Interpréter RSIT

Bonjour,

J'ai attrapé un virus il y a quelques jours en voulant télécharger. Je ne pouvait plus faire grand-chose donc l'idée m'est venue de réinstaller Windows 10. Je ne sais pas si c'était une bonne idée, mais j'ai des "play Naruto" et autres qui sont restés sur mon bureau.

Avast a détecté 2 virus mais n'arrive pas à les supprimer. Je n'ai pas réussi à télécharger malwarebytes anti-malware. Du coup j'ai fait faire un rapport RSIT mais je ne sais pas comment l'interpréter. Si quelqu'un s'en sent la compétence, il/elle est le bienvenue !
Merci pour votre aide !

Logfile of random's system information tool 1.10 (written by random/random)
Run by Noémie at 2017-01-17 17:03:09
Microsoft Windows 10 Famille
System drive C: has 91 GB (48%) free of 190 GB
Total RAM: 3982 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:03:32, on 17/01/2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Users\Noémie\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files\AVAST Software\Avast\avastUi.exe
C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe
C:\Users\Noémie\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Noémie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_17_01&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCtD0AyEyE0C0DyDzytByEyC0CtB0EtBtN0D0Tzu0StCzztAtAtN1L2XzutAtFtByDtFtCtFzytDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StByD0ByEyD0Fzy0EtGyD0DzzzytGyCtC0D0CtGyD0F0C0FtGzztD0DtBtDtDtCyCzytBtBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtD0CtA0F0C0C0FtG0FtAzz0CtGyEzzzzzytG0A0FtAzytGyE0CyEtD0A0F0AyCyD0E0Ezy2QtN0A0LzuyE%26cr%3D105638898%26a%3Dwbf_adsrch_17_01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_17_01&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCtD0AyEyE0C0DyDzytByEyC0CtB0EtBtN0D0Tzu0StCzztAtAtN1L2XzutAtFtByDtFtCtFzytDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StByD0ByEyD0Fzy0EtGyD0DzzzytGyCtC0D0CtGyD0F0C0FtGzztD0DtBtDtDtCyCzytBtBtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtD0CtA0F0C0C0FtG0FtAzz0CtGyEzzzzzytG0A0FtAzytGyE0CyEtD0A0F0AyCyD0E0Ezy2QtN0A0LzuyE%26cr%3D105638898%26a%3Dwbf_adsrch_17_01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Noémie\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\RunOnce: [Uninstall 17.3.6381.0405\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Noémie\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64"
O4 - HKCU\..\RunOnce: [Uninstall 17.3.6381.0405] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Noémie\AppData\Local\Microsoft\OneDrive\17.3.6381.0405"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVICE RÉSEAU')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\AJRouter.dll,-2 (AJRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\AppReadiness.dll,-1000 (AppReadiness) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\appxdeploymentserver.dll,-1 (AppXSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AudioEndpointBuilder.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%windir%\system32\bisrv.dll,-100 (BrokerInfrastructure) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\BthHFSrv.dll,-103 (BthHFSrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: ByteFence Anti-Malware Service (ByteFenceService) - Byte Technologies LLC - C:\Program Files\ByteFence\ByteFenceService.exe
O23 - Service: @%SystemRoot%\system32\cdpsvc.dll,-100 (CDPSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cdpusersvc.dll,-100 (CDPUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: CDPUserSvc_1169e0 - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ClipSVC.dll,-103 (ClipSVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\coremessaging.dll,-1 (CoreMessagingRegistrar) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @combase.dll,-5012 (DcomLaunch) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dcpsvc.dll,-3001 (DcpSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\das.dll,-100 (DeviceAssociationService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (DeviceInstall) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DevQueryBroker.dll,-100 (DevQueryBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\diagtrack.dll,-3001 (DiagTrack) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\Windows.Internal.Management.dll,-100 (DmEnrollmentSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dmwappushsvc.dll,-200 (dmwappushservice) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dosvc.dll,-100 (DoSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DeviceSetupManager.dll,-1000 (DsmSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dssvc.dll,-10003 (DsSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\embeddedmodesvc.dll,-201 (embeddedmode) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @EnterpriseAppMgmtSvc.dll,-1 (EntAppSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (EventLog) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fhsvc.dll,-101 (fhsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FrameServer.dll,-100 (FrameServer) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\hvhostsvc.dll,-100 (HvHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\tetheringservice.dll,-4097 (icssvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\irmon.dll,-2000 (irmon) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\lfsvc.dll,-1 (lfsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\licensemanagersvc.dll,-200 (LicenseManager) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%windir%\system32\lsm.dll,-1001 (LSM) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\moshost.dll,-100 (MapsBroker) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\MessagingService.dll,-100 (MessagingService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: MessagingService_1169e0 - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\WINDOWS\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\ncasvc.dll,-3009 (NcaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ncbservice.dll,-500 (NcbService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\NcdAutoSetup.dll,-100 (NcdAutoSetup) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofmsvc.dll,-202 (netprofm) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\NetSetupSvc.dll,-3 (NetSetupSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\NgcCtnrSvc.dll,-1 (NgcCtnrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\APHostRes.dll,-10002 (OneSyncSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Hôte de synchronisation_1169e0 (OneSyncSvc_1169e0) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\WINDOWS\SysWow64\perfhost.exe
O23 - Service: @%SystemRoot%\system32\PhoneserviceRes.dll,-10000 (PhoneSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-15001 (PimIndexMaintenanceSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Données de contacts_1169e0 (PimIndexMaintenanceSvc_1169e0) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-200 (PlugPlay) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-1 (PrintNotify) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\RDXService.dll,-256 (RetailDemo) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\RMapi.dll,-1001 (RmSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @combase.dll,-5010 (RpcSs) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: ByteFence Security Real-time Protection (rtop) - Unknown owner - C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ScDeviceEnum.dll,-100 (ScDeviceEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\sensorservice.dll,-1000 (SensorService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\smphost.dll,-102 (smphost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SmsRouterSvc.dll,-10001 (SmsRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\windows.staterepository.dll,-1 (StateRepository) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\svsvc.dll,-101 (svsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%windir%\system32\SystemEventsBrokerServer.dll,-1001 (SystemEventsBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\tileobjserver.dll,-1 (tiledatamodelsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%windir%\system32\TimeBrokerServer.dll,-1001 (TimeBrokerSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\WINDOWS\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-10003 (UnistoreSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Stockage des données utilisateur_1169e0 (UnistoreSvc_1169e0) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-14001 (UserDataSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Accès aux données utilisateur_1169e0 (UserDataSvc_1169e0) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\usermgr.dll,-100 (UserManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\usocore.dll,-102 (UsoSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\icsvc.dll,-801 (vmicguestinterface) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-101 (vmicheartbeat) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-201 (vmickvpexchange) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvcext.dll,-601 (vmicrdv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-301 (vmicshutdown) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-401 (vmictimesync) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-901 (vmicvmsession) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvcext.dll,-501 (vmicvss) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\WalletService.dll,-1000 (WalletService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wcmsvc.dll,-4097 (Wcmsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wephostsvc.dll,-100 (WEPHOSTSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiarpc.dll,-2 (WiaRpc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\flightsettings.dll,-104 (wisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (WlanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wlidsvc.dll,-100 (wlidsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\workfolderssvc.dll,-102 (workfolderssvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpnservice.dll,-1 (WpnService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WpnUserService.dll,-1 (WpnUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service utilisateur de notifications Push Windows_1169e0 (WpnUserService_1169e0) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\WINDOWS\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\XblAuthManager.dll,-100 (XblAuthManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\XblGameSave.dll,-100 (XblGameSave) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\XboxNetApiSvc.dll,-100 (XboxNetApiSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe

