Aller au contenu

jpt

Membres
 Afficher le profil  Afficher son activité

  • Compteur de contenus

    293

  • Inscription

  • Dernière visite

Visiteurs récents du profil

10 155 visualisations du profil

jpt's Achievements

Mega Power Member

Mega Power Member (6/12)

2

Réputation sur la communauté

  1. jpt
    re.. opération KpRm terminée voici le lien : https://up.security-x.fr/file.php?h=Rb52004b48f1cf868f3ec54513daa20fc jpt
  2. jpt
    re bonjour le rapport Malwarebytes précédent n'est pas le bon...que voici https://up.security-x.fr/file.php?h=R3ca130a2493cf41f5e2dac2b3cc45d51 cordialement, jpt
  3. jpt
    bonjour Tomtom95 voila, c'est fait https://up.security-x.fr/file.php?h=Reeab0f912c9c36fc62ca48a6351cada2 Un grand merci pour ton aide, je passe le sujet en résolu cordialement jpt
  4. jpt
    bonjour tomtom95 re...je me suis planté en envoyant le rapport analyse.... voici le bon : https://up.security-x.fr/file.php?h=Rd5ce81f38990b5457d4bf2b308c9552c cordialement jpt
  5. jpt
    bonjour tomtom95 voici le rapport : https://up.security-x.fr/file.php?h=R11b6789153e4a6fac0bf02449a01b82c avec une remarque : le temps d'analyse ne semble pas correspondre à la "réalité"...j'ai lancé l'analyse quelques minutes après ta réponse , l'analyse n'était pas terminée à 1h ce matin. Encore merci, je reste à dispo pour clôturer ou pas le sujet... jpt
  6. jpt
    bonjour à ad-Web et à tomtom95 et merci à tomtom95 pour la prise en charge. -pour yahoo, je n'ai pas pu le désinstaller. - voici le lien du fixlog https://up.security-x.fr/file.php?h=Ra9bd022fb29e360d3ad48522c32bffdd je reste à disposition pour terminer les corrections et surtout Grand merci pour l'aide ! jpt
  7. jpt
    bonjour en complément je joints les 2 rapports FRST 1/ Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-08-2020 Exécuté par jp (administrateur) sur BIZANOS (ASUSTeK COMPUTER INC. X550LC) (05-08-2020 20:39:22) Exécuté depuis C:\Users\jp\Desktop Profils chargés: jp Platform: Windows 10 Home Version 2004 19041.388 (X64) Langue: Français (France) Navigateur par défaut: FF Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) () [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe <2> (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (ASUSTeK Computer Inc. -> ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTeK Computer Inc. -> ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe (ASUSTeK Computer Inc. -> ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe (FRANCE TELECOM -> ) [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\DedicarzService.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel(R) Software -> Intel Corporation) C:\Windows\System32\DptfParticipantDisplayService.exe (Logitech -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe (Logitech -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\sp6\LU1\LogitechUpdate.exe (Logitech -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\sp6\LU1\LULnchr.exe (Logitech -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2007.8-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2007.8-0\NisSrv.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe <2> (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <10> (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2> (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Reason Software Company Inc. -> Reason Software Company Inc.) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe (Reason Software Company Inc. -> Reason Software Company Inc.) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe <5> (WildTangent Inc -> WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe [111488 2014-09-15] (Intel(R) Software -> Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation -> NVIDIA Corporation) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3350760 2015-08-04] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3111880 2015-07-23] (Logitech -> Logitech, Inc.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-05-01] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé] HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation -> ASUS Cloud Corporation) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink -> CyberLink Corp.) HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [111120 2012-05-24] (CyberLink -> CyberLink) HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\Run: [OrangeInside] => C:\Users\jp\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [0 2016-05-12] () HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\Run: [Yahoo Messenger Updater] => C:\Users\jp\AppData\Roaming\Yahoo Messenger\YMUpdater\YMUpdater.exe [115144 2016-08-30] (Yahoo! Inc. -> Yahoo!, Inc.) HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\Run: [SugarSync] => C:\Program Files (x86)\SugarSync\SugarSync.exe [19982336 2019-10-23] (KeepItSafe, Inc.) [Fichier non signé] HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91701608 2020-07-30] (Skype Software Sarl -> Skype Technologies S.A.) HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [230400 2009-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation) HKLM\...\Print\Monitors\LIDIL hpzllw71: C:\WINDOWS\system32\hpzllw71.dll [53248 2009-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-01-04] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.) ==================== Tâches planifiées (Avec liste blanche) ============ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {01D683CA-BE85-41DF-AC64-10EF32619275} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [3200320 2013-05-21] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) Task: {048CE539-D68B-4B23-8EF3-C0139E5CA586} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation) Task: {0D2DF386-DD13-4BB3-B701-EA3B254EFE72} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MpCmdRun.exe [516776 2020-08-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {0DB49061-27A2-471F-9368-8EFCB228ED2A} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION Task: {0DDB73BB-E9A8-48C7-85F5-43E1321ED4B3} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969} Task: {129D24C3-38E8-4643-919E-BB1CBA963E04} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(1): Net -> stop "Orange Update Core Service" Task: {129D24C3-38E8-4643-919E-BB1CBA963E04} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(2): Net -> start "Orange Update Core Service" Task: {1A03B4FD-C4E1-413E-BC22-F9E950CAA619} - \WPD\SqmUpload_S-1-5-21-1305095608-3851282114-553510695-1002 -> Pas de fichier <==== ATTENTION Task: {23C9B1C3-BF48-4119-AD50-C455AC9B2903} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_403_Plugin.exe [1475640 2020-08-04] (Adobe Inc. -> Adobe) Task: {23CE0997-93B7-4A89-A85B-A93A480F78C8} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411856 2015-11-10] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {2E6D023B-A7A6-40B4-9F07-F5295AFB47DF} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe Task: {3141AAC7-DE44-4B29-9D2D-F58CA6F46ABD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1} Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe Task: {3C1882D3-0F4F-4C82-ADB8-C28F06A22BB9} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {3C3A23E7-6327-4D5F-8860-EAE5B0EF7B41} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {3F5FD477-09C8-4F02-8051-A35D6EAB802E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [972176 2020-05-12] (Microsoft Corporation -> Microsoft Corporation) Task: {48145D33-EC53-454E-A4C6-C67DA691BA9F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-05-12] (Google Inc -> Google LLC) Task: {48840939-D3BD-458E-A9F0-B6219B67E0B7} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA} Task: {50070E26-C452-4359-969F-1B623597B5F1} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [1957040 2013-01-04] (ASUSTeK Computer Inc. -> ) [Fichier non signé] Task: {5147FCF0-D497-4A58-BE92-B3C5D0E2EA5E} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-04] (Adobe Inc. -> Adobe) Task: {52C9C4B9-8792-4707-B50D-6036E0C405DE} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [109256 2020-05-17] (Mozilla Corporation -> Mozilla Foundation) Task: {53BA8BDF-B756-4018-A2C5-31EAFAFFEC51} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation) Task: {5780D2F4-9AA5-43AB-8805-9B164F16D611} - System32\Tasks\{18177BC0-7E8F-4883-AE60-164529EF0AB9} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jp\Downloads\MaConfig_win.exe -d C:\Users\jp\Downloads Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [30208 2019-12-07] (Microsoft Windows -> Microsoft Corporation) Task: {5B369277-61AA-47F9-A074-70E481942034} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION Task: {5DC85DDE-A4AB-4A5E-BE8C-D5CA1A7CEEFB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [123600 2020-08-04] (Mozilla Corporation -> Mozilla Foundation) Task: {6A21100B-AA80-438F-AC21-05E6C5AC2291} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [54488 2012-11-28] (ASUSTeK Computer Inc. -> ASUS) Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Task: {6EB84123-07C8-4480-83C8-BED98FBD7024} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION Task: {7C0C03ED-4D20-4255-B657-BB8A2195D44E} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E} Task: {7CFEFEDE-79E4-4344-A692-5CCC6A68BD4E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE} Task: {8B5C2B5A-3C18-4895-A5A0-FCE89F5C61D6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION Task: {916BCA31-CD5D-4BCF-A748-5A4CB7F77EBA} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16174352 2015-11-10] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {9415A366-A530-4AE7-97F9-90C9C20EE582} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1411856 2015-11-10] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {94CD9053-54E4-4574-ADC3-46C128E1EEF8} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61} Task: {A1ED5CD1-640A-4205-BBC7-669FFE03CFEC} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [1129040 2013-03-26] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {A3952110-6F58-4CA1-98FE-F042EE608B81} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [1036088 2013-04-29] (ASUSTeK Computer Inc. -> ASUS) Task: {A96A9BD4-D10F-412C-9E63-716FCA4A2B21} - System32\Tasks\Microsoft\Windows\orangeinside => C:\Users\jp\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [0 2016-05-12] () Task: {AD1A577A-628C-459C-BF93-DAB35B042350} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation) Task: {AD53AFB6-29DD-48A3-95E1-94418B453883} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION Task: {AFFE5F6D-280F-4E0A-8293-33DA85A07E88} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1331792 2020-05-07] (Adobe Inc. -> Adobe Inc.) Task: {B00EC13A-3439-48FA-8467-C39ACCEA671A} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {B5DBF6A0-6753-44E7-8830-BBC8F93B793D} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe Task: {B74E7C4A-0B2B-451E-BC56-F5F60A38DF0C} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [3200320 2013-05-21] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371} Task: {CECBAC98-57F0-4842-BD87-191215D46FCA} - System32\Tasks\maLivebox => C:\Program Files (x86)\Orange\ma Livebox\maLivebox.exe [149728 2015-04-27] (Orange -> Orange) Task: {CF72BD54-4605-4803-9568-AB5DE3BEDB0F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MpCmdRun.exe [516776 2020-08-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {CF91126B-EFB2-4194-BAD3-15C0E6C37540} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-05-12] (Google Inc -> Google LLC) Task: {D104F9C6-51BD-4883-AACD-C572ACC75BE2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {D3CE96E9-7E6C-45B3-A657-7718594FF8AA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION Task: {D4903083-3D77-43A0-B219-C540F5D8A14B} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION Task: {D4C592BF-70A5-40CB-AE37-64B096617F30} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MpCmdRun.exe [516776 2020-08-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {D7CC86C8-BD77-4088-8533-E1831BC25984} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [176240 2013-02-26] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) Task: {E47F1968-0033-47FC-9730-30CE9C364037} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [18400 2017-03-09] (ASUSTeK Computer Inc. -> AsusTek) Task: {E4E1AC8F-9C1E-40C1-9A9D-2C93429CEBE2} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION Task: {EAA919F6-A289-4BBA-BD96-05C3D8432531} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Install => C:\Program Files (x86)\Orange Update\install.bat [0 2020-02-25] () <==== ATTENTION Task: {EE78FE50-2FA5-441F-8764-2C9287AE0E49} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MpCmdRun.exe [516776 2020-08-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {EEB7571B-4611-4152-AE28-8FD6368BBC99} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION Task: {F50F9C5A-8AB7-403A-AEC2-E4D19BF05AAA} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316} Task: {F7B139DD-B4DC-40B6-99B9-A1DC6298F0DC} - System32\Tasks\Agent Activation Runtime\S-1-5-21-1305095608-3851282114-553510695-1002 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [13312 2020-06-27] (Microsoft Windows -> ) Task: {FE6D3BA0-5274-4AD6-8D5D-03E009B7A6F1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION Task: {FF27F757-51B6-45FB-B49B-6FF6D9553FDD} - \CCleanerSkipUAC -> Pas de fichier <==== ATTENTION (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{3687fdf7-2fcb-4e33-995f-5a26628ed1db}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{40542d9c-957f-4409-9373-8df276936a11}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-1305095608-3851282114-553510695-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://r.orange.fr/r/Oodc_home_ie HKU\S-1-5-21-1305095608-3851282114-553510695-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2020-06-27] (Microsoft Corporation -> Microsoft Corporation) BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-07-23] (Logitech -> Logitech, Inc.) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2020-06-27] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-07-23] (Logitech -> Logitech, Inc.) Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll Pas de fichier Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF DefaultProfile: vpcjk72i.default-1414507469400-1545997098439 FF ProfilePath: C:\Users\jp\AppData\Roaming\Mozilla\Firefox\Profiles\zfnr5u1a.default-release [2020-08-05] FF ProfilePath: C:\Users\jp\AppData\Roaming\Mozilla\Firefox\Profiles\vpcjk72i.default-1414507469400-1545997098439 [2020-05-18] FF Notifications: Mozilla\Firefox\Profiles\vpcjk72i.default-1414507469400-1545997098439 -> hxxps://forum.zebulon.fr FF Extension: (NoScript) - C:\Users\jp\AppData\Roaming\Mozilla\Firefox\Profiles\vpcjk72i.default-1414507469400-1545997098439\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2020-05-18] FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-08-31] [] [non signé] FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\McAfee\MSK => non trouvé(e) FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_403.dll [2020-08-04] (Adobe Inc. -> ) FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [Pas de fichier] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_403.dll [2020-08-04] (Adobe Inc. -> ) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-11-10] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-11-10] (Intel(R) Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [Pas de fichier] FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [2012-05-25] (Yahoo! Inc. -> Yahoo! Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-12-26] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2014-02-16] (WildTangent Inc -> ) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-04] (Adobe Inc. -> Adobe) R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-04-29] (ASUSTeK Computer Inc. -> ASUS) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [Fichier non signé] R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3051928 2020-05-12] (Microsoft Corporation -> Microsoft Corporation) R2 Dedicarz Service; C:\Program Files (x86)\Orange\ma Livebox\dedicarz\DedicarzService.exe [1970544 2014-09-15] (FRANCE TELECOM -> ) [Fichier non signé] R2 DptfParticipantDisplayService; C:\WINDOWS\System32\DptfParticipantDisplayService.exe [141944 2014-09-15] (Intel(R) Software -> Intel Corporation) S2 DptfParticipantProcessorService; C:\WINDOWS\system32\DptfParticipantProcessorService.exe [115656 2014-09-15] (Intel(R) Software -> Intel Corporation) S2 DptfPolicyConfigTDPService; C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe [116680 2014-09-15] (Intel(R) Software -> Intel Corporation) S2 DptfPolicyCriticalService; C:\WINDOWS\system32\DptfPolicyCriticalService.exe [148160 2014-09-15] (Intel(R) Software -> Intel Corporation) S2 DptfPolicyLpmService; C:\WINDOWS\system32\DptfPolicyLpmService.exe [124904 2014-09-15] (Intel(R) Software -> Intel Corporation) R2 ETDService; C:\Program Files\Elantech\ETDService.exe [147688 2015-08-04] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-01-28] (WildTangent Inc -> WildTangent) S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6933272 2020-03-01] (Malwarebytes Inc -> Malwarebytes) R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé] S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation -> NVIDIA Corporation) S2 Orange Update Core Service; C:\Program Files (x86)\Orange Update\OUService.exe [177384 2020-02-25] (Orange -> Orange) R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé] R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [297240 2018-04-11] (Reason Software Company Inc. -> Reason Software Company Inc.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-05] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-05] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [128024 2017-03-09] (ASUSTeK Computer Inc. -> ASUS Corporation) S3 DptfDevDisplay; C:\WINDOWS\System32\drivers\DptfDevDisplay.sys [70752 2014-09-15] (Intel(R) Software -> Intel Corporation) S3 DptfDevDram; C:\WINDOWS\System32\drivers\DptfDevDram.sys [145640 2014-09-15] (Intel(R) Software -> Intel Corporation) S3 DptfDevFan; C:\WINDOWS\System32\drivers\DptfDevFan.sys [50640 2014-09-15] (Intel(R) Software -> Intel Corporation) S3 DptfDevGen; C:\WINDOWS\System32\drivers\DptfDevGen.sys [78504 2014-09-15] (Intel(R) Software -> Intel Corporation) S3 DptfDevPch; C:\WINDOWS\system32\DRIVERS\DptfDevPch.sys [116752 2014-09-15] (Intel(R) Software -> Intel Corporation) S3 DptfDevPower; C:\WINDOWS\System32\drivers\DptfDevPower.sys [71808 2014-09-15] (Intel(R) Software -> Intel Corporation) S3 DptfDevProc; C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys [290256 2014-09-15] (Intel(R) Software -> Intel Corporation) S3 DptfManager; C:\WINDOWS\system32\DRIVERS\DptfManager.sys [495320 2014-09-15] (Intel(R) Software -> Intel Corporation) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-04-17] (Malwarebytes Corporation -> Malwarebytes) R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32680 2019-08-07] (ASUSTek Computer Inc. -> ASUS) S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [197264 2012-05-28] (McAfee, Inc. -> McAfee, Inc.) R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] (ASUSTeK Computer Inc. -> ) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [216056 2020-08-04] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-06-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) S3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [127136 2019-03-10] (Malwarebytes Corporation -> Malwarebytes) S3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [72864 2019-03-11] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-06] (Malwarebytes Inc -> Malwarebytes) S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [114040 2019-03-10] (Malwarebytes Corporation -> Malwarebytes) S3 mfencbdc; C:\WINDOWS\system32\DRIVERS\mfencbdc.sys [411944 2013-11-26] (McAfee, Inc. -> McAfee, Inc.) S3 mfencrk; C:\WINDOWS\system32\DRIVERS\mfencrk.sys [96112 2013-11-26] (McAfee, Inc. -> McAfee, Inc.) R1 MpKslDrv; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D0AC5527-DEF2-48D3-96F5-F4E555BEC808}\MpKslDrv.sys [73952 2020-08-05] (Microsoft Windows -> Microsoft Corporation) R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [78216 2020-08-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [430320 2020-08-05] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-05] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) =================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2020-08-05 20:39 - 2020-08-05 20:40 - 000035074 _____ C:\Users\jp\Desktop\FRST.txt 2020-08-05 20:33 - 2020-08-05 20:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime 2020-08-05 20:17 - 2020-08-05 20:20 - 000062660 _____ C:\Users\jp\Downloads\Addition.txt 2020-08-05 20:13 - 2020-08-05 20:40 - 000000000 ____D C:\FRST 2020-08-05 20:13 - 2020-08-05 20:20 - 000108584 _____ C:\Users\jp\Downloads\FRST.txt 2020-08-05 20:12 - 2020-08-05 20:12 - 002296320 _____ (Farbar) C:\Users\jp\Desktop\FRST64(1).exe 2020-08-05 20:09 - 2020-08-05 20:09 - 002296320 _____ (Farbar) C:\Users\jp\Downloads\FRST64.exe 2020-08-05 17:28 - 2020-08-05 17:28 - 000211822 _____ C:\Users\jp\Desktop\CpSpfExplosionLiban.pdf 2020-08-05 17:03 - 2020-08-05 17:03 - 000211820 _____ C:\Users\jp\Desktop\CpSpfExplosionLiban-1.pdf 2020-08-05 17:01 - 2020-08-05 17:01 - 000209922 _____ C:\Users\jp\Downloads\CpSpfExplosionLiban.pdf 2020-08-05 15:10 - 2020-08-05 15:10 - 000007203 _____ C:\Users\jp\Desktop\planning vestiaire aout 2020.ods 2020-08-05 14:59 - 2020-08-05 14:59 - 000017838 _____ C:\Users\jp\Downloads\Permanence espace solidaire Juin août.ods 2020-08-04 18:42 - 2020-08-04 18:42 - 000216056 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2020-08-04 16:13 - 2020-08-04 16:13 - 026271744 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 024264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 023433216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 019868672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 018766336 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 018068992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 008892600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 007593472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 007534160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 007070208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 006404608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 006356008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 005964496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 005821952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 005337504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 004783328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 003812304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 003547280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 002744320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-08-04 16:13 - 2020-08-04 16:13 - 002520048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001956016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001952392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001654824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001640888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001606656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001557824 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 001449280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001448448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001352232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001301592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001255744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 001246720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001218560 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001090560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001041408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001022976 _____ (Microsoft Corporation) C:\WINDOWS\system32\CBDHSvc.