C:\Users\TEMP jérôme\AppData\Local\Pokki\Engine\Launcher.dll
jeje29400
Messages postés
10
Date d'inscription
Statut
Membre
Dernière intervention
-
MisteryBean Messages postés 8873 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
MisteryBean Messages postés 8873 Date d'inscription Statut Modérateur, Contributeur sécurité Dernière intervention -
Bonjour,
Lorsque j'allume mon ordinateur portable, voici ce qui apparaît dans une fenêtre:
C:\Users\TEMP jérôme\AppData\Local\Pokki\Engine\Launcher.dll
Je n'ai toucher à rien. Je sais que d'autres personnes ont rencontrer le même problème; je suis un nouvel inscrit. Quelqu'un peut-il m'aider SVP? ^merci.
Voici le rapport OTL:
OTL logfile created on: 07/11/2021 11:29:06 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = \\JÉRÔME\Users\Jérôme\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.20139)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
3,88 Gb Total Physical Memory | 2,46 Gb Available Physical Memory | 63,36% Memory free
4,57 Gb Paging File | 2,91 Gb Available in Paging File | 63,59% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 915,71 Gb Total Space | 846,31 Gb Free Space | 92,42% Space Free | Partition Type: NTFS
Computer Name: JÉRÔME | User Name: Jérôme | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2021/11/06 15:50:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- \\JÉRÔME\Users\Jérôme\Desktop\OTL.exe
PRC - [2021/10/25 07:56:32 | 010,405,168 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\VirusKeeper.exe
PRC - [2021/10/16 08:39:46 | 001,587,488 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\Anti-Locky 2022\antilocky.exe
PRC - [2021/08/16 10:55:04 | 000,169,728 | ---- | M] (Adobe Inc.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2021/05/17 12:21:08 | 000,423,200 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_watchop.exe
PRC - [2021/05/17 12:17:38 | 001,599,280 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_oascan.exe
PRC - [2021/05/17 12:04:12 | 002,097,456 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_scangray.exe
PRC - [2010/05/10 11:14:16 | 000,186,848 | ---- | M] () -- C:\Windows\SysWOW64\WinService.exe
PRC - [2009/09/24 09:45:34 | 001,121,664 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_service.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2007/10/20 08:00:04 | 000,139,264 | ---- | M] () -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_sscan.dll
[color=#E56717]========== Services (SafeList) ==========[/color]
SRV:[b]64bit:[/b] - [2021/05/18 08:41:53 | 000,112,144 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2021/01/12 06:43:24 | 000,841,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2020/12/09 02:11:05 | 000,549,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2020/12/09 01:36:35 | 001,685,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2020/10/11 18:48:24 | 002,991,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2020/08/31 10:39:52 | 000,327,008 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
SRV:[b]64bit:[/b] - [2020/08/08 14:43:55 | 001,545,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2020/06/11 03:56:47 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2020/04/11 16:47:38 | 000,260,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2020/01/28 20:53:50 | 001,349,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2019/12/05 15:55:11 | 000,068,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2019/08/09 18:48:35 | 000,166,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2019/07/11 03:49:39 | 000,375,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2019/05/25 01:17:21 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2018/01/02 06:17:04 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2017/01/12 17:51:17 | 000,361,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2016/12/25 00:39:34 | 000,133,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2015/07/16 19:58:34 | 000,074,752 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2015/05/12 14:19:37 | 000,294,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2015/05/07 16:21:51 | 000,522,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2015/02/21 00:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2014/12/30 14:44:28 | 000,455,912 | ---- | M] (Acer Incorporate) [On_Demand | Stopped] -- C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe -- (LMSvc)
SRV:[b]64bit:[/b] - [2014/10/29 04:59:51 | 003,460,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2014/10/29 03:42:19 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2014/10/29 03:42:03 | 000,041,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2014/10/29 03:33:55 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2014/10/29 03:29:22 | 000,121,856 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2014/10/29 02:57:05 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2014/10/29 02:27:21 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2014/10/29 02:20:03 | 000,262,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2014/10/29 02:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2014/10/29 02:12:36 | 000,407,040 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2014/10/29 02:12:22 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2014/10/29 02:11:10 | 001,639,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2014/10/29 02:05:09 | 000,206,848 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2014/10/29 01:48:52 | 000,562,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2013/07/01 20:08:48 | 000,822,232 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2013/07/01 20:08:32 | 000,733,696 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:28 | 000,825,032 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe -- (CsrBtService)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:16 | 001,041,616 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe -- (CsrBtOBEXService)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:08 | 000,465,624 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe -- (CSRBtAudioService)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:00 | 000,064,216 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe -- (BtSwitcherService)
SRV - [2021/10/01 15:17:54 | 000,162,456 | ---- | M] (BraveSoftware Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe -- (bravem)
SRV - [2021/10/01 15:17:54 | 000,162,456 | ---- | M] (BraveSoftware Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe -- (brave)
SRV - [2021/08/16 10:55:04 | 000,169,728 | ---- | M] (Adobe Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2021/07/31 13:55:59 | 000,214,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe -- (edgeupdatem)
SRV - [2021/07/31 13:55:59 | 000,214,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe -- (edgeupdate)
SRV - [2020/10/11 18:48:24 | 002,991,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2020/08/31 10:40:06 | 000,397,664 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2019/07/04 06:49:48 | 003,117,648 | ---- | M] (Adobe Systems, Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe -- (AGMService)
SRV - [2019/07/04 06:49:48 | 002,888,272 | ---- | M] (Adobe Systems, Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe -- (AGSService)
SRV - [2017/05/18 13:10:06 | 000,021,240 | ---- | M] (Intel) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel Driver Update Utility\DSAService.exe -- (DSAService)
SRV - [2015/06/29 19:55:08 | 000,323,152 | ---- | M] (Windows (R) Win 7 DDK provider) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
SRV - [2015/05/07 16:05:40 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2014/10/29 02:51:55 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2014/10/29 02:04:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2014/10/16 10:02:42 | 000,307,464 | ---- | M] (CyberLink) [On_Demand | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe -- (CLKMSVC10_99E320F5)
SRV - [2012/09/17 05:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0)
SRV - [2012/04/24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
SRV - [2010/05/10 11:14:16 | 000,186,848 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\WinService.exe -- (SCM_Service)
SRV - [2009/12/30 12:21:02 | 000,065,536 | ---- | M] (Lexar Media, Inc.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\LxrSII1s.exe -- (LxrSII1s)
SRV - [2009/09/24 09:45:34 | 001,121,664 | ---- | M] (AxBx) [Auto | Running] -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_service.exe -- (vkservice)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV:[b]64bit:[/b] - [2021/09/21 06:54:24 | 000,107,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2021/09/21 06:54:23 | 000,422,664 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2021/09/21 06:54:22 | 000,079,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2021/09/18 06:28:48 | 000,374,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2021/09/12 12:35:00 | 000,049,248 | ---- | M] (GiliSoft Inc.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\ImgLock.sys -- (ImgLock)
DRV:[b]64bit:[/b] - [2021/09/12 12:34:56 | 000,029,280 | ---- | M] (GiliSoft INC.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SafeDsk.sys -- (SafeDsk)
DRV:[b]64bit:[/b] - [2021/08/09 14:30:14 | 000,051,544 | ---- | M] (Toolwiz.com) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\KSafeDISK.sys -- (KSafeDISK)
DRV:[b]64bit:[/b] - [2021/08/09 14:30:14 | 000,050,520 | ---- | M] (Toolwiz.com) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BTOWSVF.sys -- (BTOWSVF)
DRV:[b]64bit:[/b] - [2021/08/09 14:30:14 | 000,031,576 | ---- | M] (Toolwiz.com) [File_System | System | Running] -- C:\Windows\SysNative\drivers\BTOWSFF.sys -- (BTOWSFF)
DRV:[b]64bit:[/b] - [2021/04/18 22:09:06 | 001,138,648 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)
DRV:[b]64bit:[/b] - [2021/03/23 16:03:16 | 000,039,448 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\phantomtap.sys -- (phantomtap)
DRV:[b]64bit:[/b] - [2020/12/10 11:37:37 | 000,155,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2020/08/31 10:39:46 | 003,814,240 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2020/06/29 02:35:46 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2020/06/29 02:35:46 | 000,018,944 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_usbccgpfilter.sys -- (ew_usbccgpfilter)