--
End of file - 29437 bytes

Scheduled tasks folder

C:\WINDOWS\tasks\Yahoo! Powered renod.job - C:\WINDOWS\system32\wscript.exe "C:\ProgramData\{F50A3069-7F48-BAAF-F98E-24ED63CCAF23}\sele.txt" "687474703a2f2f7761676e672e636f6d" "433a5c50726f6772616d446174615c7b46353041333036392d374634382d424141462d463938452d3234454436334343414632337d5c6e61726f7369" "433a5c50726f6772616d446174615c7b46353041333036392d374634382d424141462d463938452d3234454436334343414632337d5c6e6f7465726f6c" "//B" "//E:jscript" "--IsErIk"
C:\WINDOWS\tasks\{306F02B2-2882-436E-B426-2C1E061F04CA}.job - C:\Users\NOMIE~1\AppData\Local\71A6A1~1\updane.exe /Check

Registry dump

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2017-01-07 9103976]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\Noémie\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2017-01-07 1517280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall 17.3.6381.0405\amd64"=C:\WINDOWS\system32\cmd.exe [2016-07-16 202752]
"Uninstall 17.3.6381.0405"=C:\WINDOWS\system32\cmd.exe [2016-07-16 202752]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingRegistrar]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TileDataModelSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

File associations

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

List of files/folders created in the last 1 month

2017-01-17 17:03:09 ----D---- C:\Program Files (x86)\trend micro
2017-01-17 17:03:08 ----D---- C:\rsit
2017-01-17 12:37:47 ----D---- C:\ProgramData\Comodo Downloader
2017-01-17 12:37:46 ----D---- C:\ProgramData\Shared Space
2017-01-17 12:37:46 ----D---- C:\ProgramData\Comodo
2017-01-17 09:50:54 ----D---- C:\Users\Noémie\AppData\Roaming\Macromedia
2017-01-07 18:07:59 ----D---- C:\ProgramData\ByteFence
2017-01-07 18:00:29 ----D---- C:\Users\Noémie\AppData\Roaming\AVAST Software
2017-01-07 17:58:54 ----A---- C:\WINDOWS\avastSS.scr
2017-01-07 17:57:28 ----D---- C:\ProgramData\{F50A3069-7F48-BAAF-F98E-24ED63CCAF23}
2017-01-07 17:56:57 ----D---- C:\ProgramData\AVAST Software
2017-01-07 17:45:40 ----D---- C:\Users\Noémie\AppData\Roaming\Skype
2017-01-07 17:44:01 ----D---- C:\ProgramData\Microsoft OneDrive
2017-01-07 17:41:24 ----D---- C:\Users\Noémie\AppData\Roaming\Adobe
2017-01-07 17:35:49 ----SHD---- C:\ProgramData\Modèles
2017-01-07 17:35:49 ----SHD---- C:\ProgramData\Menu Démarrer
2017-01-07 17:35:49 ----SHD---- C:\ProgramData\Documents
2017-01-07 17:35:49 ----SHD---- C:\ProgramData\Bureau
2017-01-07 17:35:49 ----SHD---- C:\ProgramData\Application Data
2017-01-07 17:28:31 ----D---- C:\WINDOWS\SoftwareDistribution
2017-01-07 17:26:26 ----ASH---- C:\hiberfil.sys
2017-01-07 17:22:59 ----SD---- C:\Users\Noémie\AppData\Roaming\Microsoft
2017-01-07 17:15:58 ----D---- C:\WINDOWS\SysWoW64\RTCOM
2017-01-07 17:15:55 ----A---- C:\WINDOWS\SysWoW64\OpenCL.DLL
2017-01-07 17:15:35 ----D---- C:\Program Files (x86)\Common Files\Intel
2017-01-07 17:13:37 ----A---- C:\WINDOWS\SysWoW64\PrintConfig.dll
2017-01-07 17:12:45 ----D---- C:\ProgramData\USOShared
2017-01-07 17:11:53 ----AS---- C:\WINDOWS\bootstat.dat
2017-01-07 17:06:44 ----D---- C:\WINDOWS\InfusedApps
2017-01-07 17:03:58 ----DC---- C:\WINDOWS\Panther
2017-01-07 17:01:26 ----D---- C:\Windows.old
2017-01-07 16:59:06 ----D---- C:\WINDOWS\ServiceProfiles
2017-01-07 16:57:33 ----D---- C:\ProgramData\SetupTPDriver
2017-01-07 16:56:35 ----D---- C:\WINDOWS\Setup
2017-01-07 16:53:27 ----D---- C:\WINDOWS\SysWoW64\XPSViewer
2017-01-07 16:53:27 ----D---- C:\WINDOWS\OCR
2017-01-07 16:53:26 ----D---- C:\Program Files (x86)\Reference Assemblies
2017-01-07 16:53:26 ----D---- C:\Program Files (x86)\MSBuild
2017-01-07 16:51:59 ----D---- C:\WINDOWS\SysWoW64\winrm
2017-01-07 16:51:59 ----D---- C:\WINDOWS\SysWoW64\WCN
2017-01-07 16:51:59 ----D---- C:\WINDOWS\SysWoW64\sysprep
2017-01-07 16:51:59 ----D---- C:\WINDOWS\SysWoW64\slmgr
2017-01-07 16:51:59 ----D---- C:\WINDOWS\SysWoW64\Printing_Admin_Scripts
2017-01-07 16:51:58 ----D---- C:\WINDOWS\SysWoW64\fr
2017-01-07 16:51:58 ----D---- C:\WINDOWS\SysWoW64\en
2017-01-07 16:51:58 ----D---- C:\WINDOWS\SysWoW64\drivers\UMDF
2017-01-07 16:51:58 ----D---- C:\WINDOWS\SysWoW64\drivers\fr-FR
2017-01-07 16:51:58 ----D---- C:\WINDOWS\SysWoW64\drivers\en-US
2017-01-07 16:51:58 ----D---- C:\WINDOWS\SysWoW64\0409
2017-01-07 16:51:56 ----D---- C:\WINDOWS\fr-FR
2017-01-07 16:51:56 ----D---- C:\WINDOWS\en-US
2017-01-07 16:51:56 ----D---- C:\WINDOWS\DigitalLocker
2017-01-07 16:47:37 ----A---- C:\WINDOWS\SysWoW64\FlashPlayerApp.exe
2017-01-07 16:45:19 ----A---- C:\WINDOWS\SysWoW64\NOISE.DAT
2017-01-07 16:45:19 ----A---- C:\WINDOWS\SysWoW64\msclmd.dll
2017-01-07 16:45:18 ----A---- C:\WINDOWS\SysWoW64\dssec.dat
2017-01-07 16:45:03 ----RSH---- C:\WINDOWS\fonts\StaticCache.dat
2017-01-07 16:45:03 ----A---- C:\WINDOWS\win.ini
2017-01-07 16:45:03 ----A---- C:\WINDOWS\system.ini
2017-01-07 16:45:03 ----A---- C:\WINDOWS\fonts\desktop.ini
2017-01-07 16:45:02 ----ASH---- C:\Program Files (x86)\desktop.ini
2017-01-07 16:44:57 ----SD---- C:\WINDOWS\SysWoW64\Nui
2017-01-07 16:44:57 ----SD---- C:\WINDOWS\SysWoW64\F12
2017-01-07 16:44:57 ----SD---- C:\WINDOWS\SysWoW64\DiagSvcs
2017-01-07 16:44:57 ----SD---- C:\WINDOWS\SysWoW64\Configuration
2017-01-07 16:44:57 ----RD---- C:\WINDOWS\PrintDialog
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Web
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Vss
2017-01-07 16:44:57 ----D---- C:\WINDOWS\twain_32
2017-01-07 16:44:57 ----D---- C:\WINDOWS\tracing
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Temp
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Tasks
2017-01-07 16:44:57 ----D---- C:\WINDOWS\TAPI
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\zh-TW
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\zh-HK
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\zh-CN
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\WinMetadata
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\WindowsPowerShell
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\wbem
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\uk-UA
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\tr-TR
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\th-TH
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Tasks
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\sv-SE
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\sru
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\sr-Latn-RS
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\sr-Latn-CS
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\sppui
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\spp
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Speech_OneCore
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Speech
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\SMI
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\sl-SI
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\sk-SK
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\setup
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\ru-RU
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\ro-RO
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\restore
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Recovery
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\RasToast
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\ras
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\pt-PT
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\pt-BR
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\pl-PL
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\oobe
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\nl-NL
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\networklist
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\NDF
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\nb-NO