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001014872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 001008184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000991744 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000945664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000843264 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000801560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000798720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000779360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000774456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000758784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000705024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000696240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000673976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000617472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000612352 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000606880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000546456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IESettingSync.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000523720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000482616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000466928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000455168 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000453952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000443704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000423224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000420936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000413208 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000409552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000343992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-08-04 16:13 - 2020-08-04 16:13 - 000328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000311920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnclient.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000296448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConsoleLogon.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerPlatform.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovs.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2020-08-04 16:13 - 2020-08-04 16:13 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl 2020-08-04 16:13 - 2020-08-04 16:13 - 000217912 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000216064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Devices.Sensors.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000201016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000195128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2020-08-04 16:13 - 2020-08-04 16:13 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000179000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl 2020-08-04 16:13 - 2020-08-04 16:13 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Clipboard.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000163208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coreglobconfig.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000151864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWSDAHost.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000095032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-08-04 16:13 - 2020-08-04 16:13 - 000092952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModelOOBE.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DiagnosticInvoker.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiverExt.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Print.Workflow.Source.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiverExt.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe 2020-08-04 16:13 - 2020-08-04 16:13 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000021304 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000020632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerEnc.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowProxy.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL 2020-08-04 16:13 - 2020-08-04 16:13 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.Native.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000009269 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2020-08-04 16:13 - 2020-08-04 16:13 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106n.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd101.DLL 2020-08-04 16:13 - 2020-08-04 16:13 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll 2020-08-04 16:13 - 2020-08-04 16:13 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 017540608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 014754816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 010922808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 010336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 009034752 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 007992824 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 007964416 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 007593544 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 006920192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 006709248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 006175232 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 006060544 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 006029312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 004734976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 004629328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 003925856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 003906048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 003860480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 003810816 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 003779896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 003778560 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 003752448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 003749376 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002963456 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 002918216 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002631168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002585912 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002568192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002566144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002466864 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002399744 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002338304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002311680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002305024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002286128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002245632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002177528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002131024 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002104320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002077696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 002026496 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001978656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001876480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001784488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001766912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001712128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001701368 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001668904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001641472 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001550336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001530880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001509736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001507328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MoUsoCoreWorker.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 001495552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001491968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001474048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001422336 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001414144 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 001403904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001378568 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001374720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001359872 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsf3gip.