10 16:45 - 000356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000347704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000308408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.th.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000286200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2018-06-10 16:45 - 2018-06-10 16:45 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win81.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe
2018-06-10 16:45 - 2018-06-10 16:45 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe
2018-06-10 16:45 - 2018-06-10 16:45 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Analog.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.win8rtm.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000131232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000130456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2018-06-10 16:45 - 2018-06-10 16:45 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppHostRegistrationVerifier.exe
2018-06-10 16:45 - 2018-06-10 16:45 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000105368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2018-06-10 16:45 - 2018-06-10 16:45 - 000101288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000089984 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000088472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2018-06-10 16:45 - 2018-06-10 16:45 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000077040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSHEIF.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000018716 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2018-06-10 16:45 - 2018-06-10 16:45 - 000018716 _____ C:\WINDOWS\system32\srms-apr.dat
2018-06-10 16:45 - 2018-06-10 16:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2018-06-10 16:45 - 2018-06-10 16:45 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2018-06-10 16:38 - 2018-06-10 16:38 - 004492288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2018-06-10 16:38 - 2018-06-10 16:38 - 003398144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-06-10 16:38 - 2018-06-10 16:38 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2018-06-10 16:38 - 2018-06-10 16:38 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-06-10 16:38 - 2018-06-10 16:38 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2018-06-10 16:38 - 2018-06-10 16:38 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-06-10 16:38 - 2018-06-10 16:38 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2018-06-10 16:38 - 2018-06-10 16:38 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files\Reference Assemblies
2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files\MSBuild
2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2018-06-10 16:38 - 2018-06-10 16:38 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-06-10 16:37 - 2018-06-10 16:37 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2018-06-10 16:37 - 2018-06-10 16:37 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-06-10 16:37 - 2018-06-10 16:37 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2018-06-10 16:37 - 2018-06-10 16:37 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-06-10 16:37 - 2018-06-10 16:37 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-06-10 16:37 - 2018-06-10 16:37 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2018-06-10 16:35 - 2018-06-10 16:35 - 006350848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2018-06-10 16:35 - 2018-06-10 16:35 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2018-06-10 16:35 - 2018-06-10 16:35 - 005487616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2018-06-10 16:35 - 2018-06-10 16:35 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2018-06-10 16:35 - 2018-06-10 16:35 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2018-06-09 01:04 - 2018-06-09 01:06 - 000000000 ____D C:\Camunda_Home
2018-06-07 22:13 - 2018-06-10 18:39 - 000000000 ___DC C:\WINDOWS\Panther
2018-06-05 17:20 - 2018-06-05 17:20 - 000000951 _____ C:\Users\adier\Desktop\TouchPad - Raccourci.lnk
2018-06-05 17:19 - 2018-06-05 17:19 - 000000096 _____ C:\Users\adier\Desktop\TouchPad.bat
2018-06-05 01:30 - 2018-06-05 01:30 - 000576465 _____ C:\Users\adier\Downloads\Sample(2).pdf
2018-06-04 23:35 - 2018-06-04 23:35 - 000086132 _____ C:\Users\adier\Desktop\Tree.javaBackup
2018-06-03 03:19 - 2018-06-03 03:20 - 000092915 _____ C:\Users\adier\Desktop\LASTCONSTARINTS.txt
2018-06-03 03:19 - 2018-06-03 03:19 - 000002881 _____ C:\Users\adier\Desktop\LASTREQUESTTTTTTTTTT.txt
2018-06-03 03:00 - 2018-06-03 03:00 - 000001038 _____ C:\Users\adier\Desktop\LAST_SCHEMA_CSVFILE_TO_LOAD_USER_MEDECIN_REGION_SECTOR_ETC.txt
2018-06-01 02:46 - 2018-06-01 02:46 - 000000000 ____D C:\Users\adier\Desktop\backup
2018-05-29 22:19 - 2018-05-29 22:20 - 007366237 _____ C:\Users\adier\Downloads\apoc-3.4.0.1-all.jar
2018-05-26 01:18 - 2018-05-26 01:46 - 220200960 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.2-31-amd64.iso
2018-05-26 01:16 - 2018-05-26 01:36 - 213909504 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.2-17-amd64 (1).iso
2018-05-26 01:14 - 2018-05-26 01:41 - 213909504 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.2-17-amd64.iso
2018-05-25 23:54 - 2018-05-26 00:10 - 239003081 _____ C:\Users\adier\Downloads\clonezilla-live-2.5.5-38-amd64.zip