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\MUI
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\MsDtc
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\MSDRM
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\migwiz
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\migration
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\MailContactsCalendarSync
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Macromed
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\lv-LV
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\lt-LT
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\LogFiles
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Licenses
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\ko-KR
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\ja-JP
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\it-IT
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Ipmi
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\InstallShield
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\InputMethod
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\inetsrv
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\IME
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\icsxml
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\hu-HU
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\hr-HR
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\he-IL
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\GroupPolicyUsers
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\GroupPolicy
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\FxsTmp
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\fr-FR
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\fr-CA
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\fi-FI
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\et-EE
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\es-MX
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\es-ES
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\en-US
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\en-GB
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\el-GR
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\DriverStore
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\drivers
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\downlevel
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Dism
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\de-DE
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\da-DK
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\cs-CZ
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\config
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Com
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\catroot
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\Bthprops
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\bg-BG
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\ar-SA
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\AppLocker
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SysWoW64\AdvancedInstallers
2017-01-07 16:44:57 ----D---- C:\WINDOWS\syswow64
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SystemResources
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SystemApps
2017-01-07 16:44:57 ----D---- C:\WINDOWS\System
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Speech_OneCore
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Speech
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SKB
2017-01-07 16:44:57 ----D---- C:\WINDOWS\ShellExperiences
2017-01-07 16:44:57 ----D---- C:\WINDOWS\security
2017-01-07 16:44:57 ----D---- C:\WINDOWS\schemas
2017-01-07 16:44:57 ----D---- C:\WINDOWS\SchCache
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Resources
2017-01-07 16:44:57 ----D---- C:\WINDOWS\rescache
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Registration
2017-01-07 16:44:57 ----D---- C:\WINDOWS\Provisioning
2017-01-07 16:44:57 ----D---- C:\WINDOWS\prefetch
2017-01-07 16:44:57 ----D---- C:\WINDOWS\PolicyDefinitions
2017-01-07 16:44:56 ----SHD---- C:\Program Files (x86)\Windows Sidebar
2017-01-07 16:44:56 ----SD---- C:\WINDOWS\Downloaded Program Files
2017-01-07 16:44:56 ----SD---- C:\ProgramData\Microsoft
2017-01-07 16:44:56 ----RSD---- C:\WINDOWS\Media
2017-01-07 16:44:56 ----RSD---- C:\WINDOWS\Fonts
2017-01-07 16:44:56 ----RD---- C:\WINDOWS\Offline Web Pages
2017-01-07 16:44:56 ----RD---- C:\WINDOWS\MiracastView
2017-01-07 16:44:56 ----RD---- C:\WINDOWS\Microsoft.NET
2017-01-07 16:44:56 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2017-01-07 16:44:56 ----RD---- C:\WINDOWS\assembly
2017-01-07 16:44:56 ----HD---- C:\WINDOWS\Installer
2017-01-07 16:44:56 ----HD---- C:\WINDOWS\ELAMBKUP
2017-01-07 16:44:56 ----HD---- C:\ProgramData
2017-01-07 16:44:56 ----D---- C:\WINDOWS\PLA
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Performance
2017-01-07 16:44:56 ----D---- C:\WINDOWS\ModemLogs
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Migration
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Logs
2017-01-07 16:44:56 ----D---- C:\WINDOWS\LiveKernelReports
2017-01-07 16:44:56 ----D---- C:\WINDOWS\L2Schemas
2017-01-07 16:44:56 ----D---- C:\WINDOWS\InputMethod
2017-01-07 16:44:56 ----D---- C:\WINDOWS\IME
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Help
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Globalization
2017-01-07 16:44:56 ----D---- C:\WINDOWS\GameBarPresenceWriter
2017-01-07 16:44:56 ----D---- C:\WINDOWS\diagnostics
2017-01-07 16:44:56 ----D---- C:\WINDOWS\debug
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Cursors
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Branding
2017-01-07 16:44:56 ----D---- C:\WINDOWS\Boot
2017-01-07 16:44:56 ----D---- C:\WINDOWS\bcastdvr
2017-01-07 16:44:56 ----D---- C:\WINDOWS\AppReadiness
2017-01-07 16:44:56 ----D---- C:\WINDOWS\AppPatch
2017-01-07 16:44:56 ----D---- C:\WINDOWS\appcompat
2017-01-07 16:44:56 ----D---- C:\WINDOWS\addins
2017-01-07 16:44:56 ----D---- C:\ProgramData\USOPrivate
2017-01-07 16:44:56 ----D---- C:\ProgramData\SoftwareDistribution
2017-01-07 16:44:56 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2017-01-07 16:44:56 ----D---- C:\ProgramData\Comms
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\WindowsPowerShell
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Windows Portable Devices
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Windows NT
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Windows Multimedia Platform
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Windows Media Player
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Windows Mail
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Windows Defender
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Microsoft.NET
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Internet Explorer
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Common Files\System
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Common Files\Services
2017-01-07 16:44:56 ----D---- C:\Program Files (x86)\Common Files\Microsoft Shared
2017-01-07 16:44:56 ----D---- C:\PerfLogs
2017-01-07 16:42:45 ----D---- C:\WINDOWS\INF
2017-01-07 16:27:41 ----D---- C:\WINDOWS\CbsTemp
2017-01-07 16:21:33 ----RD---- C:\Users
2017-01-07 16:21:33 ----RD---- C:\Program Files (x86)
2017-01-07 16:21:33 ----RD---- C:\Program Files
2017-01-07 16:21:33 ----D---- C:\WINDOWS\WinSxS
2017-01-07 16:21:33 ----D---- C:\WINDOWS\System32
2017-01-07 16:21:33 ----D---- C:\WINDOWS\servicing
2017-01-07 16:21:33 ----D---- C:\Windows
2017-01-07 16:21:33 ----D---- C:\Program Files (x86)\Common Files
2017-01-07 16:21:15 ----D---- C:\$WINDOWS.~BT
2017-01-07 14:45:41 ----HD---- C:\$SysReset
2017-01-07 14:21:20 ----D---- C:\Microsoft