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001323008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001305600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001303040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001286560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001253888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001239552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001222656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001207296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001195520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001182008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001145344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001126472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001114112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001082168 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001071224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001069056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001058816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001048480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001043456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001006592 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001005056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000994248 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000968192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000966872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000957952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000937464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000933176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000914200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000902976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 000889384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000881112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000876544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000856328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000831016 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000824832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000824328 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000799552 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000791552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000753152 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000748360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000721024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000704496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockController.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000676088 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000644096 _____ C:\WINDOWS\system32\WindowManagementAPI.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\agentactivationruntimewindows.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000634680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000633856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\agentactivationruntime.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000623960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000623392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000619520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.ConversationalAgent.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 000596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000595512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000590848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000565760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000565760 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000560400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000555744 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000539960 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000539256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000531456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000522040 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000520192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000512512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000487936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000487552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000475704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellAPI.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockHostingFramework.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000454968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000418816 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000412672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.Phone.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000405304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.ESim.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000395600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000389952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerPlatform.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovs.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000373760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreShellAPI.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000367104 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnclient.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000360960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AarSvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000319808 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000317952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000313152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemSettings.DataModel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Devices.Sensors.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000280064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl 2020-08-04 16:12 - 2020-08-04 16:12 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordEnrollmentManager.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000260288 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000253016 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000249656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl 2020-08-04 16:12 - 2020-08-04 16:12 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.Desktop.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000227640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeopleBand.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtcModel.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000215896 _____ (Microsoft Corporation) C:\WINDOWS\system32\coreglobconfig.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppExtension.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\useractivitybroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000191488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWorkflowService.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000180024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2020-08-04 16:12 - 2020-08-04 16:12 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000171024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\useractivitybroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000148280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyServer.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredDialogBroker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppExtension.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000132728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CaptureService.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000113112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticInvoker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000086784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemUWPLauncher.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Print.Workflow.Source.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000071792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyClient.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000070968 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.internal.shellcommon.AccountsControlExperience.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemUWPLauncher.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000061752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInput.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagnosticdataquery.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000052664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ResourcePolicyClient.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000040248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkPS.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIMgrBroker.exe 2020-08-04 16:12 - 2020-08-04 16:12 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWorkflowProxy.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000024288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerEnc.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.Native.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDJPN.DLL 2020-08-04 16:12 - 2020-08-04 16:12 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIManagerBrokerps.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106n.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd106.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbd101.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2020-08-04 16:12 - 2020-08-04 16:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 005766168 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 004485216 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2020-08-04 16:11 - 2020-08-04 16:11 - 001762632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 001556480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000879104 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000858624 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe 2020-08-04 16:11 - 2020-08-04 16:11 - 000781312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000678200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2020-08-04 16:11 - 2020-08-04 16:11 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000506672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000504832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000423224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000380632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManager.exe 2020-08-04 16:11 - 2020-08-04 16:11 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.internal.shellcommon.shareexperience.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000215864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2020-08-04 16:11 - 2020-08-04 16:11 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBAUDIO.sys 2020-08-04 16:11 - 2020-08-04 16:11 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Internal.Input.ExpressiveInput.