DRV:[b]64bit:[/b] - [2020/04/24 01:22:22 | 000,166,760 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:[b]64bit:[/b] - [2020/04/24 01:22:16 | 000,136,040 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:[b]64bit:[/b] - [2019/09/07 20:37:13 | 000,157,432 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2019/08/21 07:56:42 | 000,062,984 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\flashud.sys -- (int0800)
DRV:[b]64bit:[/b] - [2019/04/08 22:40:07 | 000,136,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2019/02/09 19:53:05 | 000,923,384 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS)
DRV:[b]64bit:[/b] - [2018/12/18 07:13:20 | 000,480,176 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2018/06/20 19:48:27 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
DRV:[b]64bit:[/b] - [2018/06/08 13:54:06 | 000,039,112 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VirtualAudio.sys -- (WsAudio_Device)
DRV:[b]64bit:[/b] - [2018/05/23 06:45:28 | 000,027,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2018/05/04 00:02:07 | 000,325,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2018/05/04 00:02:07 | 000,187,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
DRV:[b]64bit:[/b] - [2018/04/05 18:47:55 | 000,087,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2017/11/08 16:55:00 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2017/07/08 04:16:36 | 000,086,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2017/05/15 23:09:32 | 000,057,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2017/02/10 15:37:28 | 000,046,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2017/01/12 17:51:18 | 000,274,776 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2017/01/12 17:51:18 | 000,117,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2016/10/18 16:14:08 | 000,021,984 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\semav6msr64.sys -- (semav6msr64)
DRV:[b]64bit:[/b] - [2016/08/16 05:59:46 | 000,098,984 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:[b]64bit:[/b] - [2016/08/16 02:18:34 | 000,159,936 | ---- | M] (MBB) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb2ser.sys -- (wdm_usb)
DRV:[b]64bit:[/b] - [2016/04/21 10:10:04 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:[b]64bit:[/b] - [2016/02/18 08:37:26 | 000,020,096 | ---- | M] (GlarySoft Ltd) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GUMHFilter.sys -- (GUMHFilter)
DRV:[b]64bit:[/b] - [2016/01/26 20:15:40 | 000,072,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2015/12/01 20:46:03 | 000,050,160 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:[b]64bit:[/b] - [2015/12/01 20:46:03 | 000,038,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:[b]64bit:[/b] - [2015/11/05 15:23:52 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2015/11/05 15:23:40 | 000,023,040 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
DRV:[b]64bit:[/b] - [2015/10/11 07:34:30 | 000,468,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2015/07/22 14:54:56 | 000,030,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iaiogpio.sys -- (iaiogpio)
DRV:[b]64bit:[/b] - [2015/04/29 10:44:36 | 000,600,088 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:[b]64bit:[/b] - [2015/04/25 03:25:32 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2015/03/20 02:56:10 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2015/03/13 05:03:31 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2015/03/09 03:02:51 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2015/01/30 04:01:46 | 000,132,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthA2DP.sys -- (BthA2DP)
DRV:[b]64bit:[/b] - [2014/11/04 20:33:40 | 000,058,176 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2014/10/29 04:57:42 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2014/10/29 04:56:04 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2014/10/29 03:47:48 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2014/10/29 03:46:43 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2014/10/29 03:45:54 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2014/10/29 03:45:39 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2014/10/29 03:45:16 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2014/10/29 02:50:37 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2014/10/17 05:56:23 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2014/08/15 01:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2014/06/09 07:20:30 | 000,069,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaioi2ce.sys -- (iaioi2c)
DRV:[b]64bit:[/b] - [2014/06/09 07:20:30 | 000,031,232 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaiogpioe.sys -- (GPIO)
DRV:[b]64bit:[/b] - [2014/04/02 19:02:18 | 003,893,248 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athwbx.sys -- (athr)
DRV:[b]64bit:[/b] - [2014/03/27 04:06:40 | 000,331,992 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUVStor.sys -- (RSUSBVSTOR)
DRV:[b]64bit:[/b] - [2014/03/18 11:13:15 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2014/03/18 11:13:02 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2014/03/18 11:13:01 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
DRV:[b]64bit:[/b] - [2014/03/18 10:45:41 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2014/01/15 14:21:46 | 000,088,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TXEIx64.sys -- (TXEIx64)
DRV:[b]64bit:[/b] - [2013/08/22 14:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2013/08/22 14:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2013/08/22 13:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2013/08/22 13:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:58 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2013/08/22 12:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2013/08/13 00:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2013/08/10 01:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2013/07/30 19:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2013/07/25 20:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2013/07/17 17:59:00 | 000,021,360 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMDriver.sys -- (LMDriver)
DRV:[b]64bit:[/b] - [2013/07/17 17:59:00 | 000,014,680 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RadioShim.sys -- (RadioShim)
DRV:[b]64bit:[/b] - [2012/10/03 15:14:56 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2012/08/10 02:01:00 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:36 | 000,023,752 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrusbfilter.sys -- (csrusbfilter)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:34 | 000,047,296 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrusb.sys -- (csrusb)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:32 | 000,061,128 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrserial.sys -- (csrserial)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:30 | 000,039,616 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrpan.sys -- (csrpan)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:22 | 002,784,968 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CsrBtPort.sys -- (CsrBtPort)
DRV:[b]64bit:[/b] - [2010/04/06 17:33:10 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (IvtPanBusSrv)
DRV:[b]64bit:[/b] - [2010/04/06 17:33:10 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (btnetBUs)
DRV:[b]64bit:[/b] - [2010/04/06 17:32:48 | 000,027,016 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV:[b]64bit:[/b] - [2010/04/06 17:32:48 | 000,027,016 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtAudioBusSrv)
DRV:[b]64bit:[/b] - [2010/04/06 17:32:46 | 000,023,944 | ---- | M] (IVT Corporation.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\BtHidBus.sys -- (BtHidBus)
DRV:[b]64bit:[/b] - [2009/12/30 09:32:04 | 000,063,064 | ---- | M] (Lexar Media, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\LxrSII1d.sys -- (LxrSII1d)
DRV:[b]64bit:[/b] - [2007/12/26 10:46:26 | 000,340,992 | ---- | M] (NETGEAR Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wg111v2.sys -- (RTL8187)
DRV:[b]64bit:[/b] - [2007/01/19 02:24:24 | 000,025,312 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SCMNdisP.sys -- (SCMNdisP)
DRV:[b]64bit:[/b] - [2005/09/23 21:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {92EC5E20-82F5-4C73-BE66-21ED9F7865EA}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{92EC5E20-82F5-4C73-BE66-21ED9F7865EA}: "URL" = https://www.bing.com/search?q=%7BsearchTerms%7D&form=IE10TR&src=IE10TR&pc=ACJB&toHttps=1&redig=8471668C17594875B02F1D1764DDEA70
IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1;<local>
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {92EC5E20-82F5-4C73-BE66-21ED9F7865EA}
IE - HKLM\..\SearchScopes\{92EC5E20-82F5-4C73-BE66-21ED9F7865EA}: "URL" = https://www.bing.com/search?q=%7BsearchTerms%7D&form=IE10TR&src=IE10TR&pc=ACJB&toHttps=1&redig=8471668C17594875B02F1D1764DDEA70
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1;<local>
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\TEMP.jérôme\Desktop
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?cobrand=acer13.msn.com&ocid=AARDHP&pc=MAARJS
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?cobrand=acer13.msn.com&ocid=AARDHP&pc=MAARJS
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 61 20 42 32 C1 D3 D7 01 [binary data]
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\..\SearchScopes,DefaultScope = {92EC5E20-82F5-4C73-BE66-21ED9F7865EA}
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.311.2: C:\Program Files\Java\jre1.8.0_311\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.311.2: C:\Program Files\Java\jre1.8.0_311\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.3: C:\Program Files\VideoLAN\VLC\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.6: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.10: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.6: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.7: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.7.1: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.8: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
O1 HOSTS File: ([2019/05/26 16:36:55 | 000,454,948 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 15622 more lines...