List of files/folders modified in the last 1 month

2017-01-07 17:01:26 ----SHD---- C:\Recovery
2017-01-07 16:39:45 ----A---- C:\WINDOWS\SysWoW64\comdlg32.dll
2017-01-07 16:39:44 ----A---- C:\WINDOWS\SysWoW64\wmpdxm.dll
2017-01-07 16:39:44 ----A---- C:\WINDOWS\SysWoW64\UIAutomationCore.dll
2017-01-07 16:39:40 ----A---- C:\WINDOWS\SysWoW64\SettingSync.dll
2017-01-07 16:39:38 ----A---- C:\WINDOWS\SysWoW64\msdtcuiu.dll
2017-01-07 16:39:35 ----A---- C:\WINDOWS\SysWoW64\DisplayManager.dll
2017-01-07 16:39:33 ----A---- C:\WINDOWS\SysWoW64\Windows.StateRepository.dll
2017-01-07 16:39:32 ----A---- C:\WINDOWS\SysWoW64\Windows.StateRepositoryClient.dll
2017-01-07 16:39:29 ----A---- C:\WINDOWS\SysWoW64\authui.dll
2017-01-07 16:39:27 ----A---- C:\WINDOWS\SysWoW64\PlayToDevice.dll
2017-01-07 16:39:24 ----A---- C:\WINDOWS\SysWoW64\Windows.AccountsControl.dll
2017-01-07 16:39:24 ----A---- C:\WINDOWS\SysWoW64\evr.dll
2017-01-07 16:39:21 ----A---- C:\WINDOWS\SysWoW64\LockAppBroker.dll
2017-01-07 16:39:20 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.Search.dll
2017-01-07 16:39:20 ----A---- C:\WINDOWS\SysWoW64\Windows.Shell.Search.UriHandler.dll
2017-01-07 16:39:19 ----A---- C:\WINDOWS\SysWoW64\BcastDVRHelper.dll
2017-01-07 16:39:18 ----A---- C:\WINDOWS\SysWoW64\TokenBroker.dll
2017-01-07 16:39:18 ----A---- C:\WINDOWS\SysWoW64\mfnetsrc.dll
2017-01-07 16:39:18 ----A---- C:\WINDOWS\SysWoW64\bcastdvr.exe
2017-01-07 16:39:18 ----A---- C:\WINDOWS\SysWoW64\AppCapture.dll
2017-01-07 16:39:13 ----A---- C:\WINDOWS\SysWoW64\SettingSyncHost.exe
2017-01-07 16:39:13 ----A---- C:\WINDOWS\SysWoW64\mstscax.dll
2017-01-07 16:39:12 ----A---- C:\WINDOWS\SysWoW64\WwaApi.dll
2017-01-07 16:39:11 ----A---- C:\WINDOWS\SysWoW64\tquery.dll
2017-01-07 16:39:11 ----A---- C:\WINDOWS\SysWoW64\SearchProtocolHost.exe
2017-01-07 16:39:11 ----A---- C:\WINDOWS\SysWoW64\SearchIndexer.exe
2017-01-07 16:39:11 ----A---- C:\WINDOWS\SysWoW64\Search.ProtocolHandler.MAPI2.dll
2017-01-07 16:39:11 ----A---- C:\WINDOWS\SysWoW64\mssrch.dll
2017-01-07 16:39:10 ----A---- C:\WINDOWS\SysWoW64\uReFS.dll
2017-01-07 16:39:07 ----A---- C:\WINDOWS\SysWoW64\explorer.exe
2017-01-07 16:39:05 ----A---- C:\WINDOWS\SysWoW64\inetcomm.dll
2017-01-07 16:39:04 ----A---- C:\WINDOWS\SysWoW64\esent.dll
2017-01-07 16:39:03 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Streaming.dll
2017-01-07 16:39:02 ----A---- C:\WINDOWS\SysWoW64\AuthExt.dll
2017-01-07 16:39:01 ----A---- C:\WINDOWS\SysWoW64\iscsiwmi.dll
2017-01-07 16:38:56 ----A---- C:\WINDOWS\SysWoW64\mfmpeg2srcsnk.dll
2017-01-07 16:38:55 ----A---- C:\WINDOWS\SysWoW64\MbaeApiPublic.dll
2017-01-07 16:38:54 ----A---- C:\WINDOWS\SysWoW64\wmpshell.dll
2017-01-07 16:38:54 ----A---- C:\WINDOWS\SysWoW64\BackgroundMediaPolicy.dll
2017-01-07 16:38:53 ----A---- C:\WINDOWS\SysWoW64\GamePanel.exe
2017-01-07 16:38:52 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.dll
2017-01-07 16:38:52 ----A---- C:\WINDOWS\SysWoW64\ReAgentc.exe
2017-01-07 16:38:52 ----A---- C:\WINDOWS\SysWoW64\d3d11.dll
2017-01-07 16:38:51 ----A---- C:\WINDOWS\SysWoW64\migisol.dll
2017-01-07 16:38:49 ----A---- C:\WINDOWS\SysWoW64\efswrt.dll
2017-01-07 16:38:47 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Editing.dll
2017-01-07 16:38:46 ----A---- C:\WINDOWS\SysWoW64\odbcconf.dll
2017-01-07 16:38:45 ----A---- C:\WINDOWS\SysWoW64\TpmCoreProvisioning.dll
2017-01-07 16:38:42 ----A---- C:\WINDOWS\SysWoW64\themecpl.dll
2017-01-07 16:38:41 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.Input.Inking.dll