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe 2020-08-04 16:11 - 2020-08-04 16:11 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.internal.shellcommon.AccountsControlExperience.dll 2020-08-04 16:11 - 2020-08-04 16:11 - 000076992 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManagerForUser.dll 2020-08-04 16:01 - 2020-06-30 05:04 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-08-04 16:01 - 2020-06-30 04:58 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-08-04 14:37 - 2020-08-05 19:11 - 000000000 ____D C:\Program Files\Mozilla Firefox ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2020-08-05 20:41 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-08-05 20:32 - 2014-03-02 18:32 - 000000000 ____D C:\Users\jp\AppData\Roaming\ZHP 2020-08-05 19:27 - 2016-11-18 12:59 - 000000000 ____D C:\Users\jp\AppData\LocalLow\Mozilla 2020-08-05 19:26 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-08-05 19:15 - 2015-12-26 11:57 - 000000062 _____ C:\Users\jp\AppData\Roaming\sp_data.sys 2020-08-05 19:15 - 2015-08-02 16:10 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture 2020-08-05 19:13 - 2015-08-02 16:09 - 000000000 __SHD C:\Users\jp\IntelGraphicsProfiles 2020-08-05 19:12 - 2020-06-06 09:12 - 000000000 ____D C:\Users\jp 2020-08-05 19:12 - 2017-04-16 15:08 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2020-08-05 19:11 - 2020-06-06 11:46 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-08-05 19:11 - 2020-06-06 11:21 - 000008192 ___SH C:\DumpStack.log.tmp 2020-08-05 19:11 - 2020-06-06 11:21 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-08-05 19:11 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2020-08-05 19:11 - 2017-04-16 15:13 - 000000000 ____D C:\ProgramData\NVIDIA 2020-08-05 19:11 - 2014-01-05 09:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2020-08-05 18:41 - 2017-11-04 14:55 - 000000000 ____D C:\Users\jp\AppData\Local\Packages 2020-08-05 17:27 - 2019-03-23 22:14 - 000000000 ____D C:\Users\jp\Documents\BUREAU 2020-08-05 12:00 - 2020-06-06 11:46 - 000003544 _____ C:\WINDOWS\system32\Tasks\ASUS Live Update1 2020-08-05 12:00 - 2020-06-06 11:46 - 000003534 _____ C:\WINDOWS\system32\Tasks\ASUS Live Update2 2020-08-05 09:14 - 2018-02-19 11:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2020-08-04 21:49 - 2020-06-06 11:46 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2020-08-04 21:49 - 2014-01-05 09:09 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-08-04 18:41 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2020-08-04 18:32 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-08-04 17:03 - 2019-01-19 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2020-08-04 17:02 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2020-08-04 17:00 - 2020-06-06 11:40 - 001772722 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-08-04 17:00 - 2019-12-07 16:49 - 000794310 _____ C:\WINDOWS\system32\perfh00C.dat 2020-08-04 17:00 - 2019-12-07 16:49 - 000150424 _____ C:\WINDOWS\system32\perfc00C.dat 2020-08-04 16:53 - 2020-06-06 11:21 - 000314752 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-08-04 16:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-08-04 16:49 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System 2020-08-04 16:02 - 2020-06-06 06:45 - 000000000 ___HD C:\$WinREAgent 2020-08-04 15:47 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2020-08-04 14:45 - 2020-06-06 11:46 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2020-08-04 14:44 - 2017-04-13 11:13 - 000002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-08-04 14:42 - 2020-06-06 11:46 - 000003356 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1305095608-3851282114-553510695-1002 2020-08-04 14:41 - 2020-06-06 09:12 - 000002433 _____ C:\Users\jp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-08-04 14:41 - 2015-08-02 16:14 - 000000000 ___RD C:\Users\jp\OneDrive 2020-08-04 14:33 - 2020-06-27 15:28 - 009585208 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2020-08-04 14:33 - 2020-06-06 11:46 - 000004738 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier 2020-08-04 14:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2020-08-04 14:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Macromed ==================== Fichiers à la racine de certains dossiers ======== 2015-07-16 22:07 - 2019-07-23 07:44 - 003071872 _____ (Nicolas Coolman) C:\Users\jp\ZHPCleaner.exe 2015-12-26 11:57 - 2020-08-05 19:15 - 000000062 _____ () C:\Users\jp\AppData\Roaming\sp_data.sys 2015-02-24 21:42 - 2015-02-24 21:42 - 000000044 _____ () C:\Users\jp\AppData\Roaming\WB.CFG 2014-03-02 20:48 - 2018-09-09 09:07 - 000007598 _____ () C:\Users\jp\AppData\Local\resmon.resmoncfg ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ======================== 2/ Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 05-08-2020 Exécuté par jp (05-08-2020 20:41:28) Exécuté depuis C:\Users\jp\Desktop Windows 10 Home Version 2004 19041.388 (X64) (2020-06-06 09:47:44) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-1305095608-3851282114-553510695-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1305095608-3851282114-553510695-503 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1305095608-3851282114-553510695-1004 - Limited - Enabled) Invité (S-1-5-21-1305095608-3851282114-553510695-501 - Limited - Disabled) jp (S-1-5-21-1305095608-3851282114-553510695-1002 - Administrator - Enabled) => C:\Users\jp WDAGUtilityAccount (S-1-5-21-1305095608-3851282114-553510695-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) 64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 20.009.20074 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated) Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.403 - Adobe) AIO_Scan (HKLM-x32\...\{104066F4-5897-4067-85D3-4C88B67CCF75}) (Version: 130.0.421.000 - Hewlett-Packard) Hidden Assistant Mise à niveau de Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17346 - Microsoft Corporation) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.3 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.2 - ASUS) ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.18 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0005 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.0 - ASUS) ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.18.159 - ASUS Cloud Corporation) ASUSDVD (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.) Hidden ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.4924.52 - CyberLink Corp.) AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0039 - ASUS) Azteca (HKLM-x32\...\WTA-7a98b0ce-a9fa-4f69-bed5-4816c2f5c3c5) (Version: 2.2.0.97 - WildTangent) Hidden Bejeweled 3 (HKLM-x32\...\WTA-c615c20f-11a0-443e-b480-f3905dc56303) (Version: 2.2.0.97 - WildTangent) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden Classic Shell (HKLM\...\{98BB5224-BC5D-4028-9D20-536C1C263AA9}) (Version: 4.0.2 - IvoSoft) Copy (HKLM-x32\...\{9BE466FF-70B7-4DA8-807C-DB4C3610FDAA}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden Cut the Rope (HKLM-x32\...\WTA-d13c6020-81e9-46e9-83b9-042f59d13807) (Version: 3.0.2.38 - WildTangent) Hidden CyberLink LabelPrint 2.5 (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5415 - CyberLink Corp.) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.3625 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden DJ_AIO_NS_LP_DocCD (HKLM-x32\...\{C5C00116-FFD7-465e-8316-6055F320E7E5}) (Version: 90.0.222.000 - Hewlett-Packard) Hidden DJ_AIO_ProductContext (HKLM-x32\...\{D7CDAC3E-0962-41D6-829D-6AB524120B43}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden DJ_AIO_Software (HKLM-x32\...\{F2C4B91A-250C-4A68-94EB-9643151F892B}) (Version: 140.0.428.000 - Hewlett-Packard) Hidden DJ_AIO_Software_min (HKLM-x32\...\{EED759C0-F201-4422-86FA-264075B882ED}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden DriversCloud.com (64 bits) (HKLM\...\{D3536C71-00CD-457F-8624-CBD51FD43F1C}) (Version: 10.0.2.0 - Cybelsoft) ELAN Touchpad 15.8.4.3_X64_WHQL (HKLM\...\Elantech) (Version: 15.8.4.3 - ELAN Microelectronic Corp.) F4100 (HKLM-x32\...\{5C3AF724-B144-4AC1-B2CB-FB6D447116F1}) (Version: 140.0.425.000 - Hewlett-Packard) Hidden F4100_Help (HKLM-x32\...\{A6B90148-02C5-4fd3-8D7A-EF2386835CB9}) (Version: 90.0.222.000 - Hewlett-Packard) Hidden Fotogalerie (HKLM-x32\...\{3CBD94C1-BA15-488C-888B-D8DD296CC6DC}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galerie de photos (HKLM-x32\...\{446CC8CE-0E90-44F7-ADD0-774B243EF090}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Google Earth Pro (HKLM\...\{B6EAFE41-5723-40EB-869B-4AF44CA17B35}) (Version: 7.3.3.7699 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP) HP Deskjet All-In-One Software (HKLM\...\{2CB8566A-8EA6-417A-BAB1-1B10A88C79BB}) (Version: 14.0 - HP) HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.0.0.2023 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.31.1000 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4549 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation) Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation) Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.82 - Logitech) ma Livebox (HKLM-x32\...\ma Livebox) (Version: 3.2.0.5 - Orange) Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes) MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden Mediatek Bluetooth (HKLM\...\{E0B1ECF5-766A-5464-BFE2-2C1BED6A49FB}) (Version: 11.0.748.2 - Mediatek) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office Famille et Etudiant 2013 - fr-fr (HKLM\...\HomeStudentRetail - fr-fr) (Version: 15.0.5249.1001 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\OneDriveSetup.exe) (Version: 20.114.0607.0002 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mises à jour NVIDIA 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (HKLM-x32\...\{03CC9D58-B132-4CC0-A521-4F3660AA43C7}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{701FE1BC-834A-4857-AF62-6EBA50CFBC78}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{8E6E8CBB-8E58-493C-943F-4664F5F2FEDB}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{A17946CA-18E5-4CF0-8D55-A56D804718F8}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{AE8044B5-FCA3-4EBE-AC78-0FB3A6E8DC76}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 77.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 77.0 (x86 en-US)) (Version: 77.0 - Mozilla) Mozilla Firefox 79.0 (x64 fr) (HKLM\...\Mozilla Firefox 79.0 (x64 fr)) (Version: 79.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 62.0.3 - Mozilla) Mozilla Thunderbird 38.2.0 (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 38.2.0 (x86 fr)) (Version: 38.2.0 - Mozilla) Mozilla Thunderbird 38.4.0 (x86 fr) (HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\Mozilla Thunderbird 38.4.0 (x86 fr)) (Version: 38.4.0 - Mozilla) MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS) NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP) Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5249.1001 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5249.1001 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-040C-0000-0000000FF1CE}) (Version: 15.0.5249.1001 - Microsoft Corporation) Hidden Orange Inside (HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\Orange Inside) (Version: V1.4.3.5 - Orange) Orange Update (HKLM-x32\...\Orange Update) (Version: 4.0.0.0 - Orange) Package de pilotes Windows - ASUS (ATP) Mouse (06/17/2015 1.0.0.262) (HKLM\...\14588A15B66655338DBCC021FFA81E31DC281859) (Version: 06/17/2015 1.0.0.262 - ASUS) Panneau de configuration NVIDIA 388.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.73 - NVIDIA Corporation) Hidden Peggle (HKLM-x32\...\WTA-aa5c3de2-2f35-4931-a1df-eb3246eff429) (Version: 2.2.0.95 - WildTangent) Hidden Penguins! (HKLM-x32\...\WTA-402aa952-53ef-4f2b-8772-d68b99387ddb) (Version: 2.2.0.98 - WildTangent) Hidden PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Raccolta foto (HKLM-x32\...\{D04EBB49-C985-4A38-8695-62000861293A}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 1.2.0.41 - Ralink) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.70 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7571 - Realtek Semiconductor Corp.) Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype version 8.63 (HKLM-x32\...\Skype_is1) (Version: 8.63 - Skype Technologies S.A.) SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) SugarSync (HKLM-x32\...