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-06-24 16:45 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-24 16:08 - 2016-11-21 14:30 - 000000000 ____D C:\Users\adier\AppData\LocalLow\Mozilla
2018-06-24 15:48 - 2017-04-08 18:10 - 000000000 ____D C:\Users\adier\AppData\Roaming\FileZilla
2018-06-24 15:47 - 2018-04-12 17:18 - 000791208 _____ C:\WINDOWS\system32\perfh00C.dat
2018-06-24 15:47 - 2018-04-12 17:18 - 000149704 _____ C:\WINDOWS\system32\perfc00C.dat
2018-06-24 15:47 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF
2018-06-24 15:45 - 2018-04-11 22:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-06-24 15:42 - 2017-03-15 20:57 - 000000000 ____D C:\Users\adier\AppData\Local\TSVNCache
2018-06-24 15:39 - 2018-04-11 22:04 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-06-24 15:39 - 2017-03-03 16:05 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2018-06-24 15:23 - 2017-03-26 01:33 - 000000000 ____D C:\Users\adier\.p2
2018-06-24 15:23 - 2017-03-06 17:30 - 000000000 ____D C:\Users\adier\AppData\Local\Eclipse
2018-06-24 15:21 - 2018-04-12 00:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2018-06-24 15:18 - 2017-04-11 16:21 - 000000000 ____D C:\eclipse
2018-06-24 14:59 - 2017-08-22 23:48 - 000000000 ____D C:\Program Files (x86)\Trend Micro
2018-06-24 14:03 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-24 13:37 - 2017-10-11 15:23 - 000000000 ____D C:\Program Files\Firefox Developer Edition
2018-06-24 13:37 - 2017-09-12 00:35 - 000000348 _____ C:\WINDOWS\Tasks\HPCeeScheduleForreida.job
2018-06-24 13:37 - 2017-03-03 18:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-06-23 21:39 - 2017-10-11 15:23 - 000001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Developer Edition.lnk
2018-06-23 19:43 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-23 19:41 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-23 19:13 - 2018-01-04 19:37 - 000000000 ____D C:\Users\adier\AppData\Local\Packages
2018-06-23 19:06 - 2017-03-03 16:43 - 000000000 ____D C:\Users\adier\AppData\Local\ElevatedDiagnostics
2018-06-21 15:54 - 2017-03-25 22:05 - 000000600 _____ C:\Users\adier\AppData\Local\PUTTY.RND
2018-06-18 16:30 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2018-06-14 00:03 - 2017-03-03 18:08 - 000002306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-14 00:03 - 2017-03-03 18:08 - 000002265 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2018-06-13 23:06 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\appraiser
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2018-06-13 23:06 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2018-06-13 23:06 - 2018-04-11 22:04 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-06-13 01:51 - 2018-01-03 15:13 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2018-06-13 00:55 - 2017-03-03 17:07 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-13 00:49 - 2017-10-11 16:58 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-13 00:49 - 2017-03-03 17:07 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-13 00:46 - 2017-03-02 21:03 - 000000167 _____ C:\WINDOWS\win.ini
2018-06-12 02:08 - 2018-02-01 00:31 - 000000000 ____D C:\Program Files (x86)\Garmin
2018-06-12 02:08 - 2017-03-04 00:54 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-11 03:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\appcompat
2018-06-10 22:08 - 2017-03-02 22:56 - 000000000 ____D C:\Users\adier\AppData\Local\ConnectedDevicesPlatform
2018-06-10 18:39 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Registration
2018-06-10 18:39 - 2018-01-04 20:10 - 000000000 ___RD C:\Users\adier\3D Objects
2018-06-10 18:39 - 2016-02-13 14:18 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-10 18:37 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender
2018-06-10 18:37 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\windows nt
2018-06-10 18:35 - 2017-03-26 01:44 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eclipse
2018-06-10 18:27 - 2017-06-06 00:57 - 000023208 _____ C:\WINDOWS\system32\emptyregdb.dat
2018-06-10 18:15 - 2018-01-11 16:39 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Atlassian
2018-06-10 18:15 - 2017-08-22 23:28 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
2018-06-10 18:15 - 2017-05-08 18:31 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iCloud
2018-06-10 18:15 - 2017-03-07 21:12 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-06-10 18:11 - 2017-03-17 19:13 - 000000000 ____D C:\Users\adier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2018-06-10 18:08 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\USOPrivate
2018-06-10 18:08 - 2018-01-07 18:25 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2018-06-10 18:07 - 2017-06-06 00:29 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2018-06-10 16:59 - 2018-04-12 00:41 - 000000000 ____D C:\WINDOWS\Setup
2018-06-10 16:59 - 2018-04-12 00:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\spool
2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\system
2018-06-10 16:59 - 2018-04-12 00:38 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-06-10 16:59 - 2018-02-14 16:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-06-10 16:59 - 2018-01-16 14:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++
2018-06-10 16:59 - 2018-01-08 23:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maestro
2018-06-10 16:59 - 2018-01-08 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2018-06-10 16:59 - 2018-01-07 18:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2018-06-10 16:59 - 2018-01-03 15:05 - 000000000 ____D C:\WINDOWS\SHELLNEW
2018-06-10 16:59 - 2017-12-03 17:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2018-06-10 16:59 - 2017-11-10 18:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2018-06-10 16:59 - 2017-10-31 14:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard
2018-06-10 16:59 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2018-06-10 16:59 - 2017-09-11 18:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2018-06-10 16:59 - 2017-09-11 18:16 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2018-06-10 16:59 - 2017-08-20 00:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge
2018-06-10 16:59 - 2017-08-14 16:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN
2018-06-10 16:59 - 2017-08-11 03:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ExamDiff
2018-06-10 16:59 - 2017-08-04 01:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VisualSVN
2018-06-10 16:59 - 2017-08-02 23:10 - 000000000 ____D C:\WINDOWS\system32\camunda-h2-dbs
2018-06-10 16:59 - 2017-08-02 22:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2018-06-10 16:59 - 2017-08-02 22:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-06-10 16:59 - 2017-08-01 01:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2018-06-10 16:59 - 2017-07-28 14:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X8 (64-bit)
2018-06-10 16:59 - 2017-07-25 00:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2018-06-10 16:59 - 2017-06-06 00:30 - 000000000 ____D C:\Program Files\AMD
2018-06-10 16:59 - 2017-05-31 22:45 - 000000000 ____D C:\Program Files\UNP
2018-06-10 16:59 - 2017-05-09 19:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programme de désinstallation de l'imprimante Canon
2018-06-10 16:59 - 2017-04-21 18:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spider
2018-06-10 16:59 - 2017-04-21 16:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jar2Exe Wizard
2018-06-10 16:59 - 2017-04-08 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2018-06-10 16:59 - 2017-03-21 17:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphviz 2.38
2018-06-10 16:59 - 2017-03-07 21:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-06-10 16:59 - 2017-03-04 00:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Who Is On My Wifi
2018-06-10 16:59 - 2017-03-03 20:56 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2018-06-10 16:59 - 2017-03-03 20:55 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe
2018-06-10 16:59 - 2017-03-03 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sound Organizer
2018-06-10 16:58 - 2018-04-12 00:38 - 000000000 __RHD C:\Users\Public\Libraries
2018-06-10 16:53 - 2017-06-06 00:30 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2018-06-10 16:51 - 2018-02-09 23:34 - 000000000 ____D C:\Program Files\Synaptics
2018-06-10 16:51 - 2017-09-11 14:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2018-06-10 16:51 - 2017-08-08 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartBear
2018-06-10 16:51 - 2017-06-06 00:30 - 000000000 ____D C:\Program Files\Realtek
2018-06-10 16:51 - 2017-06-06 00:30 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2018-06-10 16:51 - 2017-03-04 19:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPUBSOFT
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\te-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\or-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\km-KH
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\is-IS
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\id-ID
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\be-BY
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\as-IN
2018-06-10 16:47 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\ta-in
2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\si-lk
2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\setup
2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\am-et
2018-06-10 16:47 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\Provisioning
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\en-GB
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\MUI
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\et-EE
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\es-MX
2018-06-10 16:38 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\en-GB
2018-06-10 16:36 - 2018-04-12 17:22 - 000000000 ____D C:\WINDOWS\OCR
2018-06-06 00:29 - 2018-04-12 00:41 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-06 00:29 - 2018-04-12 00:41 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-02 15:04 - 2017-03-04 21:10 - 000000000 ____D C:\Program Files\Common Files\AV
2018-06-02 15:03 - 2018-02-27 11:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-06-02 14:58 - 2018-01-07 03:24 - 000000000 ____D C:\Program Files\Malwarebytes
2018-06-02 14:58 - 2017-03-03 21:16 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-06-02 14:56 - 2014-01-26 22:34 - 000000000 ____D C:\Users\adier\AppData\LocalLow\Adobe