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_311\bin\ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_311\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [CsrAudioguiCtrl] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [CSRHarmonySkypePlugin] C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [CsrHCRPServer] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [CsrSyncMLServer] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [HarmonyUserStartup] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [TrayApplication] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [vksts] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [WindowsDefender] "%ProgramFiles%\Windows Defender\MSASCuiL.exe" File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Anti-Locky] C:\Program Files (x86)\AxBx\Anti-Locky 2022\antilocky.exe (AxBx)
O4 - HKLM..\Run: [VirusKeeper] C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\VirusKeeper.exe (AxBx)
O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
O4 - HKU\S-1-5-21-709303801-3742642156-3075411919-1001..\Run: [Pokki] C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform File not found
O4 - Startup: C:\Users\All Users\1437397726.2568.bin ()
O4 - Startup: C:\Users\All Users\1437397726.2688.bin ()
O4 - Startup: C:\Users\All Users\1437398031.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1437499318.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1440237750.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1460035122.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1460035133.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1504714500.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1504714503.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1507217005.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1507217007.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1558888088.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1558888090.2584.bin ()
O4 - Startup: C:\Users\All Users\1558888090.2964.bin ()
O4 - Startup: C:\Users\All Users\1558888090.3372.bin ()
O4 - Startup: C:\Users\All Users\1558888090.552.bin ()
O4 - Startup: C:\Users\All Users\1570434512.104.bin ()
O4 - Startup: C:\Users\All Users\1570434512.2980.bin ()
O4 - Startup: C:\Users\All Users\1570434512.888.bin ()
O4 - Startup: C:\Users\All Users\1570434569.1944.bin ()
O4 - Startup: C:\Users\All Users\1570434569.3192.bin ()
O4 - Startup: C:\Users\All Users\1570434569.3932.bin ()
O4 - Startup: C:\Users\All Users\1570434739.3084.bin ()
O4 - Startup: C:\Users\All Users\1570434739.3840.bin ()
O4 - Startup: C:\Users\All Users\1570434739.3940.bin ()
O4 - Startup: C:\Users\All Users\1571054619.2500.bin ()
O4 - Startup: C:\Users\All Users\1571054619.2772.bin ()
O4 - Startup: C:\Users\All Users\1571054619.3356.bin ()
O4 - Startup: C:\Users\All Users\1571054619.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1571054669.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573389588.1656.bin ()
O4 - Startup: C:\Users\All Users\1573389588.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573389598.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573395466.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573395469.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\ABBYY [2020/04/25 14:50:17 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\acer [2021/11/06 15:33:34 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Adobe [2021/06/12 07:46:13 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\agent.1495209724.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\agent.update.1572014441.bdinstall.v2.bin ()
O4 - Startup: C:\Users\All Users\Aimersoft Video Converter Ultimate [2016/01/09 22:31:58 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Ament.ini ()
O4 - Startup: C:\Users\All Users\Apple [2021/04/26 16:54:24 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Apple Computer [2021/05/14 15:19:49 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Application Data [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\AutoHideIP [2016/06/04 15:58:01 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\bdch [2015/08/22 16:15:01 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\BlueStacks [2015/06/20 14:09:43 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Bureau [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\CLSK [2015/02/13 13:30:04 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Common Files [2015/06/19 15:55:54 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\All Users\CyberLink [2017/10/11 13:37:46 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\DAEMON Tools Lite [2015/12/02 16:11:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Desktop [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\Diagonal [2016/02/22 17:15:37 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Documents [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\DP45977C.lfl ()
O4 - Startup: C:\Users\All Users\DriverGenius [2015/10/26 18:18:40 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\HideIPEasy [2016/06/04 15:55:14 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\HP [2021/11/05 21:17:09 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\HP Photo Creations [2021/11/05 21:17:09 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Installations [2021/04/19 16:43:41 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\install_clap [2017/10/11 13:36:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Intel [2021/07/05 06:36:28 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\iolo [2017/07/08 09:35:29 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Leawo [2021/04/26 15:27:29 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Menu Démarrer [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\Microsoft [2021/04/26 07:11:15 | 000,000,000 | --SD | M]
O4 - Startup: C:\Users\All Users\mntemp ()
O4 - Startup: C:\Users\All Users\Modèles [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\NCH Software [2015/11/28 14:01:12 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\OEM [2015/07/30 17:51:30 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Oracle [2021/10/30 07:06:29 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Package Cache [2021/10/13 14:58:36 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\PC1Data [2015/08/23 13:57:43 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Pinnacle [2017/05/01 10:22:40 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\prolexisws [2021/02/09 14:07:26 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Qualcomm Atheros [2021/11/04 16:36:48 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\regid.1986-12.com.adobe [2015/06/29 13:38:37 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\regid.1991-06.com.microsoft [2020/11/18 08:40:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\ReviverSoft [2021/11/04 17:54:15 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Start Menu [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\SUPERAntiSpyware.com [2016/05/15 16:54:56 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\SUPPORTDIR [2017/10/11 13:35:41 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Templates [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\Visan [2021/11/05 21:17:12 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\VSO [2020/08/26 09:33:48 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\WildTangent [2016/06/04 14:09:31 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Wondershare [2021/10/29 10:46:45 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Xilisoft [2021/04/21 13:19:09 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\{69533018-33A8-4C46-869A-11AA2CDF4EDC} [2021/11/05 05:06:47 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Default\AppData [2017/03/15 16:11:20 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\Default\Application Data [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Cookies [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Favorites [2015/02/13 13:35:36 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Default\Local Settings [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Menu Démarrer [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Mes documents [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Modèles [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\My Documents [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\NetHood [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\NTUSER.DAT ()
O4 - Startup: C:\Users\Default\NTUSER.DAT.LOG1 ()
O4 - Startup: C:\Users\Default\NTUSER.DAT.LOG2 ()
O4 - Startup: C:\Users\Default\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TM.blf ()
O4 - Startup: C:\Users\Default\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Default\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Default\PrintHood [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Recent [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\SendTo [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Start Menu [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Templates [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Voisinage d'impression [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Voisinage réseau [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\.android [2021/10/24 13:08:04 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\.homeplayer [2021/08/04 15:15:52 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\.vinylManager.ini ()