\SugarSync) (Version: 3.11.2.3 - KeepItSafe, Inc.) System Requirements Lab for Intel (HKLM-x32\...\{1EBDF6D2-CEA0-484C-A23E-2DDAD7FD0DD0}) (Version: 4.5.22.0 - Husdawg, LLC) Tales of Lagoona (HKLM-x32\...\WTA-78579824-7373-494c-b122-bfd78d2c13d6) (Version: 2.2.0.110 - WildTangent) Hidden Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden Unchecky v1.2 (HKLM-x32\...\Unchecky) (Version: 1.2 - Reason Software Company Inc.) UnloadSupport (HKLM-x32\...\{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}) (Version: 11.0.0 - Hewlett-Packard) Hidden Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation) Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.0.0 - WildTangent) WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.2 - WildTangent) Hidden Windows Driver Package - ASUS (ATP) Mouse (05/09/2013 1.0.0.173) (HKLM\...\1016059FBF327ED9E3BAE758BD08CF10D3C6252D) (Version: 05/09/2013 1.0.0.173 - ASUS) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.) Packages: ========= - Games App - -> C:\Program Files\WindowsApps\WildTangentGames.-GamesApp-_1.0.3.28_x86__qt5r5pa5dyg8m [2015-06-30] (WildTangent Games) ASUS Tutorial -> C:\Program Files\WindowsApps\B9ECED6F.ASUSTutorial_1.0.0.43_neutral__qmba6cd70vzyy [2013-12-25] (ASUSTeK COMPUTER INC.) ASUS Welcome -> C:\Program Files\WindowsApps\B9ECED6F.ASUSWelcome_1.0.1.0_x64__qmba6cd70vzyy [2015-08-02] (ASUSTeK COMPUTER INC.) Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1800.1.0_x86__kgqvnymyfvs32 [2020-08-04] (king.com) Facebook -> C:\Program Files\WindowsApps\Facebook.Facebook_186.2619.19263.0_x86__8xx8rvfyw5nnt [2019-10-22] (Facebook Inc) Fnac -> C:\Program Files\WindowsApps\FNAC.Fnac_1.3.0.24_neutral__nvqgjz3f9444m [2013-12-26] (FNAC) Fresh Paint -> C:\Program Files\WindowsApps\Microsoft.FreshPaint_3.1.10383.1000_x86__8wekyb3d8bbwe [2019-06-08] (Microsoft Corporation) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_115.1.152.0_x64__v10z8vjag6ke6 [2020-06-05] (HP Inc.) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.7162.0_x64__8wekyb3d8bbwe [2020-08-04] (Microsoft Studios) [MS Ad] MSN Cuisine & Vins -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-14] (Microsoft Corporation) [MS Ad] MSN Finance -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation) [MS Ad] MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation) [MS Ad] MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-28] (Microsoft Corporation) [MS Ad] MSN Voyage -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2015-07-14] (Microsoft Corporation) [MS Ad] Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_3.1.1.0_x64__a2t3txkz9j1jw [2020-02-07] (MAGIX) Pinball FX2 -> C:\Program Files\WindowsApps\Microsoft.Studios.PinballFx2_1.8.1.957_x86__8wekyb3d8bbwe [2015-05-01] (Microsoft Studios) ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [ !SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2019-10-23] (SugarSync, Inc.) [Fichier non signé] ShellIconOverlayIdentifiers: [ !SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2019-10-23] (SugarSync, Inc.) [Fichier non signé] ShellIconOverlayIdentifiers: [ !SugarSyncSharedSyncing] -> {F7395C2E-A5D8-4a32-9536-5C6A9F1DC450} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2019-10-23] (SugarSync, Inc.) [Fichier non signé] ShellIconOverlayIdentifiers: [ !SugarSyncSynced] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2019-10-23] (SugarSync, Inc.) [Fichier non signé] ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-10-20] (IvoSoft) [Fichier non signé] ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2013-10-20] (IvoSoft) [Fichier non signé] ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2019-10-23] (SugarSync, Inc.) [Fichier non signé] ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2-x32: [OIShellExt] -> {38FB5F89-9641-413E-86EA-2F804A88762C} => C:\Users\jp\AppData\Roaming\Orange\OrangeInside\OIExt.dll [2016-05-10] (Orange) [Fichier non signé] ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier ContextMenuHandlers3: [BackupContextMenuExtension] -> {b1b96b20-da1d-4a3c-92c1-7229b32f2325} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSContextMenu.DLL [2012-12-19] (ASUS Cloud Corporation -> ASUS Cloud Corporation) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers3-x32: [OIShellExt] -> {38FB5F89-9641-413E-86EA-2F804A88762C} => C:\Users\jp\AppData\Roaming\Orange\OrangeInside\OIExt.dll [2016-05-10] (Orange) [Fichier non signé] ContextMenuHandlers4-x32: [OIShellExt] -> {38FB5F89-9641-413E-86EA-2F804A88762C} => C:\Users\jp\AppData\Roaming\Orange\OrangeInside\OIExt.dll [2016-05-10] (Orange) [Fichier non signé] ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-19] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers5-x32: [OIShellExt] -> {38FB5F89-9641-413E-86EA-2F804A88762C} => C:\Users\jp\AppData\Roaming\Orange\OrangeInside\OIExt.dll [2016-05-10] (Orange) [Fichier non signé] ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll [2019-10-23] (SugarSync, Inc.) [Fichier non signé] ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-02-15] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Drivers32-x32: [vidc.VP60] => C:\WINDOWS\system32\vp6vfw.dll HKLM\...\Drivers32-x32: [vidc.VP61] => C:\WINDOWS\system32\vp6vfw.dll ==================== Raccourcis & WMI ======================== ==================== Modules chargés (Avec liste blanche) ============= 2019-01-19 18:39 - 2020-07-30 19:15 - 001899520 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\ffmpeg.dll 2019-01-19 18:39 - 2020-07-30 19:15 - 000115712 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\libegl.dll 2019-01-19 18:39 - 2020-07-30 19:15 - 006668800 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\libglesv2.dll 2014-09-15 11:01 - 2014-09-15 11:01 - 000549888 _____ () [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\netsnmp.dll 2014-09-15 11:01 - 2014-09-15 11:01 - 000182784 _____ () [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\ProxyDetection.dll 2014-09-15 11:01 - 2014-09-15 11:01 - 000157184 _____ () [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\pupnp.dll 2010-08-06 12:15 - 2010-08-06 12:15 - 000071680 _____ (Hewlett-Packard) [Fichier non signé] c:\windows\system32\hpzinw12.dll 2010-08-06 12:15 - 2010-08-06 12:15 - 000089600 _____ (Hewlett-Packard) [Fichier non signé] c:\windows\system32\hpzipm12.dll 2013-10-20 18:47 - 2013-10-20 18:47 - 000774144 _____ (IvoSoft) [Fichier non signé] C:\Program Files\Classic Shell\ClassicExplorer64.dll 2014-09-15 11:01 - 2014-09-15 11:01 - 002517504 _____ (Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\QtCore4.dll 2014-09-15 11:01 - 2014-09-15 11:01 - 001007104 _____ (Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\QtNetwork4.dll 2014-09-15 11:01 - 2014-09-15 11:01 - 000086070 _____ (Open Source Software community project) [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\pthreadVC2.dll 2018-01-18 13:18 - 2019-10-23 18:41 - 003059712 _____ (SugarSync, Inc.) [Fichier non signé] C:\Program Files (x86)\SugarSync\x64\SugarSyncShellExt_x64.dll 2014-09-15 11:01 - 2014-09-15 11:01 - 001098240 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Orange\ma Livebox\dedicarz\LIBEAY32.dll 2012-11-26 12:14 - 2012-11-26 12:14 - 001600000 _____ (TODO: <Company name>) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\Alb_ASUSLib.dll 2013-01-29 09:53 - 2013-01-29 09:53 - 006221824 _____ (TODO: <Company name>) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll ==================== Alternate Data Streams (Avec liste blanche) ======== ==================== Mode sans échec (Avec liste blanche) ================== ==================== Association (Avec liste blanche) ================= ==================== Internet Explorer sites de confiance/sensibles ========== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\ma-config.com -> hxxp://ma-config.com IE trusted site: HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\ma-config.com -> hxxps://ma-config.com IE trusted site: HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\touslesdrivers.com -> hxxp://touslesdrivers.com ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2013-08-22 15:25 - 2020-08-05 19:11 - 000003596 _____ C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 search.namequery.com 127.0.0.1 search.us.namequery.com 127.0.0.1 search64.namequery.com 127.0.0.1 bh.namequery.com 127.0.0.1 namequery.nettrace.co.za 127.0.0.1 search2.namequery.com 127.0.0.1 m229.absolute.com 127.0.0.1 m*.absolute.com 127.0.0.1 209.53.113.223 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com 0.0.0.0 media.opencandy.com 0.0.0.0 cdn.opencandy.com 0.0.0.0 tracking.opencandy.com 0.0.0.0 api.opencandy.com 0.0.0.0 api.recommendedsw.com 0.0.0.0 rp.yefeneri2.com 0.0.0.0 os.yefeneri2.com 0.0.0.0 os2.yefeneri2.com 0.0.0.0 installer.betterinstaller.com 0.0.0.0 installer.filebulldog.com 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net 0.0.0.0 inno.bisrv.com 0.0.0.0 nsis.bisrv.com 0.0.0.0 cdn.file2desktop.com 0.0.0.0 cdn.goateastcach.us 0.0.0.0 cdn.guttastatdk.us 0.0.0.0 cdn.inskinmedia.com 0.0.0.0 cdn.insta.oibundles2.com ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\3.0\bin\x64;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-1305095608-3851282114-553510695-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Pas de fichier) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run: => "ETDCtrl" HKLM\...\StartupApproved\Run32: => "Adobe ARM" HKLM\...\StartupApproved\Run32: => "ASUSPRP" HKLM\...\StartupApproved\Run32: => "ASUSWebStorage" HKLM\...\StartupApproved\Run32: => "CLMLServer" HKLM\...\StartupApproved\Run32: => "RemoteControl10" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\StartupApproved\Run: => "Power2GoExpress" HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\StartupApproved\Run: => "Yahoo Messenger Updater" HKU\S-1-5-21-1305095608-3851282114-553510695-1002\...