2017-01-07 16:38:39 ----A---- C:\WINDOWS\SysWoW64\weretw.dll
2017-01-07 16:38:39 ----A---- C:\WINDOWS\SysWoW64\wer.dll
2017-01-07 16:38:36 ----A---- C:\WINDOWS\SysWoW64\dwmcore.dll
2017-01-07 16:38:33 ----A---- C:\WINDOWS\SysWoW64\iedkcs32.dll
2017-01-07 16:38:32 ----A---- C:\WINDOWS\SysWoW64\SndVolSSO.dll
2017-01-07 16:38:31 ----A---- C:\WINDOWS\SysWoW64\RTWorkQ.dll
2017-01-07 16:38:27 ----A---- C:\WINDOWS\SysWoW64\eappprxy.dll
2017-01-07 16:38:27 ----A---- C:\WINDOWS\SysWoW64\eapphost.dll
2017-01-07 16:38:27 ----A---- C:\WINDOWS\SysWoW64\eappgnui.dll
2017-01-07 16:38:27 ----A---- C:\WINDOWS\SysWoW64\eappcfg.dll
2017-01-07 16:38:27 ----A---- C:\WINDOWS\SysWoW64\eapp3hst.dll
2017-01-07 16:38:26 ----A---- C:\WINDOWS\SysWoW64\WordBreakers.dll
2017-01-07 16:38:26 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.Core.TextInput.dll
2017-01-07 16:38:26 ----A---- C:\WINDOWS\SysWoW64\TextInputFramework.dll
2017-01-07 16:38:26 ----A---- C:\WINDOWS\SysWoW64\InputService.dll
2017-01-07 16:38:26 ----A---- C:\WINDOWS\SysWoW64\InputLocaleManager.dll
2017-01-07 16:38:26 ----A---- C:\WINDOWS\SysWoW64\EditBufferTestHook.dll
2017-01-07 16:38:25 ----A---- C:\WINDOWS\SysWoW64\comsvcs.dll
2017-01-07 16:38:23 ----A---- C:\WINDOWS\SysWoW64\msmpeg2vdec.dll
2017-01-07 16:38:22 ----A---- C:\WINDOWS\SysWoW64\Windows.Internal.Management.dll
2017-01-07 16:38:22 ----A---- C:\WINDOWS\SysWoW64\cdp.dll
2017-01-07 16:38:12 ----A---- C:\WINDOWS\SysWoW64\shell32.dll
2017-01-07 16:38:10 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.Logon.dll
2017-01-07 16:38:09 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Playback.MediaPlayer.dll
2017-01-07 16:38:09 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2017-01-07 16:38:09 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.BackgroundMediaPlayback.dll
2017-01-07 16:38:07 ----A---- C:\WINDOWS\SysWoW64\DWrite.dll
2017-01-07 16:38:06 ----A---- C:\WINDOWS\SysWoW64\SettingSyncCore.dll
2017-01-07 16:38:06 ----A---- C:\WINDOWS\SysWoW64\rpcrt4.dll
2017-01-07 16:38:05 ----A---- C:\WINDOWS\SysWoW64\mshtml.dll
2017-01-07 16:38:04 ----A---- C:\WINDOWS\SysWoW64\windows.storage.dll
2017-01-07 16:38:03 ----A---- C:\WINDOWS\SysWoW64\gdi32.dll
2017-01-07 16:38:03 ----A---- C:\WINDOWS\SysWoW64\autoplay.dll
2017-01-07 16:38:02 ----A---- C:\WINDOWS\SysWoW64\KernelBase.dll
2017-01-07 16:38:01 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.BlockedShutdown.dll
2017-01-07 16:37:51 ----A---- C:\WINDOWS\SysWoW64\resutils.dll
2017-01-07 16:37:51 ----A---- C:\WINDOWS\SysWoW64\clusapi.dll
2017-01-07 16:37:50 ----A---- C:\WINDOWS\SysWoW64\UserDeviceRegistration.Ngc.dll
2017-01-07 16:37:50 ----A---- C:\WINDOWS\SysWoW64\UserDeviceRegistration.dll
2017-01-07 16:37:50 ----A---- C:\WINDOWS\SysWoW64\dsreg.dll
2017-01-07 16:37:49 ----A---- C:\WINDOWS\SysWoW64\Windows.ApplicationModel.Core.dll
2017-01-07 16:37:49 ----A---- C:\WINDOWS\SysWoW64\MFPlay.dll
2017-01-07 16:37:48 ----A---- C:\WINDOWS\SysWoW64\AuthBroker.dll
2017-01-07 16:37:46 ----A---- C:\WINDOWS\SysWoW64\dxgi.dll
2017-01-07 16:37:45 ----A---- C:\WINDOWS\splwow64.exe
2017-01-07 16:37:44 ----A---- C:\WINDOWS\SysWoW64\Windows.Perception.Stub.dll
2017-01-07 16:37:44 ----A---- C:\WINDOWS\SysWoW64\mfreadwrite.dll
2017-01-07 16:37:43 ----A---- C:\WINDOWS\SysWoW64\Windows.Devices.LowLevel.dll
2017-01-07 16:37:41 ----A---- C:\WINDOWS\SysWoW64\usercpl.dll
2017-01-07 16:37:31 ----A---- C:\WINDOWS\SysWoW64\Windows.Web.Http.dll