==================== Fichiers à la racine de certains dossiers =======

2014-08-23 20:10 - 2014-08-23 20:10 - 039414096 _____ (EnterpriseDB) C:\Users\adier\edb_apachephp.exe
2014-08-23 20:10 - 2014-08-23 20:10 - 017175824 _____ (EnterpriseDB) C:\Users\adier\edb_mtk.exe
2014-08-23 20:11 - 2014-08-23 20:11 - 007711840 _____ (EnterpriseDB) C:\Users\adier\edb_npgsql.exe
2014-08-23 20:11 - 2014-08-23 20:11 - 013558376 _____ (EnterpriseDB) C:\Users\adier\edb_pem_agent.exe
2014-08-23 20:11 - 2014-08-23 20:12 - 064780416 _____ (EnterpriseDB) C:\Users\adier\edb_pem_client.exe
2014-08-23 20:12 - 2014-08-23 20:14 - 168476544 _____ (EnterpriseDB) C:\Users\adier\edb_pem_server.exe
2014-08-23 20:14 - 2014-08-23 20:14 - 006200448 _____ (EnterpriseDB) C:\Users\adier\edb_pem_sqlprofiler_pg91.exe
2014-08-23 20:14 - 2014-08-23 20:15 - 012967360 _____ (EnterpriseDB) C:\Users\adier\edb_pgagent.exe
2014-08-23 20:15 - 2014-08-23 20:15 - 014490424 _____ (EnterpriseDB) C:\Users\adier\edb_pgbouncer.exe
2014-08-25 00:47 - 2014-08-25 00:47 - 013841144 _____ (EnterpriseDB) C:\Users\adier\edb_pgbouncer9.3.exe
2014-08-23 20:15 - 2014-08-23 20:15 - 007084280 _____ (EnterpriseDB) C:\Users\adier\edb_pgjdbc.exe
2014-08-23 20:15 - 2014-08-23 20:15 - 007177744 _____ (EnterpriseDB) C:\Users\adier\edb_phppgadmin.exe
2014-08-23 20:15 - 2014-08-23 20:15 - 013468632 _____ (EnterpriseDB) C:\Users\adier\edb_psqlodbc.exe
2014-08-25 00:47 - 2014-08-25 00:47 - 011480448 _____ (EnterpriseDB) C:\Users\adier\edb_sbp_as93.exe
2014-08-23 20:15 - 2014-08-23 20:16 - 006382424 _____ (EnterpriseDB) C:\Users\adier\edb_slony_i_pg91.exe
2014-08-23 20:16 - 2014-08-23 20:16 - 011395296 _____ (EnterpriseDB) C:\Users\adier\edb_sqlprotect_pg91.exe
2014-08-23 20:16 - 2014-08-23 20:16 - 024802288 _____ (EnterpriseDB) C:\Users\adier\edb_updatemonitor.exe
2014-08-23 20:16 - 2014-08-23 20:17 - 035072224 _____ (EnterpriseDB) C:\Users\adier\edb_xdb.exe
2014-08-25 00:47 - 2014-08-25 00:48 - 064780416 _____ (EnterpriseDB) C:\Users\adier\pem_client.exe
2014-08-23 20:17 - 2014-08-23 20:17 - 021017439 _____ () C:\Users\adier\postgis_2_0_pg91.exe
2014-08-23 20:17 - 2014-08-23 20:18 - 043754240 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_84.exe
2014-08-23 20:18 - 2014-08-23 20:21 - 051895176 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_90.exe
2014-08-23 20:21 - 2014-08-23 20:22 - 053293336 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_91.exe
2014-08-23 20:23 - 2014-08-23 20:24 - 055789672 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_92.exe
2014-08-23 20:24 - 2014-08-23 20:26 - 056552816 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_93.exe
2014-08-23 20:26 - 2014-08-23 20:27 - 056287640 _____ (PostgreSQL Global Development Group) C:\Users\adier\postgresql_94.exe
2014-08-25 00:49 - 2014-08-25 00:49 - 011596872 _____ (EnterpriseDB) C:\Users\adier\ppas_connectors_as93.exe
2014-08-25 00:49 - 2014-08-25 00:49 - 027976104 _____ (EnterpriseDB) C:\Users\adier\ppas_dbserver_as93.exe
2014-08-25 00:48 - 2014-08-25 00:49 - 007413576 _____ (EnterpriseDB) C:\Users\adier\ppas_edbplus_as93.exe
2014-08-25 00:48 - 2014-08-25 00:48 - 008099752 _____ (EnterpriseDB) C:\Users\adier\ppas_mtk_as93.exe
2014-08-25 00:49 - 2014-08-25 00:49 - 006735816 _____ (EnterpriseDB) C:\Users\adier\ppas_replication_as93.exe
2017-04-21 17:13 - 2017-04-21 17:13 - 000000600 _____ () C:\Users\adier\AppData\Roaming\winscp.rnd
2018-06-24 14:46 - 2018-06-24 14:46 - 000000036 _____ () C:\Users\adier\AppData\Local\housecall.guid.cache
2017-03-25 22:05 - 2018-06-21 15:54 - 000000600 _____ () C:\Users\adier\AppData\Local\PUTTY.RND
2017-04-13 22:26 - 2017-04-13 22:26 - 000000746 _____ () C:\Users\adier\AppData\Local\recently-used.xbel
2017-03-24 21:24 - 2017-03-24 21:24 - 000007605 _____ () C:\Users\adier\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2018-06-10 18:00

==================== Fin de FRST.txt ============================

 

Addition.txt

==========

Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 20.06.2018
Exécuté par adier (24-06-2018 17:06:21)
Exécuté depuis C:\Users\adier\Downloads
Windows 10 Home Version 1803 17134.112 (X64) (2018-06-10 17:38:49)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-4206151704-2492553960-1182160334-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4206151704-2492553960-1182160334-503 - Limited - Disabled)
Invité (S-1-5-21-4206151704-2492553960-1182160334-501 - Limited - Disabled)
postgres (S-1-5-21-4206151704-2492553960-1182160334-1025 - Limited - Enabled) => C:\Users\postgres
adier (S-1-5-21-4206151704-2492553960-1182160334-1002 - Administrator - Enabled) => C:\Users\adier
WDAGUtilityAccount (S-1-5-21-4206151704-2492553960-1182160334-504 - Limited - Disabled)

