Logfile of random's system information tool 1.10 (written by random/random)
Run by arlet at 2018-06-12 16:49:06
Microsoft Windows 10 Famille
System drive C: has 747 GB (81%) free of 921 GB
Total RAM: 3526 MB (39% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:49:21, on 12/06/2018
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.17134.0001)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Lenovo\iMController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.ex e
C:\Program Files (x86)\Lenovo\PowerDVD12\PDVD12Serv.exe
C:\Windows\jmesoft\hotkey.exe
C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\arlet\AppData\Local\Facebook\Games\FacebookGameroom.exe
C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
C:\Users\arlet\AppData\Local\Facebook\Games\Facebook Gameroom Browser.exe
C:\Program Files (x86)\EPSON\MyEpson Portal\mep.exe
C:\Users\arlet\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\arlet.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo15.msn.com/?pc=LCTE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKLM\..\Run: [jmekey] C:\Windows\jmesoft\hotkey.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
O4 - HKCU\..\Run: [OneDrive] "C:\Users\arlet\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILEE.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-412 413 415 Series"
O4 - HKCU\..\Run: [MyDriveConnect.exe] C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe -startwithoutDA
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'SERVICE RÉSEAU')
O4 - Startup: Facebook Gameroom.lnk = C:\Users\arlet\AppData\Local\Facebook\Games\FacebookGameroom.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files (x86)\MP3 Player Utilities 4.18\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files (x86)\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\AJRouter.dll,-2 (AJRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Unknown owner - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @%SystemRoot%\System32\AppReadiness.dll,-1000 (AppReadiness) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\appxdeploymentserver.dll,-1 (AppXSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: @%SystemRoot%\system32\AudioEndpointBuilder.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\BcastDVRUserService.dll,-100 (BcastDVRUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service utilisateur de diffusion et GameDVR_44f7d (BcastDVRUserService_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @oem20.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Microsoft.Bluetooth.UserService.dll,-101 (BluetoothUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service de support des utilisateurs du Bluetooth_44f7d (BluetoothUserService_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%windir%\system32\bisrv.dll,-100 (BrokerInfrastructure) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\BTAGService.dll,-101 (BTAGService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\BthAvctpSvc.dll,-101 (BthAvctpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\CapabilityAccessManager.dll,-1 (camsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cdpsvc.dll,-100 (CDPSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cdpusersvc.dll,-100 (CDPUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service pour utilisateur de plateforme dappareils connectés_44f7d (CDPUserSvc_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ClipSVC.dll,-103 (ClipSVC) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\coremessaging.dll,-1 (CoreMessagingRegistrar) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @combase.dll,-5012 (DcomLaunch) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\das.dll,-100 (DeviceAssociationService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (DeviceInstall) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Windows.Devices.Picker.dll,-1006 (DevicePickerUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: DevicePicker_44f7d (DevicePickerUserSvc_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DevicesFlowBroker.dll,-103 (DevicesFlowUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Flux dappareils_44f7d (DevicesFlowUserSvc_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DevQueryBroker.dll,-100 (DevQueryBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%systemroot%\system32\DiagSvc.dll,-100 (diagsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\diagtrack.dll,-3001 (DiagTrack) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\Windows.Internal.Management.dll,-100 (DmEnrollmentSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dmwappushsvc.dll,-200 (dmwappushservice) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dosvc.dll,-100 (DoSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\DeviceSetupManager.dll,-1000 (DsmSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dssvc.dll,-10003 (DsSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dusmsvc.dll,-1 (DusmSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (Eaphost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\embeddedmodesvc.dll,-201 (embeddedmode) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @EnterpriseAppMgmtSvc.dll,-1 (EntAppSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\Windows\system32\EscSvc64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (EventLog) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fhsvc.dll,-101 (fhsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FrameServer.dll,-100 (FrameServer) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\GraphicsPerfSvc.dll,-100 (GraphicsPerfSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\hvhostsvc.dll,-100 (HvHost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\tetheringservice.dll,-4097 (icssvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @oem31.inf,%ImcSvcDisplayName%;System Interface Foundation Service (ImControllerService) - Lenovo Group Limited - C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