2017-01-07 16:37:30 ----A---- C:\WINDOWS\SysWoW64\cmifw.dll
2017-01-07 16:37:29 ----A---- C:\WINDOWS\SysWoW64\container.dll
2017-01-07 16:37:27 ----A---- C:\WINDOWS\SysWoW64\AppxPackaging.dll
2017-01-07 16:37:25 ----A---- C:\WINDOWS\SysWoW64\CertEnroll.dll
2017-01-07 16:37:22 ----A---- C:\WINDOWS\SysWoW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-07 16:37:21 ----A---- C:\WINDOWS\SysWoW64\policymanager.dll
2017-01-07 16:37:17 ----A---- C:\WINDOWS\SysWoW64\CryptoWinRT.dll
2017-01-07 16:37:16 ----A---- C:\WINDOWS\SysWoW64\MrmCoreR.dll
2017-01-07 16:37:15 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.dll
2017-01-07 16:37:15 ----A---- C:\WINDOWS\SysWoW64\D3D12.dll
2017-01-07 16:37:14 ----A---- C:\WINDOWS\SysWoW64\Windows.Devices.PointOfService.dll
2017-01-07 16:37:13 ----A---- C:\WINDOWS\SysWoW64\Windows.Networking.HostName.dll
2017-01-07 16:37:13 ----A---- C:\WINDOWS\SysWoW64\dialclient.dll
2017-01-07 16:37:12 ----A---- C:\WINDOWS\SysWoW64\ntshrui.dll
2017-01-07 16:37:10 ----A---- C:\WINDOWS\SysWoW64\wmpeffects.dll
2017-01-07 16:37:08 ----A---- C:\WINDOWS\SysWoW64\mshtmled.dll
2017-01-07 16:37:07 ----A---- C:\WINDOWS\SysWoW64\oleacc.dll
2017-01-07 16:37:06 ----A---- C:\WINDOWS\SysWoW64\dlnashext.dll
2017-01-07 16:37:05 ----A---- C:\WINDOWS\SysWoW64\aclui.dll
2017-01-07 16:37:04 ----A---- C:\WINDOWS\SysWoW64\ConfigureExpandedStorage.dll
2017-01-07 16:37:00 ----A---- C:\WINDOWS\SysWoW64\sendmail.dll
2017-01-07 16:36:59 ----A---- C:\WINDOWS\SysWoW64\msftedit.dll
2017-01-07 16:36:59 ----A---- C:\WINDOWS\SysWoW64\mfmkvsrcsnk.dll
2017-01-07 16:36:58 ----A---- C:\WINDOWS\SysWoW64\sspicli.dll
2017-01-07 16:36:57 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Speech.UXRes.dll
2017-01-07 16:36:57 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Speech.dll
2017-01-07 16:36:56 ----A---- C:\WINDOWS\SysWoW64\ieframe.dll
2017-01-07 16:36:54 ----A---- C:\WINDOWS\SysWoW64\ShareHost.dll
2017-01-07 16:36:54 ----A---- C:\WINDOWS\SysWoW64\mfaudiocnv.dll
2017-01-07 16:36:52 ----A---- C:\WINDOWS\SysWoW64\storagewmi.dll
2017-01-07 16:36:51 ----A---- C:\WINDOWS\SysWoW64\storagewmi_passthru.dll
2017-01-07 16:36:51 ----A---- C:\WINDOWS\SysWoW64\delegatorprovider.dll
2017-01-07 16:36:51 ----A---- C:\WINDOWS\SysWoW64\d3d10warp.dll
2017-01-07 16:36:48 ----A---- C:\WINDOWS\SysWoW64\PlayToReceiver.dll
2017-01-07 16:36:47 ----A---- C:\WINDOWS\SysWoW64\vbscript.dll
2017-01-07 16:36:44 ----A---- C:\WINDOWS\SysWoW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-01-07 16:36:44 ----A---- C:\WINDOWS\SysWoW64\NPSM.dll
2017-01-07 16:36:43 ----A---- C:\WINDOWS\SysWoW64\Windows.Gaming.XboxLive.Storage.dll
2017-01-07 16:36:43 ----A---- C:\WINDOWS\SysWoW64\dnsapi.dll
2017-01-07 16:36:40 ----A---- C:\WINDOWS\SysWoW64\crypt32.dll
2017-01-07 16:36:39 ----A---- C:\WINDOWS\SysWoW64\AzureSettingSyncProvider.dll
2017-01-07 16:36:36 ----A---- C:\WINDOWS\SysWoW64\pidgenx.dll
2017-01-07 16:36:35 ----A---- C:\WINDOWS\SysWoW64\wsp_sr.dll
2017-01-07 16:36:34 ----A---- C:\WINDOWS\SysWoW64\olepro32.dll
2017-01-07 16:36:34 ----A---- C:\WINDOWS\SysWoW64\BluetoothApis.dll
2017-01-07 16:36:30 ----A---- C:\WINDOWS\SysWoW64\Windows.Globalization.dll
2017-01-07 16:36:30 ----A---- C:\WINDOWS\SysWoW64\GlobCollationHost.dll
2017-01-07 16:36:29 ----A---- C:\WINDOWS\SysWoW64\msinfo32.exe
2017-01-07 16:36:29 ----A---- C:\WINDOWS\SysWoW64\gdi32full.dll
2017-01-07 16:36:29 ----A---- C:\WINDOWS\SysWoW64\cryptngc.dll
2017-01-07 16:36:25 ----A---- C:\WINDOWS\SysWoW64\wlancfg.dll