O4 - Startup: C:\Users\Jérôme\AppData [2015/06/19 11:27:19 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\Jérôme\Application Data [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Contacts [2020/03/20 10:12:10 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Cookies [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Desktop [2021/11/06 17:57:44 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Documents [2021/10/27 06:40:04 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Downloads [2021/11/05 05:54:32 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Intel [2017/04/23 16:15:20 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\IntelGraphicsProfiles [2021/11/07 10:50:02 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Links [2021/10/27 15:46:28 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Local Settings [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Menu Démarrer [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Mes documents [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Mes ebooks [2021/10/09 15:42:06 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\Modèles [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Music [2021/11/03 16:32:59 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\ntuser.dat ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT.gu.LOG1 ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT.gu.LOG2 ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat.LOG1 ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat.LOG2 ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{1a151dc8-d71c-11ea-892a-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{1a151dc8-d71c-11ea-892a-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{1a151dc8-d71c-11ea-892a-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{470d458b-3df8-11ec-8bc4-d053493837b1}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{470d458b-3df8-11ec-8bc4-d053493837b1}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{470d458b-3df8-11ec-8bc4-d053493837b1}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{4e6e33e3-3e6c-11ec-8bce-d053493837b1}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{4e6e33e3-3e6c-11ec-8bce-d053493837b1}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{4e6e33e3-3e6c-11ec-8bce-d053493837b1}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{f2d3d8b4-8e05-11eb-8a77-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{f2d3d8b4-8e05-11eb-8a77-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{f2d3d8b4-8e05-11eb-8a77-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.ini ()
O4 - Startup: C:\Users\Jérôme\Pictures [2021/11/02 17:00:52 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Recent [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Searches [2021/05/19 07:36:50 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\SendTo [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Videos [2021/10/30 06:49:29 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Voisinage d'impression [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Voisinage réseau [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Public\AccountPictures [2015/06/19 11:16:56 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Users\Public\BlueStacks [2021/04/28 14:01:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\CyberLink [2016/02/07 17:38:34 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\Desktop [2021/11/06 14:13:57 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Users\Public\Documents [2021/04/26 07:11:18 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Public\Libraries [2013/08/22 16:36:32 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Users\Public\Music [2021/11/05 05:06:33 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Public\NTUSER.DAT.LOG1 ()
O4 - Startup: C:\Users\Public\NTUSER.DAT.LOG2 ()
O4 - Startup: C:\Users\Public\ntuser.dat{0611dfba-da2d-11e5-8392-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Public\ntuser.dat{0611dfba-da2d-11e5-8392-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Public\ntuser.dat{0611dfba-da2d-11e5-8392-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Public\NTUSER.DAT{e0e30262-166d-11e5-825f-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Public\NTUSER.DAT{e0e30262-166d-11e5-825f-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Public\NTUSER.DAT{e0e30262-166d-11e5-825f-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Public\Pictures [2020/11/15 17:20:51 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Public\PrivacyPal Sessions [2019/11/18 14:51:06 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\Security Sessions [2021/04/09 10:56:35 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\Videos [2021/11/05 05:06:33 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP\AppData [2021/11/06 14:19:47 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\TEMP.jérôme\AppData [2021/11/07 10:49:55 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\TEMP.jérôme\Application Data [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\Cookies [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\Desktop [2021/11/07 11:28:41 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP.jérôme\Favorites [2021/11/07 10:50:14 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP.jérôme\Local Settings [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\Menu Démarrer [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT ()
O4 - Startup: C:\Users\TEMP.jérôme\ntuser.dat.LOG1 ()
O4 - Startup: C:\Users\TEMP.jérôme\ntuser.dat.LOG2 ()
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TM.blf ()
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\TEMP.jérôme\ntuser.ini ()
O4 - Startup: C:\Users\TEMP.jérôme\Searches [2021/11/07 10:52:15 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP.jérôme\SendTo [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: localhost ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: localhost ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2465FDF6-08AE-4BDD-82C0-A4D1063D756D}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{26AA6A43-AF1F-4074-A2AE-224B63839F37}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2911FD19-3E04-4E80-986E-439BD9D1B493}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3A9C5B95-85DC-4979-9EB5-58F3D53E5F5B}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{44D9412F-F1CA-4090-9DD3-5837AAD7E488}: D
Lorsque j'allume mon ordinateur portable, voici ce qui apparaît dans une fenêtre:
C:\Users\TEMP jérôme\AppData\Local\Pokki\Engine\Launcher.dll
Je n'ai toucher à rien. Je sais que d'autres personnes ont rencontrer le même problème; je suis un nouvel inscrit. Quelqu'un peut-il m'aider SVP? ^merci.
Voici le rapport OTL:
OTL logfile created on: 07/11/2021 11:29:06 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = \\JÉRÔME\Users\Jérôme\Desktop
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.20139)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
3,88 Gb Total Physical Memory | 2,46 Gb Available Physical Memory | 63,36% Memory free
4,57 Gb Paging File | 2,91 Gb Available in Paging File | 63,59% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 915,71 Gb Total Space | 846,31 Gb Free Space | 92,42% Space Free | Partition Type: NTFS
Computer Name: JÉRÔME | User Name: Jérôme | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2021/11/06 15:50:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- \\JÉRÔME\Users\Jérôme\Desktop\OTL.exe
PRC - [2021/10/25 07:56:32 | 010,405,168 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\VirusKeeper.exe
PRC - [2021/10/16 08:39:46 | 001,587,488 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\Anti-Locky 2022\antilocky.exe
PRC - [2021/08/16 10:55:04 | 000,169,728 | ---- | M] (Adobe Inc.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2021/05/17 12:21:08 | 000,423,200 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_watchop.exe
PRC - [2021/05/17 12:17:38 | 001,599,280 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_oascan.exe
PRC - [2021/05/17 12:04:12 | 002,097,456 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_scangray.exe
PRC - [2010/05/10 11:14:16 | 000,186,848 | ---- | M] () -- C:\Windows\SysWOW64\WinService.exe
PRC - [2009/09/24 09:45:34 | 001,121,664 | ---- | M] (AxBx) -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_service.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2007/10/20 08:00:04 | 000,139,264 | ---- | M] () -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_sscan.dll
[color=#E56717]========== Services (SafeList) ==========[/color]
SRV:[b]64bit:[/b] - [2021/05/18 08:41:53 | 000,112,144 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2021/01/12 06:43:24 | 000,841,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2020/12/09 02:11:05 | 000,549,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2020/12/09 01:36:35 | 001,685,504 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2020/10/11 18:48:24 | 002,991,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2020/08/31 10:39:52 | 000,327,008 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