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Trend Micro Antivirus+ (Enabled - Up to date) {1E5CB925-ABFC-68A9-91DC-4258BDE6C44A}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.23 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 25.0.0.134 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2 - Adobe Systems Incorporated)
Advanced SystemCare 10 (HKLM-x32\...\Advanced SystemCare_is1) (Version: 10.0.3 - IObit)
Amazon Kindle (HKLM-x32\...\Amazon Kindle) (Version: 1.20.1.47037 - Amazon)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.)
ANT Drivers Installer x64 (HKLM\...\{20AB389B-8602-403C-B19B-F0A1D6C510A5}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
aTube Catcher version 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Battery Status (HKLM-x32\...\Battery Status) (Version: 0.99 - Tom Talpey)
Canon LBP3010/LBP3018/LBP3050 (HKLM\...\Canon LBP3010/LBP3018/LBP3050) (Version:  - )
Corel Graphics - Windows Shell Extension (HKLM\...\_{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.0.448 - Corel Corporation)
Corel Graphics - Windows Shell Extension (HKLM\...\{3CAAE169-6001-48ED-B2C6-5B6F511552FD}) (Version: 18.0.448 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{C8730B1A-133D-4546-8E21-9EC186341F20}) (Version: 18.0.448 - Corel Corporation) Hidden
Corel Update Manager (HKLM\...\{B8C05FFE-C36F-4F17-AD20-739E4BC65AC9}) (Version: 2.7.355 - Corel corporation) Hidden
CorelDRAW Graphics Suite X8 - BR (x64) (HKLM\...\{67D57366-EFCC-46DA-BB1F-BBE89B377177}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Capture (x64) (HKLM\...\{1253ED86-69FD-4A7B-BDF2-96A522583A88}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Common (x64) (HKLM\...\{72922AB6-F920-4C98-985D-EC90CE0918D4}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Connect (x64) (HKLM\...\{9782A612-03A7-488F-A598-33558163D8F8}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CS (x64) (HKLM\...\{300DB480-7301-436A-A312-B695B2BC6D71}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CT (x64) (HKLM\...\{43C4A17D-93D9-41C6-8ACA-370EA390ED2A}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Custom Data (x64) (HKLM\...\{02C85FBD-87D3-4352-BF2E-AFE897CD5559}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - CZ (x64) (HKLM\...\{A67AEE14-0435-4B8C-A367-F5EDE6CAF9F6}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - DE (x64) (HKLM\...\{4AA43BE3-D21B-44D7-B9CD-86692DEF3706}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Draw (x64) (HKLM\...\{A66E09BB-9892-421D-9EB9-311D12AA5244}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - EN (x64) (HKLM\...\{A0845CAD-ED13-46A4-A050-5ACE4631FDEC}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - ES (x64) (HKLM\...\{B1452C41-DC90-4B58-8320-ABB515E87FFB}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Filters (x64) (HKLM\...\{6E6D1438-33CC-413B-BC96-3497B1271CDD}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Font Manager (x64) (HKLM\...\{5FB5FF89-0938-49D9-850B-53B78B84A7E4}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - FR (x64) (HKLM\...\{0A182180-3BAF-4B94-BFD0-CF082CC5FF0D}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM (x64) (HKLM\...\{A040C72A-0ADC-4FB9-9DB4-19B18F6053F1}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IPM Content (x64) (HKLM\...\{FB081BA0-08D2-4C8C-9E55-788A90430BE3}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - IT (x64) (HKLM\...\{8285FEBA-D373-493F-BC78-934F84A0A298}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - JP (x64) (HKLM\...\{F5A1D3E4-416E-4723-AD35-86A372B99174}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - NL (x64) (HKLM\...\{A7922CC8-0EBD-497B-B381-5B3992905327}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (HKLM\...\{04D8C47E-C0FE-4CA5-8878-91ECD9552109}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - PL (x64) (HKLM\...\{6F03D92C-48DB-4182-8A51-BEF8FE64B72C}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Redist (x64) (HKLM\...\{50D1BD2D-6D8C-45A8-9DB5-CDAB7227DB36}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - RU (x64) (HKLM\...\{B83D220A-33AB-4AF5-963A-887BD971270E}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Setup Files (x64) (HKLM\...\{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VBA (x64) (HKLM\...\{48DD8181-A983-447B-9660-A55A935CA751}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (HKLM\...\{81EBD8D4-9142-4D33-BF34-D99EFC1180F5}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Workspaces (x64) (HKLM\...\{1D4B870D-A5A8-4B88-9520-ED8EFD545AA1}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 - Writing Tools (x64) (HKLM\...\{23A2ABD8-8231-48AD-AD71-FF0566A7DD8F}) (Version: 18.0 -  Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.0.0.448 - Corel Corporation)
CorelDRAW Graphics Suite X8 (HKLM\...\{ECFAF1D6-342D-4AE2-B6BF-82B22F9FE8DE}) (Version: 18.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X8 -TR (x64) (HKLM\...\{ACC8C1B0-E560-4B42-AA52-9CAD14883B29}) (Version: 18.0 - Corel Corporation) Hidden
CPUID HWMonitor Pro 1.29 (HKLM\...\CPUID HWMonitorPro_is1) (Version: 1.29 - )
Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.11 - Bloodshed Software)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version:  - EaseUS)
Elevated Installer (HKLM-x32\...\{6E257EB0-5EFF-416D-82D4-592924566BB4}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden
Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company)
EPubsoft ToolBox 9.5.5 (HKLM-x32\...\{D21B4A41-3327-4CA5-A218-C751706DFF27}) (Version: 9.5.5 - EPUBSOFT)
ExamDiff 1.9 (Build 1.9.0.2) (HKLM-x32\...\ExamDiff_is1) (Version: 1.9.0.2 - PrestoSoft LLC)
FileZilla Client 3.25.1 (HKLM-x32\...\FileZilla Client) (Version: 3.25.1 - Tim Kosse)
Firefox Developer Edition 62.0 (x64 en-US) (HKLM\...\Firefox Developer Edition 62.0 (x64 en-US)) (Version: 62.0 - Mozilla)
Garmin Express (HKLM-x32\...\{3e534d41-dcc4-4f51-9858-70dd42beb3d5}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{E1C18A5C-63D7-4DC5-977F-5B4BAB4169D9}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.87 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Graphviz (HKLM-x32\...\{884CF059-9A11-4DF7-A2A7-17EFE90B9278}) (Version: 2.38 - AT&T Research Labs.)
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HP AC Power Control (HKLM\...\{F819C151-FFEE-4F01-BE68-0D1F76574F44}) (Version: 1.0.6 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}) (Version: 8.6.18.11 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{9F79033A-84FC-4137-BCDC-C505246F78E1}) (Version: 12.9.18.3 - HP Inc.)
HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
ISO/TS 14048 data editor version 1.1b (HKLM-x32\...\ISO/TS 14048 data editor_is1) (Version:  - )
Jar2Exe Wizard (HKLM-x32\...\{78DA9894-13E4-4858-9A4A-4F7A523203BA}) (Version: 2.1.1107 - RegExLab.com)
Java 7 Update 76 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417076FF}) (Version: 7.0.760 - Oracle)
Java 8 Update 144 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
Java SE Development Kit 7 Update 76 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170760}) (Version: 1.7.0.760 - Oracle)
Java SE Development Kit 8 Update 144 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180144}) (Version: 8.0.1440.1 - Oracle Corporation)
Maestro 2004.01 (Public) (HKLM-x32\...\Maestro_is1) (Version:  - NASA Jet Propulsion Laboratory, California Institute of Technology)
Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 56.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 56.0 (x86 fr)) (Version: 56.0 - Mozilla)
Mozilla Firefox 59.0 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0 (x64 en-US)) (Version: 59.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 59.0 - Mozilla)
MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.4.2 - MusicBrainz)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.6 - Notepad++ Team)
OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Progress Telerik Fiddler (HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\Fiddler2) (Version: 5.0.20181.14850 - Telerik)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.29068 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
SoapUI 5.3.0 5.3.0 (HKLM-x32\...\5517-2803-0637-4585) (Version: 5.3.0 - SmartBear Software)
Sound Organizer (HKLM-x32\...\{53F7486D-41B5-4117-8914-A85B0DBDDC07}) (Version: 1.4.0.11260 - Sony Corporation)
SourceTree (HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\SourceTree) (Version: 2.4.7 - Atlassian)
Spider Version 1.1b (HKLM-x32\...\Spider_is1) (Version:  - )
SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
TortoiseSVN 1.9.7.27907 (64 bit) (HKLM\...\{FBD345DC-093A-4D89-A9B8-10C1BA356048}) (Version: 1.9.27907 - TortoiseSVN)
Trend Micro Antivirus+ (HKLM\...\{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}) (Version: 12.0 - Trend Micro Inc.)
Tunatic (HKLM-x32\...\Tunatic) (Version:  - )
Update for Skype for Business 2015 (KB4022170) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{623DC402-8FDC-490D-9881-E60F5337036E}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4022170) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{623DC402-8FDC-490D-9881-E60F5337036E}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4022170) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{623DC402-8FDC-490D-9881-E60F5337036E}) (Version:  - Microsoft)
VisualSVN Server 3.6.3 (HKLM\...\{7D9351AA-66C2-4185-ACE6-85AD06F5BA78}) (Version: 3.6.3.0 - VisualSVN Software Ltd.)
Who Is On My Wifi version 4.0.1 (HKLM-x32\...\{010D45A1-093D-4534-8147-4E10E80F81CC}_is1) (Version: 4.0.1 - IO3O LLC)
WinHTTrack Website Copier 3.49-2 (HKLM-x32\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Wireshark 2.2.6 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.2.6 - The Wireshark developer community, hxxps://www.wireshark.org)