2017-01-07 16:36:25 ----A---- C:\WINDOWS\SysWoW64\StoreAgent.dll
2017-01-07 16:36:25 ----A---- C:\WINDOWS\SysWoW64\InstallAgentUserBroker.exe
2017-01-07 16:36:25 ----A---- C:\WINDOWS\SysWoW64\InstallAgent.exe
2017-01-07 16:36:24 ----A---- C:\WINDOWS\SysWoW64\DevicePairing.dll
2017-01-07 16:36:23 ----A---- C:\WINDOWS\SysWoW64\LicenseManager.dll
2017-01-07 16:36:22 ----A---- C:\WINDOWS\SysWoW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-01-07 16:36:22 ----A---- C:\WINDOWS\SysWoW64\Windows.ApplicationModel.Store.dll
2017-01-07 16:36:21 ----A---- C:\WINDOWS\SysWoW64\wsecedit.dll
2017-01-07 16:36:17 ----A---- C:\WINDOWS\SysWoW64\AudioSes.dll
2017-01-07 16:36:17 ----A---- C:\WINDOWS\SysWoW64\AUDIOKSE.dll
2017-01-07 16:36:16 ----A---- C:\WINDOWS\SysWoW64\WWAHost.exe
2017-01-07 16:36:16 ----A---- C:\WINDOWS\SysWoW64\CloudBackupSettings.dll
2017-01-07 16:36:14 ----A---- C:\WINDOWS\SysWoW64\AppXDeploymentClient.dll
2017-01-07 16:36:13 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Ocr.dll
2017-01-07 16:36:09 ----A---- C:\WINDOWS\SysWoW64\wsp_health.dll
2017-01-07 16:36:09 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.Xaml.Phone.dll
2017-01-07 16:36:06 ----A---- C:\WINDOWS\SysWoW64\CPFilters.dll
2017-01-07 16:36:04 ----A---- C:\WINDOWS\SysWoW64\DeviceFlows.DataModel.dll
2017-01-07 16:36:01 ----A---- C:\WINDOWS\SysWoW64\Windows.Storage.ApplicationData.dll
2017-01-07 16:36:01 ----A---- C:\WINDOWS\SysWoW64\iesetup.dll
2017-01-07 16:36:01 ----A---- C:\WINDOWS\SysWoW64\iernonce.dll
2017-01-07 16:35:59 ----A---- C:\WINDOWS\SysWoW64\RemoteNaturalLanguage.dll
2017-01-07 16:35:59 ----A---- C:\WINDOWS\SysWoW64\offreg.dll
2017-01-07 16:35:59 ----A---- C:\WINDOWS\SysWoW64\msctf.dll
2017-01-07 16:35:59 ----A---- C:\WINDOWS\SysWoW64\CredProvDataModel.dll
2017-01-07 16:35:57 ----A---- C:\WINDOWS\SysWoW64\qdvd.dll
2017-01-07 16:35:57 ----A---- C:\WINDOWS\explorer.exe
2017-01-07 16:35:53 ----A---- C:\WINDOWS\SysWoW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll
2017-01-07 16:35:53 ----A---- C:\WINDOWS\SysWoW64\rdpcore.dll
2017-01-07 16:35:51 ----A---- C:\WINDOWS\SysWoW64\daxexec.dll
2017-01-07 16:35:50 ----A---- C:\WINDOWS\SysWoW64\mspaint.exe
2017-01-07 16:35:49 ----A---- C:\WINDOWS\SysWoW64\Windows.Devices.HumanInterfaceDevice.dll
2017-01-07 16:35:47 ----A---- C:\WINDOWS\SysWoW64\Windows.Networking.BackgroundTransfer.dll
2017-01-07 16:35:45 ----A---- C:\WINDOWS\SysWoW64\ErrorDetailsUpdate.dll
2017-01-07 16:35:45 ----A---- C:\WINDOWS\SysWoW64\ErrorDetails.dll
2017-01-07 16:35:45 ----A---- C:\WINDOWS\SysWoW64\AppContracts.dll
2017-01-07 16:35:44 ----A---- C:\WINDOWS\SysWoW64\SettingSyncPolicy.dll
2017-01-07 16:35:43 ----A---- C:\WINDOWS\SysWoW64\dmenrollengine.dll
2017-01-07 16:35:40 ----A---- C:\WINDOWS\SysWoW64\UserDataAccountApis.dll
2017-01-07 16:35:40 ----A---- C:\WINDOWS\SysWoW64\EmailApis.dll
2017-01-07 16:35:40 ----A---- C:\WINDOWS\SysWoW64\ContactApis.dll
2017-01-07 16:35:40 ----A---- C:\WINDOWS\SysWoW64\ChatApis.dll
2017-01-07 16:35:40 ----A---- C:\WINDOWS\SysWoW64\AppointmentApis.dll
2017-01-07 16:35:40 ----A---- C:\WINDOWS\SysWoW64\aadtb.dll
2017-01-07 16:35:39 ----A---- C:\WINDOWS\SysWoW64\Windows.Gaming.Input.dll
2017-01-07 16:35:37 ----A---- C:\WINDOWS\SysWoW64\ws2_32.dll
2017-01-07 16:35:36 ----A---- C:\WINDOWS\SysWoW64\UIRibbonRes.dll
2017-01-07 16:35:36 ----A---- C:\WINDOWS\SysWoW64\msxml6.dll
2017-01-07 16:35:35 ----A---- C:\WINDOWS\SysWoW64\pwrshplugin.dll