SRV:[b]64bit:[/b] - [2020/08/08 14:43:55 | 001,545,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2020/06/11 03:56:47 | 000,062,464 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2020/04/11 16:47:38 | 000,260,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2020/01/28 20:53:50 | 001,349,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2019/12/05 15:55:11 | 000,068,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2019/08/09 18:48:35 | 000,166,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2019/07/11 03:49:39 | 000,375,296 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2019/05/25 01:17:21 | 000,230,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2018/01/02 06:17:04 | 000,116,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2017/01/12 17:51:17 | 000,361,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2016/12/25 00:39:34 | 000,133,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2015/07/16 19:58:34 | 000,074,752 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2015/05/12 14:19:37 | 000,294,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2015/05/07 16:21:51 | 000,522,240 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2015/02/21 00:49:18 | 000,780,800 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2014/12/30 14:44:28 | 000,455,912 | ---- | M] (Acer Incorporate) [On_Demand | Stopped] -- C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe -- (LMSvc)
SRV:[b]64bit:[/b] - [2014/10/29 04:59:51 | 003,460,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2014/10/29 03:42:19 | 000,026,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2014/10/29 03:42:03 | 000,041,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2014/10/29 03:33:55 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2014/10/29 03:29:22 | 000,121,856 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2014/10/29 02:57:05 | 000,324,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2014/10/29 02:43:27 | 000,524,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2014/10/29 02:27:21 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2014/10/29 02:20:03 | 000,262,656 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2014/10/29 02:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2014/10/29 02:12:36 | 000,407,040 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2014/10/29 02:12:22 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2014/10/29 02:11:10 | 001,639,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2014/10/29 02:05:09 | 000,206,848 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2014/10/29 01:48:52 | 000,562,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2013/07/01 20:08:48 | 000,822,232 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2013/07/01 20:08:32 | 000,733,696 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:28 | 000,825,032 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe -- (CsrBtService)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:16 | 001,041,616 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe -- (CsrBtOBEXService)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:08 | 000,465,624 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe -- (CSRBtAudioService)
SRV:[b]64bit:[/b] - [2012/03/22 21:11:00 | 000,064,216 | ---- | M] (Cambridge Silicon Radio Limited) [Auto | Running] -- C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe -- (BtSwitcherService)
SRV - [2021/10/01 15:17:54 | 000,162,456 | ---- | M] (BraveSoftware Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe -- (bravem)
SRV - [2021/10/01 15:17:54 | 000,162,456 | ---- | M] (BraveSoftware Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe -- (brave)
SRV - [2021/08/16 10:55:04 | 000,169,728 | ---- | M] (Adobe Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2021/07/31 13:55:59 | 000,214,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe -- (edgeupdatem)
SRV - [2021/07/31 13:55:59 | 000,214,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe -- (edgeupdate)
SRV - [2020/10/11 18:48:24 | 002,991,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2020/08/31 10:40:06 | 000,397,664 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2019/07/04 06:49:48 | 003,117,648 | ---- | M] (Adobe Systems, Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe -- (AGMService)
SRV - [2019/07/04 06:49:48 | 002,888,272 | ---- | M] (Adobe Systems, Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe -- (AGSService)
SRV - [2017/05/18 13:10:06 | 000,021,240 | ---- | M] (Intel) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel Driver Update Utility\DSAService.exe -- (DSAService)
SRV - [2015/06/29 19:55:08 | 000,323,152 | ---- | M] (Windows (R) Win 7 DDK provider) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc)
SRV - [2015/05/07 16:05:40 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2014/10/29 02:51:55 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2014/10/29 02:04:45 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2014/10/16 10:02:42 | 000,307,464 | ---- | M] (CyberLink) [On_Demand | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe -- (CLKMSVC10_99E320F5)
SRV - [2012/09/17 05:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0)
SRV - [2012/04/24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
SRV - [2010/05/10 11:14:16 | 000,186,848 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\WinService.exe -- (SCM_Service)
SRV - [2009/12/30 12:21:02 | 000,065,536 | ---- | M] (Lexar Media, Inc.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\LxrSII1s.exe -- (LxrSII1s)
SRV - [2009/09/24 09:45:34 | 001,121,664 | ---- | M] (AxBx) [Auto | Running] -- C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\vk_service.exe -- (vkservice)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV:[b]64bit:[/b] - [2021/09/21 06:54:24 | 000,107,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2021/09/21 06:54:23 | 000,422,664 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2021/09/21 06:54:22 | 000,079,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2021/09/18 06:28:48 | 000,374,032 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2021/09/12 12:35:00 | 000,049,248 | ---- | M] (GiliSoft Inc.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\ImgLock.sys -- (ImgLock)
DRV:[b]64bit:[/b] - [2021/09/12 12:34:56 | 000,029,280 | ---- | M] (GiliSoft INC.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SafeDsk.sys -- (SafeDsk)
DRV:[b]64bit:[/b] - [2021/08/09 14:30:14 | 000,051,544 | ---- | M] (Toolwiz.com) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\KSafeDISK.sys -- (KSafeDISK)
DRV:[b]64bit:[/b] - [2021/08/09 14:30:14 | 000,050,520 | ---- | M] (Toolwiz.com) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BTOWSVF.sys -- (BTOWSVF)
DRV:[b]64bit:[/b] - [2021/08/09 14:30:14 | 000,031,576 | ---- | M] (Toolwiz.com) [File_System | System | Running] -- C:\Windows\SysNative\drivers\BTOWSFF.sys -- (BTOWSFF)
DRV:[b]64bit:[/b] - [2021/04/18 22:09:06 | 001,138,648 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168)
DRV:[b]64bit:[/b] - [2021/03/23 16:03:16 | 000,039,448 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\phantomtap.sys -- (phantomtap)
DRV:[b]64bit:[/b] - [2020/12/10 11:37:37 | 000,155,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2020/08/31 10:39:46 | 003,814,240 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2020/06/29 02:35:46 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2020/06/29 02:35:46 | 000,018,944 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_usbccgpfilter.sys -- (ew_usbccgpfilter)
DRV:[b]64bit:[/b] - [2020/04/24 01:22:22 | 000,166,760 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:[b]64bit:[/b] - [2020/04/24 01:22:16 | 000,136,040 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:[b]64bit:[/b] - [2019/09/07 20:37:13 | 000,157,432 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2019/08/21 07:56:42 | 000,062,984 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\flashud.sys -- (int0800)
DRV:[b]64bit:[/b] - [2019/04/08 22:40:07 | 000,136,432 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2019/02/09 19:53:05 | 000,923,384 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS)
DRV:[b]64bit:[/b] - [2018/12/18 07:13:20 | 000,480,176 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2018/06/20 19:48:27 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
DRV:[b]64bit:[/b] - [2018/06/08 13:54:06 | 000,039,112 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VirtualAudio.sys -- (WsAudio_Device)
DRV:[b]64bit:[/b] - [2018/05/23 06:45:28 | 000,027,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2018/05/04 00:02:07 | 000,325,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2018/05/04 00:02:07 | 000,187,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
DRV:[b]64bit:[/b] - [2018/04/05 18:47:55 | 000,087,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2017/11/08 16:55:00 | 000,032,256 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2017/07/08 04:16:36 | 000,086,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2017/05/15 23:09:32 | 000,057,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2017/02/10 15:37:28 | 000,046,600 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2017/01/12 17:51:18 | 000,274,776 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2017/01/12 17:51:18 | 000,117,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2016/10/18 16:14:08 | 000,021,984 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\semav6msr64.sys -- (semav6msr64)