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

CustomCLSID: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\adier\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\adier\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4206151704-2492553960-1182160334-1002_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\adier\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier
ShellIconOverlayIdentifiers: [   FSOverlayIcon] -> {C0829D19-E5A0-44F5-B56E-D15030C53BB9} => C:\Program Files\Trend Micro\Titanium\plugin\TmOverlayIcon.dll [2017-07-23] (Trend Micro Inc.)
ShellIconOverlayIdentifiers: [  Tortoise1Normal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise2Modified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise3Conflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise4Locked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise5ReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise6Deleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise7Added] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise8Ignored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [  Tortoise9Unversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [  Tortoise1Normal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise2Modified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise3Conflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise4Locked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise5ReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise6Deleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise7Added] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise8Ignored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [  Tortoise9Unversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2015-08-25] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Pas de fichier
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-03-08] ()
ContextMenuHandlers1: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net)
ContextMenuHandlers1: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [{48F45200-91E6-11CE-8A4F-0080C81A28D4}] -> {48F45200-91E6-11CE-8A4F-0080C81A28D4} => C:\Program Files\Trend Micro\UniClient\UiFrmwrk\tmdshell.dll [2017-07-23] (Trend Micro Inc.)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers2: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net)
ContextMenuHandlers2: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2016-09-20] (IObit)
ContextMenuHandlers4: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net)
ContextMenuHandlers4: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2013-02-02] (hxxp://winmerge.org)
ContextMenuHandlers5: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers6: [TortoiseSVN] -> {30351349-7B7D-4FCC-81B4-1E394CA267EB} => C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll [2017-08-08] (hxxp://tortoisesvn.net)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [{48F45200-91E6-11CE-8A4F-0080C81A28D4}] -> {48F45200-91E6-11CE-8A4F-0080C81A28D4} => C:\Program Files\Trend Micro\UniClient\UiFrmwrk\tmdshell.dll [2017-07-23] (Trend Micro Inc.)

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {035B56AF-EFD6-49CA-A446-C8832B27252C} - System32\Tasks\DriverMaxAgent => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe
Task: {090450AD-A900-46CD-B7C2-0D51FAF3B866} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2018-06-06] ()
Task: {0D7652BA-016D-4CDC-8553-E8B524D5C9EC} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {1667C681-F9EA-4AE4-AC82-9B1185355F97} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-05-02] (HP Inc.)
Task: {1DD07DBF-7395-4772-8EE6-3D919FB2111E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2018-05-02] (HP Inc.)
Task: {2E78C1F5-48B6-478C-9398-5B1343862994} - \Apple Diagnostics -> Pas de fichier <==== ATTENTION
Task: {380F26B0-4D6C-4E34-8855-69B7DBEBD354} - System32\Tasks\DriverMax Notification => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe
Task: {3B8B9EB7-3D14-45B5-B45F-3C97AC3AF446} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {45427F42-C5BB-4FA5-A11E-58A221ED2BCC} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2018-02-23] (Corel Corporation)
Task: {503451D4-5A53-48EB-ABC3-21B5A85B31A2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {6054B42F-605E-4F49-B36A-E2DF2EEA601D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {6FD88A97-FA1E-41BF-BFC0-9ADABCC71607} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {7A110D69-5309-4FF0-887C-81FAF3F79872} - System32\Tasks\Driver Booster SkipUAC (adier) => C:\Program Files (x86)\IObit\Driver Booster\4.5.0\DriverBooster.exe
Task: {8348045D-26F4-476F-B247-1E61D8490C9C} - System32\Tasks\HPCeeScheduleForreida => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-06-24] (HP Inc.)
Task: {8591BD3B-53B7-4EE1-A805-93FEE9A52BDB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-03] (Google Inc.)
Task: {876045AF-CC85-462F-B273-332DB7BD8835} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-03] (Google Inc.)
Task: {9A12EC95-2784-404C-86D8-A2264C1E6ED1} - System32\Tasks\DriverMaxWelcome => C:\Program Files (x86)\Innovative Solutions\DriverMax\drivermax.exe
Task: {9BEFF928-51FA-47DC-81C5-FD0E8DAA559F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2018-05-04] (HP Inc.)
Task: {A22E453E-6135-41DF-8C98-608F39E3AF6C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2018-05-11] (HP Inc.)
Task: {ACD37BD0-5FCF-4534-BAA7-5ED877D16A97} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe
Task: {BEB44DCD-4D4F-4AE1-9B42-D96E4E68677C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {C38518D1-F465-4E66-9DAF-E1D5E8D30143} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe
Task: {CFE50C79-BB96-4B26-A14E-07F1DD691D45} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-21] ()
Task: {EA78B15C-FB2E-4717-A856-57C5AA0EED29} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {EFE8916B-C2C3-43CA-9903-A6854E0693B9} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\HPCeeScheduleForreida.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Raccourcis & WMI ========================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)


Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\trunk\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\SOLEIL_ROOT_RELEASE_5_5_6\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_2\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_1\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_3_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_6\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_5\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_4\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_3\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_2\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_1\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_2_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_1_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_4\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_3\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_2\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_1\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\release_1_0_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR ATKPANEL SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\ATKPANEL_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR ATKTUNING SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\atktuning_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR MOTORS SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\MOTORS_SM.bat (Pas de fichier)
Shortcut: C:\Users\adier\Downloads\psim\tango\DeviceClasses\BeamlineComponents\Mirrors\GenericMirror\tags\dev_1_0_0\scripts\MIRROR SM.lnk -> D:\Repository\Devices\GenericMirror\scripts\SimulatedMotors\Device.bat (Pas de fichier)
Shortcut: C:\Users\adier\Desktop\Maestro.lnk -> C:\Program Files (x86)\JPL\Maestro\WITS.bat ()
Shortcut: C:\Users\adier\Desktop\TouchPad - Raccourci.lnk -> C:\Users\adier\Desktop\TouchPad.bat ()
Shortcut: C:\Users\adier\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox Developer Edition.lnk -> C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Developer Edition.lnk -> C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Public\Desktop\Firefox Developer Edition.lnk -> C:\Program Files\Firefox Developer Edition\firefox.exe (Mozilla Corporation)

==================== Modules chargés (Avec liste blanche) ==============

2018-06-24 15:18 - 2017-01-13 08:39 - 000076288 _____ () C:\Program Files\Trend Micro\AMSP\boost_date_time-vc140-mt-1_62.dll
2018-06-24 15:18 - 2017-01-13 08:41 - 000039424 _____ () C:\Program Files\Trend Micro\AMSP\boost_system-vc140-mt-1_62.dll
2018-06-24 15:18 - 2017-01-13 09:01 - 000737792 _____ () C:\Program Files\Trend Micro\AMSP\sqlite3.dll
2018-06-24 15:18 - 2017-01-13 08:42 - 000131072 _____ () C:\Program Files\Trend Micro\AMSP\boost_thread-vc140-mt-1_62.dll
2018-06-24 15:18 - 2017-01-13 08:39 - 000048640 _____ () C:\Program Files\Trend Micro\AMSP\boost_chrono-vc140-mt-1_62.dll
2018-06-24 15:18 - 2017-01-13 08:55 - 002333184 _____ () C:\Program Files\Trend Micro\AMSP\libprotobuf.dll
2018-06-24 15:15 - 2017-07-23 20:24 - 000182568 _____ () C:\Program Files\Trend Micro\UniClient\plugins\LUADLL.dll
2018-06-24 15:20 - 2017-07-23 20:24 - 000039424 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_system-vc140-mt-1_62.dll
2018-06-24 15:20 - 2017-07-23 20:24 - 000076288 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_date_time-vc140-mt-1_62.dll
2018-06-24 15:20 - 2017-07-23 20:24 - 000131072 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_thread-vc140-mt-1_62.dll
2018-06-24 15:20 - 2017-07-23 20:24 - 000048640 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_chrono-vc140-mt-1_62.dll
2018-06-24 15:20 - 2017-07-23 20:24 - 001016320 _____ () C:\Program Files\Trend Micro\Titanium\plugin\Pt\boost_regex-vc140-mt-1_62.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2017-08-08 23:30 - 2017-08-08 23:30 - 000094432 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2017-03-20 16:44 - 2017-03-20 16:44 - 000052392 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2018-06-13 00:40 - 2018-06-08 09:56 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-05-25 21:58 - 2018-05-25 21:58 - 027118080 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-05-25 21:53 - 2018-05-25 21:57 - 000306176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\SharedUI.dll
2018-05-25 21:53 - 2018-05-25 21:57 - 006748672 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 23:57 - 2017-09-26 23:58 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-05-25 21:53 - 2018-05-25 21:57 - 009358848 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18041.14611.0_x64__8wekyb3d8bbwe\EntPlat.dll
2018-05-22 16:53 - 2018-05-22 16:56 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2018-05-22 16:53 - 2018-05-22 16:56 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2018-05-22 16:53 - 2018-05-22 16:56 - 022374400 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2018-05-22 16:53 - 2018-05-22 16:56 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\skypert.dll
2018-04-17 12:46 - 2018-04-17 12:49 - 001922232 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.9328.1700.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2018-06-14 00:03 - 2018-06-12 06:36 - 004608856 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.87\libglesv2.dll
2018-06-14 00:03 - 2018-06-12 06:36 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\67.0.3396.87\libegl.dll
2018-06-24 14:27 - 2018-06-24 14:28 - 000852798 _____ () C:\Users\adier\Downloads\SecurityCheck.exe
2018-06-08 23:01 - 2018-06-08 23:05 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2018-06-08 23:01 - 2018-06-08 23:05 - 067232256 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-10-05 10:14 - 2017-10-05 10:20 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2018-05-30 19:40 - 2018-05-30 19:45 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2018-04-28 22:51 - 2018-04-28 22:55 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll
2018-05-30 19:40 - 2018-05-30 19:42 - 004214784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2018-05-30 19:40 - 2018-05-30 19:45 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll
2018-04-05 11:18 - 2018-04-05 11:25 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2018-06-08 23:01 - 2018-06-08 23:05 - 014851072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2018-05-30 19:40 - 2018-05-30 19:45 - 004058624 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2018-06-08 23:01 - 2018-06-08 23:05 - 003266048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2018-05-30 19:40 - 2018-05-30 19:45 - 001393664 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2018-05-30 19:40 - 2018-05-30 19:45 - 004218080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-05-30 19:40 - 2018-05-30 19:45 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-06-21 23:18 - 2018-06-21 23:20 - 000093696 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll
2018-06-21 23:18 - 2018-06-21 23:20 - 002447072 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-06-21 23:18 - 2018-06-21 23:20 - 007813632 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11805.1001.42.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-05-08 10:35 - 2017-05-08 10:35 - 000325632 _____ () C:\Program Files (x86)\Garmin\Device Interaction Service\GpsImgWrapper.dll
2018-06-06 14:31 - 2018-06-06 14:31 - 000073216 _____ () C:\Program Files (x86)\Garmin\Device Interaction Service\FixBootSector.dll
2018-06-24 15:15 - 2017-07-23 20:24 - 000108032 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_thread-vc140-mt-1_62.dll
2018-06-24 15:15 - 2017-07-23 20:24 - 000035840 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_system-vc140-mt-1_62.dll
2018-06-24 15:15 - 2017-07-23 20:24 - 000064000 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_date_time-vc140-mt-1_62.dll
2018-06-24 15:15 - 2017-07-23 20:24 - 000044032 _____ () C:\Program Files\Trend Micro\Titanium\UIFramework\boost_chrono-vc140-mt-1_62.dll
2018-03-19 00:40 - 2018-03-19 00:40 - 000021680 _____ () C:\Program Files (x86)\Notepad++\plugins\NppExport.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)

AlternateDataStreams: C:\WINDOWS\system32\msln.exe:d8e5e202df606324abe82f1f62dab53d [1494]

==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)


==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)


==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2017-03-02 21:03 - 2017-03-02 21:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

HKLM\...\StartupApproved\StartupFolder: => "Who Is On My Wifi.lnk"
HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-4206151704-2492553960-1182160334-1002\...\StartupApproved\Run: => "OneDriveSetup"