\StartupApproved\Run: => "SugarSync" ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{2D0590EE-36D0-4B95-977C-6DE2320D51B6}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{D0A91008-D7BF-4973-B8D5-CC7133B21144}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{287DBE33-5A7F-4223-B00B-47ACBC379D8D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOpsMP.exe (Valve Corp. -> ) [Fichier non signé] FirewallRules: [{08976BA5-6377-4DD3-8DC6-447B5CE15237}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOpsMP.exe (Valve Corp. -> ) [Fichier non signé] FirewallRules: [{EC79E3E4-3EEB-4E2C-B029-30835AE33180}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{5F3F6CD5-0BC8-4A5D-8DF1-8E0045EDE48B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{91DDE243-2A4B-481C-92E3-C93910821CB5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{6A099008-79BF-4D68-8EE9-CB289E5D1BC0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{628EFFBA-1A28-48E8-93B6-F2B27C8BE91B}] => (Allow) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe => Pas de fichier FirewallRules: [{6A1F74B8-6AC3-4E32-B6CB-18E657EE8415}] => (Allow) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe => Pas de fichier FirewallRules: [{40584A4A-2685-47AD-B162-BBC75D11B1A5}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe => Pas de fichier FirewallRules: [{20E5093C-D151-42F4-AEEF-80B1A9F59A6F}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe => Pas de fichier FirewallRules: [{7015CD55-B799-48FE-AA6D-0420731A8D94}] => (Allow) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe => Pas de fichier FirewallRules: [{39BE36E4-AABE-4FD2-A563-4D7D4150A84A}] => (Allow) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe => Pas de fichier FirewallRules: [{1734C4B7-9609-4BF5-8D33-33003A4E56D9}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe => Pas de fichier FirewallRules: [{B545D80A-71F2-43CD-8B83-D3B9C86C9AE9}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe => Pas de fichier FirewallRules: [{EE03DD75-2802-4F8E-8705-D41B8884F33D}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginLivebox.exe (FRANCE TELECOM -> ) [Fichier non signé] FirewallRules: [{ABDEAA68-7DE9-4744-84C7-67F92269BA92}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginLivebox.exe (FRANCE TELECOM -> ) [Fichier non signé] FirewallRules: [{63DB7CFB-47F3-4597-A4A1-3569A41CADDF}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginDmControlPoint.exe => Pas de fichier FirewallRules: [{2168CBD5-AD16-4115-B272-EEABBD63DD2F}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginDmControlPoint.exe => Pas de fichier FirewallRules: [{6C41DBEF-0DB1-48C9-B47E-52134959C366}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\LiveboxManager.exe (FRANCE TELECOM -> ) [Fichier non signé] FirewallRules: [{384F4EEA-53DB-43ED-8632-BFC647342AC1}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\LiveboxManager.exe (FRANCE TELECOM -> ) [Fichier non signé] FirewallRules: [{0DFBB229-13E0-4771-8BAA-128D9FFC549F}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\DedicarzService.exe (FRANCE TELECOM -> ) [Fichier non signé] FirewallRules: [{77E8C1EC-19C5-4FE8-B36C-040172E97BF1}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\DedicarzService.exe (FRANCE TELECOM -> ) [Fichier non signé] FirewallRules: [{520A2924-BF92-45E3-AF67-A71BD80589BF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{D8918009-D1F4-4A83-B1A1-37A0B6324CE9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{709746B6-F082-4D0E-8702-C77F343E3565}] => (Allow) C:\Program Files\ma-config.com\MaConfigAgent.exe => Pas de fichier FirewallRules: [{015B2213-3804-418B-851E-BAA4B913C193}] => (Allow) C:\Program Files\ma-config.com\MaConfigAgent.exe => Pas de fichier FirewallRules: [{B7841CEE-BD66-4056-842A-05C83FB67BEA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé] FirewallRules: [{9EF55BBF-EDC3-4767-B9D0-27313AC3E026}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé] FirewallRules: [{214D36B2-278D-4375-9604-8E559C0EB95C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Sims 3\Game\Bin\Sims3Launcher.exe (Electronic Arts -> Electronic Arts, Inc.) FirewallRules: [{D9979B1B-35A7-40F0-AEA3-62E536B1BDB3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Sims 3\Game\Bin\Sims3Launcher.exe (Electronic Arts -> Electronic Arts, Inc.) FirewallRules: [{444099AE-6AE6-4D9A-A733-854E6B092814}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe (Haemimont Games) [Fichier non signé] FirewallRules: [{211F45FF-FE6D-4ED9-92A4-EC1B218326AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe (Haemimont Games) [Fichier non signé] FirewallRules: [{2BEF64C4-32C8-4F1A-AE84-86183577D9A5}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe => Pas de fichier FirewallRules: [{91D7956C-7DB6-40E1-83E5-D6BD197E95DF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe => Pas de fichier FirewallRules: [{8304C21A-227F-42F7-9C99-ABF1070E1D83}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{B6844023-FB88-40E3-BA32-DA4BF86D57DA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [UDP Query User{D7A7EC71-E607-4B54-89CA-BE28F5A043D4}C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe] => (Block) C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe (Yahoo! Inc. -> Yahoo! Inc.) FirewallRules: [TCP Query User{8466EDB3-0165-4D52-A5AD-8067416BABBB}C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe] => (Block) C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe (Yahoo! Inc. -> Yahoo! Inc.) FirewallRules: [UDP Query User{FFF9606A-342A-4B92-9160-B742B52ED90E}C:\program files (x86)\orange\assistance livebox\dist\st2.exe] => (Allow) C:\program files (x86)\orange\assistance livebox\dist\st2.exe => Pas de fichier FirewallRules: [TCP Query User{CE82025E-8BA6-4D4B-BBBA-D36C98FF8B6C}C:\program files (x86)\orange\assistance livebox\dist\st2.exe] => (Allow) C:\program files (x86)\orange\assistance livebox\dist\st2.exe => Pas de fichier FirewallRules: [{0801108B-1B36-43FB-AE46-67FCA97FC5CE}] => (Block) C:\program files (x86)\skype\phone\skype.exe => Pas de fichier FirewallRules: [{4ED20DB5-863E-4C84-AED0-6ED2F55796D7}] => (Block) C:\program files (x86)\skype\phone\skype.exe => Pas de fichier FirewallRules: [UDP Query User{581227AC-4EF1-4E35-BEB1-708C0699B7BC}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe => Pas de fichier FirewallRules: [{CFB12EEE-66AA-4A6A-AC85-B01BFE1AEDBB}] => (Allow) LPort=48114 FirewallRules: [{58702407-8A13-4826-BFA7-59C7F9435EAB}] => (Allow) LPort=48113 FirewallRules: [{F42C6CF2-4D22-403A-8103-9277548EA416}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc. -> Yahoo! Inc.) FirewallRules: [{D0F979E6-A2C1-4112-B9F1-4AFFACD7DF2C}] => (Allow) C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc. -> Yahoo! Inc.) FirewallRules: [{329284D2-2012-4217-AC79-C8CB2E5DFAF1}] => (Allow) C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\PluginLivebox.exe => Pas de fichier FirewallRules: [{082018DA-E2C5-49D5-B26E-7D70C7D1CB45}] => (Allow) C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\PluginLivebox.exe => Pas de fichier FirewallRules: [{0CBC9079-C04D-47C0-B647-8D63545A2805}] => (Allow) C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\LiveboxManager.exe => Pas de fichier FirewallRules: [{3B472427-969B-4958-9A52-5CD45C8789A8}] => (Allow) C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\LiveboxManager.exe => Pas de fichier FirewallRules: [{10196BD1-C4B4-4FA5-AAB3-909FBA421A9E}] => (Allow) C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\DedicarzService.exe => Pas de fichier FirewallRules: [{FBAECAB0-FDE4-4718-BD1D-B06013C6906F}] => (Allow) C:\Program Files (x86)\Orange\Assistance Livebox\dedicarz\DedicarzService.exe => Pas de fichier FirewallRules: [{58CC95C1-46E5-454E-8461-4687C38F24FF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{A83496DB-2D3E-4F58-8BB4-F1C9D1B08664}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{00479710-5094-4A85-8CC3-E069D1F85B7F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{806E8053-F715-4334-9F6A-86E5C51ADB6D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{672F89A2-3292-4239-BDDA-1C7AB28C5DE6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C2D2F745-2B3E-4F4D-A360-0230E891696E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{07DF6CB2-2968-4028-94EF-E5B80F4C0AFF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe => Pas de fichier FirewallRules: [{CED1B6B1-0A42-45FE-818E-C25A128BD0EC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe => Pas de fichier FirewallRules: [{01BD38F3-C55E-4C30-A1AC-30855407A55E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe => Pas de fichier FirewallRules: [{3B69C9FA-1205-42C4-B0A5-3F71EDDB53E0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe => Pas de fichier FirewallRules: [{13AD5C12-9A08-4566-90A7-22E1E210C9A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe () [Fichier non signé] FirewallRules: [{0AF0AA62-FA51-4F64-929A-2B3730B75E1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe () [Fichier non signé] FirewallRules: [{19D176A4-9974-49BB-A9A9-31BD8D5D8442}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe () [Fichier non signé] FirewallRules: [{D1127888-D602-4199-928F-73477FA986C8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe () [Fichier non signé] FirewallRules: [{917295CF-AB5B-43E9-B258-470DA476FCDD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> ) FirewallRules: [{2EC88756-3B2D-407C-A657-93D664D24EC5}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> ) FirewallRules: [{9C88E923-5F7B-44C9-A247-EDEA15C83106}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> ) FirewallRules: [{66B11C39-C997-45F4-AE32-E87926B798EB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> ) FirewallRules: [{08416B5F-471B-4633-B756-DF0B9DF0DE85}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe (Valve Corp. -> Activision Publishing Inc.) [Fichier non signé] FirewallRules: [{DAA06050-0132-4FB3-A359-3CF004DDA751}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe (Valve Corp. -> Activision Publishing Inc.) [Fichier non signé] FirewallRules: [{E6763E28-8A20-49C0-921A-6F6725F2E157}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{6839D6F2-C833-490E-9CB7-0B4C57890AF0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{933C70F1-C832-4A6F-8620-35ABF3DCCD59}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe (Hewlett-Packard Company -> Hewlett-Packard) FirewallRules: [{B26C979C-9A80-43CC-B9F3-6FE54ED9D4DA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{398DB400-070B-44F8-827A-0F7EA744BB79}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{8CC0FB99-9157-4459-933D-6D96AA5DBF60}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (Hewlett Packard -> Hewlett-Packard) FirewallRules: [{F16789C5-A0CC-4635-A272-D44FCFFB01EE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{F8623F2D-4EDC-4E00-9828-9A0A2D4CEA5C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{D6396DBF-C482-4CED-BFBC-8E3D2FFA1924}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe (Hewlett-Packard Co.) [Fichier non signé] FirewallRules: [{D0BC5A36-1798-4879-A076-A2B46C854D02}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{998914DE-6E6D-4892-9696-0114EC08F533}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{16373721-5B60-48A4-86C5-FA6CE6BAB4B2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{0627905D-D56B-40C8-9685-ED9BF5E4CA58}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{31112BEB-2C00-4742-9BCF-23DCACA9AE06}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{40D85608-5CE4-4140-AF46-05C2640051BF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.) FirewallRules: [{53275586-693B-4297-96B9-88DB697D58D0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{7330EE0C-2B50-423D-BEB2-90A2246BD319}] => (Allow) LPort=2869 FirewallRules: [{17C4B145-1FC6-4757-B3F9-1193FE90D042}] => (Allow) LPort=1900 FirewallRules: [{086C59B2-528F-4953-8230-2BBFFC3722D2}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe (CyberLink -> CyberLink Corp.) FirewallRules: [{BCA89637-A53C-43C5-B372-5F867392361B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{1D79C0B5-70A0-4F30-AA65-2F9C11EAF7CF}] => (Allow) LPort=48113 FirewallRules: [{B45643AE-0E59-40AA-BD0B-A6971FCF9DC8}] => (Allow) C:\Program Files\ma-config.com\x64\maconfservice.exe => Pas de fichier FirewallRules: [{6CC8E074-617E-4C19-93E9-648911BDD31A}] => (Allow) C:\Program Files\ma-config.com\x64\maconfservice.exe => Pas de fichier FirewallRules: [{0398EEAE-569D-4E9D-B503-D05ADF83CCE3}] => (Allow) LPort=48113 FirewallRules: [{E0C2B6CA-BBD5-44FF-AB90-38F13365E4D1}] => (Allow) LPort=48113 FirewallRules: [{75551C60-34D2-4052-9125-DDD00BC36E9A}] => (Allow) C:\Program