DRV:[b]64bit:[/b] - [2016/08/16 05:59:46 | 000,098,984 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor)
DRV:[b]64bit:[/b] - [2016/08/16 02:18:34 | 000,159,936 | ---- | M] (MBB) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb2ser.sys -- (wdm_usb)
DRV:[b]64bit:[/b] - [2016/04/21 10:10:04 | 000,027,136 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
DRV:[b]64bit:[/b] - [2016/02/18 08:37:26 | 000,020,096 | ---- | M] (GlarySoft Ltd) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\GUMHFilter.sys -- (GUMHFilter)
DRV:[b]64bit:[/b] - [2016/01/26 20:15:40 | 000,072,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2015/12/01 20:46:03 | 000,050,160 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:[b]64bit:[/b] - [2015/12/01 20:46:03 | 000,038,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:[b]64bit:[/b] - [2015/11/05 15:23:52 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2015/11/05 15:23:40 | 000,023,040 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
DRV:[b]64bit:[/b] - [2015/10/11 07:34:30 | 000,468,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2015/07/22 14:54:56 | 000,030,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iaiogpio.sys -- (iaiogpio)
DRV:[b]64bit:[/b] - [2015/04/29 10:44:36 | 000,600,088 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:[b]64bit:[/b] - [2015/04/25 03:25:32 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2015/03/20 02:56:10 | 000,080,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2015/03/13 05:03:31 | 000,239,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2015/03/09 03:02:51 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2015/01/30 04:01:46 | 000,132,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthA2DP.sys -- (BthA2DP)
DRV:[b]64bit:[/b] - [2014/11/04 20:33:40 | 000,058,176 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2014/10/29 04:57:42 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2014/10/29 04:56:04 | 000,027,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2014/10/29 03:47:48 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2014/10/29 03:46:43 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2014/10/29 03:45:54 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2014/10/29 03:45:39 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2014/10/29 03:45:16 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2014/10/29 02:50:37 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2014/10/17 05:56:23 | 000,039,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2014/08/15 01:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2014/06/09 07:20:30 | 000,069,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaioi2ce.sys -- (iaioi2c)
DRV:[b]64bit:[/b] - [2014/06/09 07:20:30 | 000,031,232 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaiogpioe.sys -- (GPIO)
DRV:[b]64bit:[/b] - [2014/04/02 19:02:18 | 003,893,248 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athwbx.sys -- (athr)
DRV:[b]64bit:[/b] - [2014/03/27 04:06:40 | 000,331,992 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUVStor.sys -- (RSUSBVSTOR)
DRV:[b]64bit:[/b] - [2014/03/18 11:13:15 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2014/03/18 11:13:02 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2014/03/18 11:13:01 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
DRV:[b]64bit:[/b] - [2014/03/18 10:45:41 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2014/01/15 14:21:46 | 000,088,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TXEIx64.sys -- (TXEIx64)
DRV:[b]64bit:[/b] - [2013/08/22 14:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2013/08/22 14:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2013/08/22 13:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2013/08/22 13:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2013/08/22 13:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:58 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2013/08/22 12:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2013/08/22 12:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2013/08/22 12:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2013/08/22 12:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2013/08/13 00:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2013/08/10 01:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2013/07/30 19:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2013/07/25 20:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2013/07/17 17:59:00 | 000,021,360 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMDriver.sys -- (LMDriver)
DRV:[b]64bit:[/b] - [2013/07/17 17:59:00 | 000,014,680 | ---- | M] (Acer Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RadioShim.sys -- (RadioShim)
DRV:[b]64bit:[/b] - [2012/10/03 15:14:56 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2012/08/10 02:01:00 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:36 | 000,023,752 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrusbfilter.sys -- (csrusbfilter)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:34 | 000,047,296 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrusb.sys -- (csrusb)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:32 | 000,061,128 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrserial.sys -- (csrserial)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:30 | 000,039,616 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\csrpan.sys -- (csrpan)
DRV:[b]64bit:[/b] - [2012/03/22 21:08:22 | 002,784,968 | ---- | M] (Cambridge Silicon Radio Limited) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CsrBtPort.sys -- (CsrBtPort)
DRV:[b]64bit:[/b] - [2010/04/06 17:33:10 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (IvtPanBusSrv)
DRV:[b]64bit:[/b] - [2010/04/06 17:33:10 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (btnetBUs)
DRV:[b]64bit:[/b] - [2010/04/06 17:32:48 | 000,027,016 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV:[b]64bit:[/b] - [2010/04/06 17:32:48 | 000,027,016 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtAudioBusSrv)
DRV:[b]64bit:[/b] - [2010/04/06 17:32:46 | 000,023,944 | ---- | M] (IVT Corporation.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\BtHidBus.sys -- (BtHidBus)
DRV:[b]64bit:[/b] - [2009/12/30 09:32:04 | 000,063,064 | ---- | M] (Lexar Media, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\LxrSII1d.sys -- (LxrSII1d)
DRV:[b]64bit:[/b] - [2007/12/26 10:46:26 | 000,340,992 | ---- | M] (NETGEAR Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wg111v2.sys -- (RTL8187)
DRV:[b]64bit:[/b] - [2007/01/19 02:24:24 | 000,025,312 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SCMNdisP.sys -- (SCMNdisP)
DRV:[b]64bit:[/b] - [2005/09/23 21:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {92EC5E20-82F5-4C73-BE66-21ED9F7865EA}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{92EC5E20-82F5-4C73-BE66-21ED9F7865EA}: "URL" = https://www.bing.com/search?q=%7BsearchTerms%7D&form=IE10TR&src=IE10TR&pc=ACJB&toHttps=1&redig=8471668C17594875B02F1D1764DDEA70
IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE:[b]64bit:[/b] - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1;<local>
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {92EC5E20-82F5-4C73-BE66-21ED9F7865EA}
IE - HKLM\..\SearchScopes\{92EC5E20-82F5-4C73-BE66-21ED9F7865EA}: "URL" = https://www.bing.com/search?q=%7BsearchTerms%7D&form=IE10TR&src=IE10TR&pc=ACJB&toHttps=1&redig=8471668C17594875B02F1D1764DDEA70
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1;<local>
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\TEMP.jérôme\Desktop
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?cobrand=acer13.msn.com&ocid=AARDHP&pc=MAARJS
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?cobrand=acer13.msn.com&ocid=AARDHP&pc=MAARJS
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 61 20 42 32 C1 D3 D7 01 [binary data]
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\..\SearchScopes,DefaultScope = {92EC5E20-82F5-4C73-BE66-21ED9F7865EA}
IE - HKU\S-1-5-21-709303801-3742642156-3075411919-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.311.2: C:\Program Files\Java\jre1.8.0_311\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.311.2: C:\Program Files\Java\jre1.8.0_311\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.3: C:\Program Files\VideoLAN\VLC\npvlc.dll File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.1: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.2: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.5.1: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.6: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.10: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.6: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.7: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.7.1: File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.8: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
O1 HOSTS File: ([2019/05/26 16:36:55 | 000,454,948 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 15622 more lines...