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [{6A097C64-B072-4695-87DB-4E00EFC764D8}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{39210061-2B7D-4B12-B85F-BFD0BDCC1B10}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{BE3F843C-6723-4A53-85CE-E89428C579F6}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{B527A8DA-763D-43CE-8C65-71A378812D62}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [UDP Query User{22F72AFE-F3BA-4D03-9A7A-913DF5C53235}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe
FirewallRules: [TCP Query User{0D8423A1-11E8-443D-8E15-D1E771C9DE17}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe
FirewallRules: [UDP Query User{B8B95EED-481C-4ED8-982C-0E50A0E11EF3}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe
FirewallRules: [TCP Query User{BFDF8410-F181-485B-8A03-DDEB098C6BCB}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe
FirewallRules: [{5C42C92A-C8F1-459D-934E-F4D6ED383EA5}] => (Allow) C:\Users\adier\AppData\Local\Programs\Fiddler\Fiddler.exe
FirewallRules: [UDP Query User{B885D944-2E61-4BD3-B9DB-A046CB01E414}C:\program files\firefox developer edition\firefox.exe] => (Block) C:\program files\firefox developer edition\firefox.exe
FirewallRules: [TCP Query User{38EBA2CD-1AE0-49FD-B4FD-168CC32FFD32}C:\program files\firefox developer edition\firefox.exe] => (Block) C:\program files\firefox developer edition\firefox.exe
FirewallRules: [UDP Query User{8E7F3A8E-E2D8-4579-9514-050046FC43E2}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe
FirewallRules: [TCP Query User{A5832E93-3307-4BF6-91EB-2DF2EA3E2502}C:\program files\filezilla ftp client\filezilla.exe] => (Allow) C:\program files\filezilla ftp client\filezilla.exe
FirewallRules: [{8FD34F82-7C0F-437F-AEA3-641A8BB0E4AD}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe
FirewallRules: [{1C94A922-06CF-4EE2-935F-3169091C47B4}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe
FirewallRules: [{1450C5EB-F817-4CEC-A775-57E0206579CB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{6191D5D7-430B-4238-A0D7-89397E9A6921}C:\program files\java\jre1.8.0_121\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [UDP Query User{DA3CAF95-5983-41CC-9854-35697CDDEC14}C:\program files\java\jre1.8.0_121\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [TCP Query User{49EEF936-AFAA-42C0-82E9-D20F3AEA3A35}C:\program files (x86)\spider\spider.exe] => (Allow) C:\program files (x86)\spider\spider.exe
FirewallRules: [UDP Query User{3EBFAEC8-0F13-4290-AAF0-838D1F56FC93}C:\program files (x86)\spider\spider.exe] => (Allow) C:\program files (x86)\spider\spider.exe
FirewallRules: [TCP Query User{96F973D7-2C28-4A08-9DF5-4125760A2A82}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe
FirewallRules: [UDP Query User{DDB31545-0F24-46F1-AFE2-CEF51B9F3F7A}C:\eclipse\eclipse.exe] => (Allow) C:\eclipse\eclipse.exe
FirewallRules: [TCP Query User{92682207-557B-4DEC-822F-BCAA59052C81}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{3276320C-C8C5-4A55-9653-8AF12F3971F2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{2ECE696D-9A3D-40E4-9B3C-19A5BF9C62AC}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe
FirewallRules: [{EDCBF46E-D214-4C2B-8796-4BA12D201D46}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe
FirewallRules: [{D1BE3DC2-38DC-4AAB-99E4-565E630E4665}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{938B879F-A4B0-4337-8068-B578B75269E8}] => (Allow) C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\FFNativeMessage.exe
FirewallRules: [{7EBC605B-712F-4B8E-A880-A169B0492455}] => (Allow) C:\Program Files\VisualSVN Server\bin\VisualSVNServer.exe
FirewallRules: [{4BF33C26-E3F7-4DD8-B5B6-3A551C50379D}] => (Allow) C:\Program Files\VisualSVN Server\bin\vdfssvc.exe
FirewallRules: [{14259735-5997-4068-A533-3BBF94590337}] => (Allow) C:\Program Files\VisualSVN Server\bin\vdfssvc.exe
FirewallRules: [TCP Query User{02E907D9-A2AE-4670-AB9C-9310F3F80C24}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe] => (Allow) C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe
FirewallRules: [UDP Query User{B24E7D1B-4221-4C37-80CF-BBAC5F144FBF}C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe] => (Allow) C:\program files (x86)\smartbear\soapui-5.3.0\bin\soapui-5.3.0.exe
FirewallRules: [TCP Query User{04DCE8CF-EA24-4697-A781-6A268C11368B}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\jre\bin\java.exe
FirewallRules: [UDP Query User{D9385A3D-ECC4-4EBC-ABFD-F027BDEF5B2F}C:\program files\java\jdk1.8.0_144\jre\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\jre\bin\java.exe
FirewallRules: [TCP Query User{9FD5BA76-35BF-49BB-8238-8DEA83C552E4}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe
FirewallRules: [UDP Query User{D9927547-02EA-4F31-9EAB-574322C87BB7}C:\program files\java\jdk1.8.0_144\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_144\bin\java.exe
FirewallRules: [TCP Query User{6008AD76-6D21-4F73-B405-914097332A81}D:\neo4j\data\bin\neo4j-ce.exe] => (Allow) D:\neo4j\data\bin\neo4j-ce.exe
FirewallRules: [UDP Query User{5F058398-A48E-48C1-B78F-CD00E456FF9A}D:\neo4j\data\bin\neo4j-ce.exe] => (Allow) D:\neo4j\data\bin\neo4j-ce.exe
FirewallRules: [{EFC74D77-7E58-4780-87BC-0C3B55811129}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{CF6273E7-4DBE-49B3-9B01-F8018C0447C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{134D4055-57A0-4B3B-BF13-5C40E114D325}] => (Allow) C:\Program Files\Firefox Developer Edition\firefox.exe
FirewallRules: [{5F3A9AD3-6E45-4D36-A40F-BA5F0F11173D}] => (Allow) C:\Program Files\Firefox Developer Edition\firefox.exe
FirewallRules: [{5E4308E5-2173-4C4A-BDCD-F69AB52E8A96}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{C79A5D7D-8D34-4802-8E94-FFCC7926DF6C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{5D7FD56D-DDE4-4698-B400-041F7E646B1D}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{5B302737-F53D-459B-A500-AF665939D192}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{AA44C8BF-42DA-47BB-B1C0-82AE91197713}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{A032039A-4090-49C2-8A21-6E7C6FA96D09}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{1E7A5A01-829F-4FDA-A07C-DD03B7FB26FA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Points de restauration =========================

20-06-2018 22:28:28 Point de contrôle planifié

==================== Éléments en erreur du Gestionnaire de périphériques =============


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (06/24/2018 03:40:41 PM) (Source: SetupARService) (EventID: 0) (User: )
Description: Le service ne peut pas être démarré. System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet.
   à SetupAfterRebootService.SetupARService.OnStart(String[] args)
   à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (06/24/2018 03:40:38 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed

Error: (06/24/2018 03:39:12 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed

Error: (06/24/2018 03:30:14 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: adier)
Description: httphttp-2147467263

Error: (06/24/2018 03:08:10 PM) (Source: SetupARService) (EventID: 0) (User: )
Description: Le service ne peut pas être démarré. System.NullReferenceException: La référence d'objet n'est pas définie à une instance d'un objet.
   à SetupAfterRebootService.SetupARService.OnStart(String[] args)
   à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (06/24/2018 03:08:09 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed

Error: (06/24/2018 03:06:53 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed

Error: (06/24/2018 02:40:55 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme eclipse.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.