Files\ma-config.com\MCDetection.exe => Pas de fichier FirewallRules: [{79278539-FFB5-4115-BE9E-FDCBCF95266C}] => (Allow) C:\Program Files\ma-config.com\MCDetection.exe => Pas de fichier FirewallRules: [{C8704543-58F7-41BA-8BB9-02CA1F380EF7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe => Pas de fichier FirewallRules: [{5602D130-7893-4EE2-B641-2B4CE745FD96}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe => Pas de fichier FirewallRules: [{3ED3F926-F109-4963-A01C-DB7EFB27F687}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{1AB6F1F4-6BDA-4CCD-AF76-38B08C522B54}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{51B5DFF4-AC26-45A4-B6F1-EE7ECB0F76C9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{4192EF58-543D-433D-A3CB-2CF7CE609439}] => (Allow) C:\Program Files\ma-config.com\x64\maconfservice.exe => Pas de fichier FirewallRules: [{BEC7F4A1-D416-4F66-9294-0CECF44E6E93}] => (Allow) C:\Program Files\ma-config.com\x64\maconfservice.exe => Pas de fichier FirewallRules: [{1B117FDF-2120-4EDB-A520-D5D530CC549E}] => (Allow) C:\Program Files\ma-config.com\MCDetection.exe => Pas de fichier FirewallRules: [{14B55752-A2EE-47EC-894F-73562BA13DE9}] => (Allow) C:\Program Files\ma-config.com\MCDetection.exe => Pas de fichier FirewallRules: [{8B60CBBC-6C47-4423-A59C-C22B3F50A6D5}] => (Allow) LPort=48113 FirewallRules: [{BCAD761D-F799-4D26-8F17-DA91FD5307D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{3E8E154E-EBFB-42F5-A0C1-B5469CBC73F2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{634C7971-0167-4F13-BA77-312F3AC15E59}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe (CYBELSOFT -> CybelSoft) FirewallRules: [{538FF200-CFC5-424D-AA81-5B14CB75649F}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe (CYBELSOFT -> CybelSoft) FirewallRules: [{265A9ACC-ED0D-4F86-8726-6E7BEE648893}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{4CBE1F95-4B26-438B-8AF1-C44D3B27488F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{96A0B53C-C92B-4BB1-BAA9-2826BACDD3EA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{A102A4E9-4553-43E0-B4AA-B9912D1A3617}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{63832D0E-A78E-4566-A0D7-5F3D9BDD22DE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{7BA69DE2-830A-4E24-AB24-723E85649156}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) ==================== Points de restauration ========================= ==================== Éléments en erreur du Gestionnaire de périphériques ============ ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (08/05/2020 07:18:58 PM) (Source: DptfEvent) (EventID: 2) (User: ) Description: DptfPolicyLpmServiceHelper WinMain: CreateSharedMemory() failed. Session ID = 1 Error: (08/05/2020 07:18:58 PM) (Source: DptfEvent) (EventID: 3) (User: ) Description: DptfPolicyLpmServiceHelper CreateSharedMemory: WaitForSingleObject() with g_pkeLpmSharedMemoryCreated failed Last error = [0x00000102] Session ID = 1 Error: (08/05/2020 07:15:39 PM) (Source: Service1) (EventID: 0) (User: ) Description: Le service ne peut pas être démarré. Descripteur non valide Error: (08/05/2020 07:13:30 PM) (Source: DptfEvent) (EventID: 1) (User: ) Description: DptfPolicyLpmDll DllMain: ConnectToDptfFrameworkDriver() failed. Error: (08/05/2020 07:13:30 PM) (Source: DptfEvent) (EventID: 2) (User: ) Description: DptfPolicyLpmDll ConnectToDptfFrameworkDriver: SetupDiEnumDeviceInterfaces() failed. Last error = [0x00000103] Error: (08/05/2020 07:13:29 PM) (Source: DptfEvent) (EventID: 1) (User: ) Description: DptfPolicyLpmDll DllMain: ConnectToDptfFrameworkDriver() failed. Error: (08/05/2020 07:13:29 PM) (Source: DptfEvent) (EventID: 2) (User: ) Description: DptfPolicyLpmDll ConnectToDptfFrameworkDriver: SetupDiEnumDeviceInterfaces() failed. Last error = [0x00000103] Error: (08/05/2020 07:13:28 PM) (Source: DptfEvent) (EventID: 1) (User: ) Description: DptfPolicyLpmDll DllMain: ConnectToDptfFrameworkDriver() failed. Erreurs système: ============= Error: (08/05/2020 07:12:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (08/05/2020 07:12:51 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Cache de police de Windows Presentation Foundation 3.0.0.0. Error: (08/05/2020 07:11:33 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service NcbService s’est arrêté avec l’erreur : Un périphérique attaché au système ne fonctionne pas correctement. Error: (08/05/2020 07:11:14 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: L’arrêt système précédant à 18:58:46 le ‎05/‎08/‎2020 n’était pas prévu. Error: (08/04/2020 02:42:33 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT) Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80240009 : Mise à jour intelligente de la sécurité pour Microsoft Defender Antivirus - KB2267602 (version 1.321.557.0). Error: (06/27/2020 09:05:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (06/27/2020 09:05:05 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Cache de police de Windows Presentation Foundation 3.0.0.0. Error: (06/27/2020 03:36:02 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT) Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80240016 : Mise à jour intelligente de la sécurité pour Microsoft Defender Antivirus - KB2267602 (version 1.319.302.0). Windows Defender: =================================== Date: 2020-08-04 14:46:29.6540000Z Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.321.557.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.17300.4 Code d’erreur : 0x8050a003 Description de l’erreur : Ce package ne contient pas de fichiers de définitions à jour pour ce programme. Pour plus d’informations, voir Aide et support. Date: 2020-08-04 14:46:29.6530000Z Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.321.557.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de veille de sécurité : Logiciel anti-espion Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.17300.4 Code d’erreur : 0x8050a003 Description de l’erreur : Ce package ne contient pas de fichiers de définitions à jour pour ce programme. Pour plus d’informations, voir Aide et support. Date: 2020-08-04 14:46:29.6530000Z Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.321.557.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.17300.4 Code d’erreur : 0x8050a003 Description de l’erreur : Ce package ne contient pas de fichiers de définitions à jour pour ce programme. Pour plus d’informations, voir Aide et support. Date: 2020-08-04 14:42:33.9250000Z Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.319.404.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.17300.4 Code d’erreur : 0x80240009 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2020-06-27 15:50:18.1600000Z Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.319.302.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.17200.2 Code d’erreur : 0x8050a003 Description de l’erreur : Ce package ne contient pas de fichiers de définitions à jour pour ce programme. Pour plus d’informations, voir Aide et support. ==================== Infos Mémoire =========================== BIOS: American Megatrends Inc. X550LC.210 07/09/2013 Carte mère: ASUSTeK COMPUTER INC. X550LC Processeur: Intel(R) Core(TM) i7-4500U CPU @ 1.80GHz Pourcentage de mémoire utilisée: 56% Mémoire physique - RAM - totale: 8079.5 MB Mémoire physique - RAM - disponible: 3521.64 MB Mémoire virtuelle totale: 16271.5 MB Mémoire virtuelle disponible: 11203.66 MB ==================== Lecteurs ================================ Drive 😄 (OS) (Fixed) (Total:372.26 GB) (Free:229.63 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] Drive d: (DATA) (Fixed) (Total:537.8 GB) (Free:536.88 GB) NTFS \\?\Volume{58fa7ef7-1d60-4edf-b905-ac3848736e2f}\ (Recovery) (Fixed) (Total:0.88 GB) (Free:0.52 GB) NTFS \\?\Volume{e70203d4-122e-48fd-b574-c5185cbfb963}\ () (Fixed) (Total:0.34 GB) (Free:0.31 GB) NTFS \\?\Volume{122d0591-5cae-47d8-b5df-94764b00401d}\ (Restore) (Fixed) (Total:20.01 GB) (Free:7.16 GB) NTFS \\?\Volume{c1223879-9ed5-4dd7-98a5-3bbe87de0300}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 568814A2) Partition: GPT. ==================== Fin de Addition.txt ======================= merci pour votre aide jpt .
  8. jpt a commencé à suivre [Résolu] Sécurité PC - détournement de courriels et [Résolu] Écran bleu… appelez Windows immédiatement !
  9. jpt
    bonjour je sollicite de l'aide pour contrôler et nettoyer mon pc portable... à l'instant en surfant une page bleue s'ouvre aleatoirement, avec plusieurs ecrans qui se superposent et indications qui donnent un N° à appeler... qui peut m'aider s'il vous plait ? Par avance merci jpt
  10. jpt
    encore moi, je complète en précisant que pour accéder à orange mail j'utilise le navigateur Firefox... jpt
  11. jpt
    bonsoir pour répondre à ta question je crois pouvoir dire que l'accès se fait avec le webmail d'orange sur au moins 4 pc pour l'instant un seul accès possible, mon pc..., je vais utiliser la boîte tout le week end ...nous verrons ce qui se passe ? JPT PS : j'ai crée un compte spf, pour que l'on puisse poser les bonnes questions à partir des pc déportés...
  12. jpt
    bonjour et grand merci pour votre aide. cela me rassure pour mon Pc , reste à faire le contrôle sur 5 autres PC . Ce qui m'inquiétait c'est que dans la nuit de lundi à mardi la boite a été piratée avec détournement de mails. mardi fin de matinée, le détournement était bloqué, mot de passe modifié mais tous les contacts existants dans la boîte mail disparus, usage normal jusqu'à ce matin : boite à nouveau piratée....etc...bis repititat ! A cet instant je vais me connecter seul à la messagerie avec mot de passe modifié, les autres utilisateurs ne se connecteront que lorsque ils auront l'assurance que leur pc est "clean"...je vais leur donner les coordonnées de Zebulon et les accompagner au moment des manips. a nouveau merci pour votre aide
  13. jpt
    bonjour voici le lien de Malwarebytes https://up.security-x.fr/file.php?h=R5e8b42981a533980a12511aaa14b511a jpt
  14. jpt
    bonjour et merci de vous occuper de mon cas voici le premier lien pour frst.txt https://up.security-x.fr/file.php?h=Rd4d8c9af5894498cbf7774bb9ef21897 voici le second pour addition.txt https://up.security-x.fr/file.php?h=Reb66472800bd9695cb7ed9e17d49ce6f je reste à votre disposition jpt
  15. jpt
    bonjour à tous mardi dernier détournement de courriels sur messagerie orange : transfert frauduleux supprimé, mot de passe modifié. aujourd'hui samedi, nouveau transfert frauduleux de courriels, correction faite, mot de passe modifié. Orange me dit que un des utilisateurs de la boîte a son pc infecté...qui peut m'aider à vérifier et nettoyer le mien ? Un grand merci jpt
  16. jpt
    bonjour à tous pour celles et ceux qui sont confrontés au problème décrit , voici la solution que je viens d'appliquer : 1/ desinstallation de sugarsync 2/ téléchargement programme à partir de www.sugarsync/download 3/ installation ( pour moi réinstallation) sur le PC 4/ A la question "voulez vous synchroniser les mêmes dossiers ?" j'ai répondu NON 5/ Le systeme demande que l'on donne un nom à son pc une fois validé j'ai pu ouvrir normalement Sugarsync à partir du Picogramme et j'ai retrouvé tous les dossiers partagés... sujet résolu pour moi jpt
×
×
  • Créer...