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_311\bin\ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_311\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [CsrAudioguiCtrl] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [CSRHarmonySkypePlugin] C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [CsrHCRPServer] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [CsrSyncMLServer] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [HarmonyUserStartup] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [TrayApplication] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [vksts] C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe (Cambridge Silicon Radio Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [WindowsDefender] "%ProgramFiles%\Windows Defender\MSASCuiL.exe" File not found
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Anti-Locky] C:\Program Files (x86)\AxBx\Anti-Locky 2022\antilocky.exe (AxBx)
O4 - HKLM..\Run: [VirusKeeper] C:\Program Files (x86)\AxBx\VirusKeeper 2022 Ultimate\VirusKeeper.exe (AxBx)
O4 - HKLM..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
O4 - HKU\S-1-5-21-709303801-3742642156-3075411919-1001..\Run: [Pokki] C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform File not found
O4 - Startup: C:\Users\All Users\1437397726.2568.bin ()
O4 - Startup: C:\Users\All Users\1437397726.2688.bin ()
O4 - Startup: C:\Users\All Users\1437398031.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1437499318.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1440237750.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1460035122.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1460035133.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1504714500.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1504714503.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1507217005.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1507217007.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1558888088.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1558888090.2584.bin ()
O4 - Startup: C:\Users\All Users\1558888090.2964.bin ()
O4 - Startup: C:\Users\All Users\1558888090.3372.bin ()
O4 - Startup: C:\Users\All Users\1558888090.552.bin ()
O4 - Startup: C:\Users\All Users\1570434512.104.bin ()
O4 - Startup: C:\Users\All Users\1570434512.2980.bin ()
O4 - Startup: C:\Users\All Users\1570434512.888.bin ()
O4 - Startup: C:\Users\All Users\1570434569.1944.bin ()
O4 - Startup: C:\Users\All Users\1570434569.3192.bin ()
O4 - Startup: C:\Users\All Users\1570434569.3932.bin ()
O4 - Startup: C:\Users\All Users\1570434739.3084.bin ()
O4 - Startup: C:\Users\All Users\1570434739.3840.bin ()
O4 - Startup: C:\Users\All Users\1570434739.3940.bin ()
O4 - Startup: C:\Users\All Users\1571054619.2500.bin ()
O4 - Startup: C:\Users\All Users\1571054619.2772.bin ()
O4 - Startup: C:\Users\All Users\1571054619.3356.bin ()
O4 - Startup: C:\Users\All Users\1571054619.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1571054669.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573389588.1656.bin ()
O4 - Startup: C:\Users\All Users\1573389588.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573389598.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573395466.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\1573395469.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\ABBYY [2020/04/25 14:50:17 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\acer [2021/11/06 15:33:34 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Adobe [2021/06/12 07:46:13 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\agent.1495209724.bdinstall.bin ()
O4 - Startup: C:\Users\All Users\agent.update.1572014441.bdinstall.v2.bin ()
O4 - Startup: C:\Users\All Users\Aimersoft Video Converter Ultimate [2016/01/09 22:31:58 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Ament.ini ()
O4 - Startup: C:\Users\All Users\Apple [2021/04/26 16:54:24 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Apple Computer [2021/05/14 15:19:49 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Application Data [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\AutoHideIP [2016/06/04 15:58:01 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\bdch [2015/08/22 16:15:01 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\BlueStacks [2015/06/20 14:09:43 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Bureau [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\CLSK [2015/02/13 13:30:04 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Common Files [2015/06/19 15:55:54 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\All Users\CyberLink [2017/10/11 13:37:46 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\DAEMON Tools Lite [2015/12/02 16:11:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Desktop [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\Diagonal [2016/02/22 17:15:37 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Documents [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\DP45977C.lfl ()
O4 - Startup: C:\Users\All Users\DriverGenius [2015/10/26 18:18:40 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\HideIPEasy [2016/06/04 15:55:14 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\HP [2021/11/05 21:17:09 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\HP Photo Creations [2021/11/05 21:17:09 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Installations [2021/04/19 16:43:41 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\install_clap [2017/10/11 13:36:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Intel [2021/07/05 06:36:28 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\iolo [2017/07/08 09:35:29 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Leawo [2021/04/26 15:27:29 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Menu Démarrer [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\Microsoft [2021/04/26 07:11:15 | 000,000,000 | --SD | M]
O4 - Startup: C:\Users\All Users\mntemp ()
O4 - Startup: C:\Users\All Users\Modèles [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\NCH Software [2015/11/28 14:01:12 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\OEM [2015/07/30 17:51:30 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Oracle [2021/10/30 07:06:29 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Package Cache [2021/10/13 14:58:36 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\PC1Data [2015/08/23 13:57:43 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Pinnacle [2017/05/01 10:22:40 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\prolexisws [2021/02/09 14:07:26 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Qualcomm Atheros [2021/11/04 16:36:48 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\regid.1986-12.com.adobe [2015/06/29 13:38:37 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\regid.1991-06.com.microsoft [2020/11/18 08:40:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\ReviverSoft [2021/11/04 17:54:15 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Start Menu [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\SUPERAntiSpyware.com [2016/05/15 16:54:56 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\SUPPORTDIR [2017/10/11 13:35:41 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Templates [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\All Users\Visan [2021/11/05 21:17:12 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\VSO [2020/08/26 09:33:48 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\WildTangent [2016/06/04 14:09:31 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Wondershare [2021/10/29 10:46:45 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\Xilisoft [2021/04/21 13:19:09 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\All Users\{69533018-33A8-4C46-869A-11AA2CDF4EDC} [2021/11/05 05:06:47 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Default\AppData [2017/03/15 16:11:20 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\Default\Application Data [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Cookies [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Favorites [2015/02/13 13:35:36 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Default\Local Settings [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Menu Démarrer [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Mes documents [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Modèles [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\My Documents [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\NetHood [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\NTUSER.DAT ()
O4 - Startup: C:\Users\Default\NTUSER.DAT.LOG1 ()
O4 - Startup: C:\Users\Default\NTUSER.DAT.LOG2 ()
O4 - Startup: C:\Users\Default\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TM.blf ()
O4 - Startup: C:\Users\Default\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Default\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Default\PrintHood [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Recent [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\SendTo [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Start Menu [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Templates [2013/08/22 15:45:52 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Voisinage d'impression [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Default\Voisinage réseau [2015/06/19 18:16:39 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\.android [2021/10/24 13:08:04 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\.homeplayer [2021/08/04 15:15:52 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\.vinylManager.ini ()