ID de processus : 9c0

Heure de début : 01d40bc0ca4af978

Heure de fin : 12

Chemin d'accès de l'application : C:\eclipse\eclipse.exe

ID de rapport : ce7d3a29-7902-4b80-a25b-1013997cc0ac

Nom complet du package défaillant : 

ID de l'application relative au package défaillant :


Erreurs système:
=============
Error: (06/24/2018 03:48:00 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID 
Windows.SecurityCenter.WscBrokerManager
 et l’APPID 
Non disponible
 au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/24/2018 03:47:08 PM) (Source: DCOM) (EventID: 10016) (User: adier)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID adier\adier de l’utilisateur (S-1-5-21-4206151704-2492553960-1182160334-1002) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/24/2018 03:46:48 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Le service Update Orchestrator Service est en attente de démarrage.

Error: (06/24/2018 03:42:34 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/24/2018 03:40:37 PM) (Source: Microsoft-Windows-Directory-Services-SAM) (EventID: 16953) (User: AUTORITE NT)
Description: Échec du chargement de la DLL de notification du mot de passe C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter avec l’erreur 126. Vérifiez que le chemin d’accès de la DLL de notification défini dans le Registre, HKLM\System\CurrentControlSet\Control\Lsa\Notification Packages, fait référence à un chemin d’accès correct et absolu (<lecteur>:\<chemin_d’accès>\<nom_fichier>.<ext>) et non à un chemin d’accès relatif ou non valide. Si le chemin d’accès de la DLL est correct, vérifiez que tous les fichiers de prise en charge se trouvent dans le même répertoire et que le compte système dispose d’un accès en lecture au chemin d’accès de la DLL et aux fichiers de prise en charge. Contactez le fournisseur de la DLL de notification pour une assistance supplémentaire. D’autres détails sont disponibles sur le Web à l’adresse http://go.microsoft.com/fwlink/?LinkId=245898.

Error: (06/24/2018 03:34:38 PM) (Source: DCOM) (EventID: 10016) (User: adier)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID adier\adier de l’utilisateur (S-1-5-21-4206151704-2492553960-1182160334-1002) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/24/2018 03:12:02 PM) (Source: DCOM) (EventID: 10016) (User: adier)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID adier\adier de l’utilisateur (S-1-5-21-4206151704-2492553960-1182160334-1002) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (06/24/2018 03:11:15 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.


Windows Defender:
===================================
Date: 2018-06-23 03:35:32.163
Description: 
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {AEE863B6-AA7F-4568-A368-AFB1B5EA3F17}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2018-06-14 00:46:03.379
Description: 
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {99A560AA-3317-43D7-BC4B-A1135D967540}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2018-06-12 02:17:36.834
Description: 
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {44916A80-7C3A-4CB6-AF70-2E6A31E61999}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2018-06-12 01:55:16.265
Description: 
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {EEBAB837-EC76-40EB-BA08-B3C4F372D766}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2018-06-12 01:38:20.819
Description: 
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {B250492B-61EF-4F8D-89A4-32054F6274C3}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2018-06-24 13:47:53.906
Description: 
Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures.
Nouvelle version de la signature : 
Version précédente de la signature : 1.269.1834.0
Source de mise à jour : Serveur Microsoft Update
Type de signature : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur : 
Version précédente du moteur : 1.1.14901.4
Code d’erreur : 0x8024402c
Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. 

Date: 2018-06-23 19:10:12.761
Description: 
Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures.
Nouvelle version de la signature : 
Version précédente de la signature : 1.269.1786.0
Source de mise à jour : Serveur Microsoft Update
Type de signature : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur : 
Version précédente du moteur : 1.1.14901.4
Code d’erreur : 0x80240438
Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. 

Date: 2018-06-23 15:44:38.375
Description: 
Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures.
Nouvelle version de la signature : 
Version précédente de la signature : 1.269.1786.0
Source de mise à jour : Serveur Microsoft Update
Type de signature : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur : 
Version précédente du moteur : 1.1.14901.4
Code d’erreur : 0x80240438
Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. 

Date: 2018-06-23 12:35:14.504
Description: 
Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures.
Nouvelle version de la signature : 
Version précédente de la signature : 1.269.1786.0
Source de mise à jour : Serveur Microsoft Update
Type de signature : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur : 
Version précédente du moteur : 1.1.14901.4
Code d’erreur : 0x80240438
Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. 

Date: 2018-06-22 15:25:05.577
Description: 
Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures.
Nouvelle version de la signature : 
Version précédente de la signature : 1.269.1708.0
Source de mise à jour : Serveur Microsoft Update
Type de signature : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur : 
Version précédente du moteur : 1.1.14901.4
Code d’erreur : 0x80240438
Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. 

==================== Infos Mémoire =========================== 

Processeur: AMD A10-5745M APU with Radeon(tm) HD Graphics 
Pourcentage de mémoire utilisée: 33%
Mémoire physique - RAM - totale: 15558.27 MB
Mémoire physique - RAM - disponible: 10417.82 MB
Mémoire virtuelle totale: 25798.27 MB
Mémoire virtuelle disponible: 20528.68 MB

==================== Lecteurs ================================

Drive ? (Windows) (Fixed) (Total:672.03 GB) (Free:248.34 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (RECOVERY) (Fixed) (Total:24.04 GB) (Free:15.23 GB) NTFS

\\?\Volume{38286ea2-20ad-4d49-a13c-14b3a22a5d90}\ (WINRE) (Fixed) (Total:0.39 GB) (Free:0.13 GB) NTFS
\\?\Volume{a78fbaa2-571f-4d84-9a10-ca4b292691f1}\ () (Fixed) (Total:0.87 GB) (Free:0.34 GB) NTFS
\\?\Volume{4277f7b2-738b-45dc-b9cb-7704e1c25116}\ () (Fixed) (Total:0.25 GB) (Free:0.14 GB) FAT32

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 698.6 GB) (Disk ID: BC9E3119)

Partition: GPT.

==================== Fin de Addition.txt ============================

 

THANK YOU VERY MUCH FOR YOUR HELP.

Link to post
Share on other sites