2017-01-07 16:35:35 ----A---- C:\WINDOWS\SysWoW64\biwinrt.dll
2017-01-07 16:35:34 ----A---- C:\WINDOWS\SysWoW64\iertutil.dll
2017-01-07 16:35:33 ----A---- C:\WINDOWS\SysWoW64\mfpmp.exe
2017-01-07 16:35:33 ----A---- C:\WINDOWS\SysWoW64\mf.dll
2017-01-07 16:35:32 ----A---- C:\WINDOWS\SysWoW64\mprapi.dll
2017-01-07 16:35:31 ----A---- C:\WINDOWS\SysWoW64\NetSetupEngine.dll
2017-01-07 16:35:31 ----A---- C:\WINDOWS\SysWoW64\NetSetupApi.dll
2017-01-07 16:35:31 ----A---- C:\WINDOWS\SysWoW64\drvstore.dll
2017-01-07 16:35:29 ----A---- C:\WINDOWS\SysWoW64\mfplat.dll
2017-01-07 16:35:28 ----A---- C:\WINDOWS\SysWoW64\wsp_fs.dll
2017-01-07 16:35:28 ----A---- C:\WINDOWS\SysWoW64\user32.dll
2017-01-07 16:35:26 ----A---- C:\WINDOWS\SysWoW64\urlmon.dll
2017-01-07 16:35:25 ----A---- C:\WINDOWS\SysWoW64\Windows.Media.Protection.PlayReady.dll
2017-01-07 16:35:25 ----A---- C:\WINDOWS\SysWoW64\msfeeds.dll
2017-01-07 16:35:19 ----A---- C:\WINDOWS\SysWoW64\Windows.Networking.dll
2017-01-07 16:35:19 ----A---- C:\WINDOWS\SysWoW64\comctl32.dll
2017-01-07 16:35:18 ----A---- C:\WINDOWS\SysWoW64\iepeers.dll
2017-01-07 16:35:17 ----A---- C:\WINDOWS\SysWoW64\mbsmsapi.dll
2017-01-07 16:35:15 ----A---- C:\WINDOWS\SysWoW64\UIAnimation.dll
2017-01-07 16:35:12 ----A---- C:\WINDOWS\SysWoW64\WMPDMC.exe
2017-01-07 16:35:12 ----A---- C:\WINDOWS\SysWoW64\d3d9.dll
2017-01-07 16:35:12 ----A---- C:\WINDOWS\SysWoW64\ActivationManager.dll
2017-01-07 16:35:05 ----A---- C:\WINDOWS\SysWoW64\esentutl.exe
2017-01-07 16:35:04 ----A---- C:\WINDOWS\SysWoW64\kerberos.dll
2017-01-07 16:35:04 ----A---- C:\WINDOWS\SysWoW64\credprovslegacy.dll
2017-01-07 16:35:03 ----A---- C:\WINDOWS\SysWoW64\wevtapi.dll
2017-01-07 16:34:59 ----A---- C:\WINDOWS\SysWoW64\powercfg.exe
2017-01-07 16:34:57 ----A---- C:\WINDOWS\SysWoW64\jscript9diag.dll
2017-01-07 16:34:57 ----A---- C:\WINDOWS\SysWoW64\jscript9.dll
2017-01-07 16:34:56 ----A---- C:\WINDOWS\SysWoW64\mtxclu.dll
2017-01-07 16:34:54 ----A---- C:\WINDOWS\SysWoW64\xpsrchvw.exe
2017-01-07 16:34:54 ----A---- C:\WINDOWS\SysWoW64\Windows.Networking.Connectivity.dll
2017-01-07 16:34:52 ----A---- C:\WINDOWS\SysWoW64\Windows.Devices.Midi.dll
2017-01-07 16:34:50 ----A---- C:\WINDOWS\SysWoW64\mfps.dll
2017-01-07 16:34:50 ----A---- C:\WINDOWS\SysWoW64\mfcore.dll
2017-01-07 16:34:47 ----A---- C:\WINDOWS\SysWoW64\twinui.appcore.dll
2017-01-07 16:34:46 ----A---- C:\WINDOWS\SysWoW64\Windows.Devices.AllJoyn.dll
2017-01-07 16:34:46 ----A---- C:\WINDOWS\SysWoW64\nshwfp.dll
2017-01-07 16:34:46 ----A---- C:\WINDOWS\SysWoW64\dhcpcore6.dll
2017-01-07 16:34:46 ----A---- C:\WINDOWS\SysWoW64\CloudStorageWizard.exe
2017-01-07 16:34:45 ----A---- C:\WINDOWS\SysWoW64\Windows.UI.Cred.dll
2017-01-07 16:34:44 ----A---- C:\WINDOWS\SysWoW64\schannel.dll
2017-01-07 16:34:44 ----A---- C:\WINDOWS\SysWoW64\msvproc.dll
2017-01-07 16:34:43 ----A---- C:\WINDOWS\SysWoW64\mfnetcore.dll
2017-01-07 16:34:43 ----A---- C:\WINDOWS\SysWoW64\bcrypt.dll
2017-01-07 16:34:42 ----A---- C:\WINDOWS\SysWoW64\wintrust.dll
2017-01-07 16:34:42 ----A---- C:\WINDOWS\SysWoW64\MSVidCtl.dll
2017-01-07 16:34:39 ----A---- C:\WINDOWS\SysWoW64\C_IS2022.DLL
2017-01-07 16:34:39 ----A---- C:\WINDOWS\SysWoW64\c_GSM7.DLL
2017-01-07 16:34:39 ----A---- C:\WINDOWS\SysWoW64\C_G18030.DLL
2017-01-07 16:34:38 ----A---- C:\WINDOWS\SysWoW64\wininetlui.dll
2017-01-07 16:34:37 ----A---- C:\WINDOWS\SysWoW64\Windows.Devices.SmartCards.dll
2017-01-07 16:34:36 ----A---- C:\WINDOWS\SysWoW64\ddraw.dll
2017-01-07 16:34:35 ----A---- C:\WIND