O4 - Startup: C:\Users\Jérôme\AppData [2015/06/19 11:27:19 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\Jérôme\Application Data [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Contacts [2020/03/20 10:12:10 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Cookies [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Desktop [2021/11/06 17:57:44 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Documents [2021/10/27 06:40:04 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Downloads [2021/11/05 05:54:32 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Intel [2017/04/23 16:15:20 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\IntelGraphicsProfiles [2021/11/07 10:50:02 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Links [2021/10/27 15:46:28 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Local Settings [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Menu Démarrer [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Mes documents [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Mes ebooks [2021/10/09 15:42:06 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Jérôme\Modèles [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Music [2021/11/03 16:32:59 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\ntuser.dat ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT.gu.LOG1 ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT.gu.LOG2 ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat.LOG1 ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat.LOG2 ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{1a151dc8-d71c-11ea-892a-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{1a151dc8-d71c-11ea-892a-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{1a151dc8-d71c-11ea-892a-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{470d458b-3df8-11ec-8bc4-d053493837b1}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{470d458b-3df8-11ec-8bc4-d053493837b1}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{470d458b-3df8-11ec-8bc4-d053493837b1}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{4e6e33e3-3e6c-11ec-8bce-d053493837b1}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{4e6e33e3-3e6c-11ec-8bce-d053493837b1}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{4e6e33e3-3e6c-11ec-8bce-d053493837b1}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{f2d3d8b4-8e05-11eb-8a77-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{f2d3d8b4-8e05-11eb-8a77-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.dat{f2d3d8b4-8e05-11eb-8a77-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Jérôme\ntuser.ini ()
O4 - Startup: C:\Users\Jérôme\Pictures [2021/11/02 17:00:52 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Recent [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Searches [2021/05/19 07:36:50 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\SendTo [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Videos [2021/10/30 06:49:29 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Jérôme\Voisinage d'impression [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Jérôme\Voisinage réseau [2015/06/19 11:27:19 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\Public\AccountPictures [2015/06/19 11:16:56 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Users\Public\BlueStacks [2021/04/28 14:01:16 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\CyberLink [2016/02/07 17:38:34 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\Desktop [2021/11/06 14:13:57 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Users\Public\Documents [2021/04/26 07:11:18 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Public\Libraries [2013/08/22 16:36:32 | 000,000,000 | RH-D | M]
O4 - Startup: C:\Users\Public\Music [2021/11/05 05:06:33 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Public\NTUSER.DAT.LOG1 ()
O4 - Startup: C:\Users\Public\NTUSER.DAT.LOG2 ()
O4 - Startup: C:\Users\Public\ntuser.dat{0611dfba-da2d-11e5-8392-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Public\ntuser.dat{0611dfba-da2d-11e5-8392-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Public\ntuser.dat{0611dfba-da2d-11e5-8392-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Public\NTUSER.DAT{e0e30262-166d-11e5-825f-3065ec6e2f1d}.TM.blf ()
O4 - Startup: C:\Users\Public\NTUSER.DAT{e0e30262-166d-11e5-825f-3065ec6e2f1d}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\Public\NTUSER.DAT{e0e30262-166d-11e5-825f-3065ec6e2f1d}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\Public\Pictures [2020/11/15 17:20:51 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\Public\PrivacyPal Sessions [2019/11/18 14:51:06 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\Security Sessions [2021/04/09 10:56:35 | 000,000,000 | ---D | M]
O4 - Startup: C:\Users\Public\Videos [2021/11/05 05:06:33 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP\AppData [2021/11/06 14:19:47 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\TEMP.jérôme\AppData [2021/11/07 10:49:55 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Users\TEMP.jérôme\Application Data [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\Cookies [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\Desktop [2021/11/07 11:28:41 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP.jérôme\Favorites [2021/11/07 10:50:14 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP.jérôme\Local Settings [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\Menu Démarrer [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT ()
O4 - Startup: C:\Users\TEMP.jérôme\ntuser.dat.LOG1 ()
O4 - Startup: C:\Users\TEMP.jérôme\ntuser.dat.LOG2 ()
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TM.blf ()
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000001.regtrans-ms ()
O4 - Startup: C:\Users\TEMP.jérôme\NTUSER.DAT{bbed3e3b-0b41-11e3-8249-d6927d06400b}.TMContainer00000000000000000002.regtrans-ms ()
O4 - Startup: C:\Users\TEMP.jérôme\ntuser.ini ()
O4 - Startup: C:\Users\TEMP.jérôme\Searches [2021/11/07 10:52:15 | 000,000,000 | R--D | M]
O4 - Startup: C:\Users\TEMP.jérôme\SendTo [2021/11/07 10:49:55 | 000,000,000 | -HSD | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: localhost ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: localhost ([]* in Trusted sites)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2465FDF6-08AE-4BDD-82C0-A4D1063D756D}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{26AA6A43-AF1F-4074-A2AE-224B63839F37}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2911FD19-3E04-4E80-986E-439BD9D1B493}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3A9C5B95-85DC-4979-9EB5-58F3D53E5F5B}: DhcpNameServer = 212.27.40.240 212.27.40.241
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{44D9412F-F1CA-4090-9DD3-5837AAD7E488}: D
5 réponses
Salut,
Tu peux télécharger Autoruns, extraire tout, et l'exécuter en tant qu'administrateur.
https://filehippo.com/fr/download_autoruns/13.98/
Cherches le dans la case Filter
Tu peux télécharger Autoruns, extraire tout, et l'exécuter en tant qu'administrateur.
https://filehippo.com/fr/download_autoruns/13.98/
Cherches le dans la case Filter
RE_
Un fichier Run.txt s'est créé à la racine de C: , postes le .
A la seconde lignes , tu as bien eu la demande de suppression ? ça a bien marqué opération réussie ?
Un fichier Run.txt s'est créé à la racine de C: , postes le .
A la seconde lignes , tu as bien eu la demande de suppression ? ça a bien marqué opération réussie ?
RE_
Oui c'est normal , c'est le chemin normal de CMD . Fais ce que je t'ai indiqué dans mon message
https://forums.commentcamarche.net/forum/affich-37414956-c-users-temp-jerome-appdata-local-pokki-engine-launcher-dll#22
Oui c'est normal , c'est le chemin normal de CMD . Fais ce que je t'ai indiqué dans mon message
https://forums.commentcamarche.net/forum/affich-37414956-c-users-temp-jerome-appdata-local-pokki-engine-launcher-dll#22
RE_
Vu que tu as du mal à répondre aux questions , on va faire un diagnostic avec un outil plus récent. OTL est totalement obsolète
Bien lire toute la procédure avant de poster les rapports
Sont attendus les rapports FRST.txt et Addition.txt
Tous les rapports doivent être hébergés sur https://security-x.fr/up/ et tu indiques les liens obtenus dans ta réponse
---------------------------------------------------------------------------------------------
--> Le filtre SmartScreen peut déclencher une alerte. Cliquer sur Actions ou Informations complémentaires puis sur Exécuter quand même
---------------------------------------------------------------------------------------------
--> Télécharge la version FRST de Farbar, compatible avec ton système et enregistre le fichier sur ton Bureau
--> Pour un système en 32 bits
--> Pour un système en 64 bits
Comment savoir quelle version 32 bits ou 64 bits est exécutée sur mon système ?
--> Patiente le temps que ton navigateur te propose le téléchargement à enregistrer, sans cliquer nulle part, surtout pas sur les sponsors de la page.
--> Ferme toutes les applications, y compris ton navigateur
--> Double-clique sur FRST.exe et clique sur Oui pour accepter le Disclaimer
--> Sous Vista, Windows 7 / 8 et 10, il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur
--> Attendre qu'il indique L'outil est prêt à fonctionner
--> Sur le menu principal, clique sur Analyser et patiente le temps de l'analyse
--> A la fin du scan, les rapports FRST.txt et Addition.txt sont créés. Poste ces rapports dans ta prochaine réponse.
--> Les rapports sont enregistrés au même emplacement que l'outil et sous C:\FRST\Logs
Vu que tu as du mal à répondre aux questions , on va faire un diagnostic avec un outil plus récent. OTL est totalement obsolète
Bien lire toute la procédure avant de poster les rapports
Ne pas les poster directement dans les messages car ils sont illisibles et incomplets
Sont attendus les rapports FRST.txt et Addition.txt
Tous les rapports doivent être hébergés sur https://security-x.fr/up/ et tu indiques les liens obtenus dans ta réponse
---------------------------------------------------------------------------------------------
--> Le filtre SmartScreen peut déclencher une alerte. Cliquer sur Actions ou Informations complémentaires puis sur Exécuter quand même
---------------------------------------------------------------------------------------------
--> Télécharge la version FRST de Farbar, compatible avec ton système et enregistre le fichier sur ton Bureau
--> Pour un système en 32 bits
--> Pour un système en 64 bits
Comment savoir quelle version 32 bits ou 64 bits est exécutée sur mon système ?
--> Patiente le temps que ton navigateur te propose le téléchargement à enregistrer, sans cliquer nulle part, surtout pas sur les sponsors de la page.
--> Ferme toutes les applications, y compris ton navigateur
--> Double-clique sur FRST.exe et clique sur Oui pour accepter le Disclaimer
--> Sous Vista, Windows 7 / 8 et 10, il faut lancer le fichier par clic-droit -> Exécuter en tant qu'administrateur
--> Attendre qu'il indique L'outil est prêt à fonctionner
--> Sur le menu principal, clique sur Analyser et patiente le temps de l'analyse
--> A la fin du scan, les rapports FRST.txt et Addition.txt sont créés. Poste ces rapports dans ta prochaine réponse.
--> Les rapports sont enregistrés au même emplacement que l'outil et sous C:\FRST\Logs
Bon. Merci infiniment à tous pour vos réponses et efforts, mais j'arrête là; je ne vais pas continuer à installer des trucs. J'abandonne et j'enverrai mon PC à réparer.
Merci encore à tous et désoler d'avoir mobiliser de votre temps.
Merci encore à tous et désoler d'avoir mobiliser de votre temps.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Si tu vois une ligne en bas avec C:\Users\TEMP jérôme\AppData\Local\Pokki\Engine\Launcher.dll
Fais clic droit dessus > Delete