O23 - Service: @%SystemRoot%\system32\InstallService.dll,-200 (InstallService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\ipxlatcfg.dll,-500 (IpxlatCfgSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\irmon.dll,-2000 (irmon) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: JME Keyboard Driver (JME Keyboard) - Unknown owner - C:\Windows\jmesoft\Service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\lfsvc.dll,-1 (lfsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\licensemanagersvc.dll,-200 (LicenseManager) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Lenovo Solution Center System Service (LSC.Services.SystemService) - Lenovo - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe
O23 - Service: @%windir%\system32\lsm.dll,-1001 (LSM) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\LanguageOverlayServer.dll,-100 (LxpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\moshost.dll,-100 (MapsBroker) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\MessagingService.dll,-100 (MessagingService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: MessagingService_44f7d - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (mpssvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\WINDOWS\system32\msiexec.exe
O23 - Service: MyEpson Portal Service - Seiko Epson Corporation - C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe
O23 - Service: @%systemroot%\system32\NaturalAuth.dll,-100 (NaturalAuthentication) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ncasvc.dll,-3009 (NcaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ncbservice.dll,-500 (NcbService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\NcdAutoSetup.dll,-100 (NcdAutoSetup) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprofmsvc.dll,-202 (netprofm) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\NetSetupSvc.dll,-3 (NetSetupSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\NgcCtnrSvc.dll,-1 (NgcCtnrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\APHostRes.dll,-10002 (OneSyncSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Hôte de synchronisation_44f7d (OneSyncSvc_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\WINDOWS\SysWow64\perfhost.exe
O23 - Service: @%SystemRoot%\system32\PhoneserviceRes.dll,-10000 (PhoneSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-15001 (PimIndexMaintenanceSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Données de contacts_44f7d (PimIndexMaintenanceSvc_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-200 (PlugPlay) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll,-1 (PrintNotify) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\PrintWorkflowService.dll,-100 (PrintWorkflowUserSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: PrintWorkflow_44f7d (PrintWorkflowUserSvc_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pushtoinstall.dll,-200 (PushToInstall) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\RDXService.dll,-256 (RetailDemo) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\RMapi.dll,-1001 (RmSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @combase.dll,-5010 (RpcSs) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ScDeviceEnum.dll,-100 (ScDeviceEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SEMgrSvc.dll,-1001 (SEMgrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\sensorservice.dll,-1000 (SensorService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\WINDOWS\system32\SgrmBroker.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SharedRealitySvc.dll,-100 (SharedRealitySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\Windows.SharedPC.AccountManager.dll,-100 (shpamsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\smphost.dll,-102 (smphost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SmsRouterSvc.dll,-10001 (SmsRouter) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\windows.staterepository.dll,-1 (StateRepository) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\svsvc.dll,-101 (svsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%windir%\system32\SystemEventsBrokerServer.dll,-1001 (SystemEventsBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%windir%\system32\TimeBrokerServer.dll,-1001 (TimeBrokerSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\tokenbroker.dll,-100 (TokenBroker) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\WINDOWS\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\tzautoupdate.dll,-200 (tzautoupdate) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-10003 (UnistoreSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: Stockage des données utilisateur_44f7d (UnistoreSvc_44f7d) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\UserDataAccessRes.dll,-14001 (UserDataSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Accès aux données utilisateur_44f7d (UserDataSvc_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\usermgr.dll,-100 (UserManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\usocore.dll,-101 (UsoSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vac.dll,-200 (VacSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\icsvc.dll,-801 (vmicguestinterface) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-101 (vmicheartbeat) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-201 (vmickvpexchange) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvcext.dll,-601 (vmicrdv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-301 (vmicshutdown) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-401 (vmictimesync) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvc.dll,-901 (vmicvmsession) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\icsvcext.dll,-501 (vmicvss) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @WaaSMedicSvc.dll,-100 (WaaSMedicSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\WalletService.dll,-1000 (WalletService) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\Windows.WARP.JITService.dll,-100 (WarpJITSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wcmsvc.dll,-4097 (Wcmsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wephostsvc.dll,-100 (WEPHOSTSVC) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wfdsconmgrsvc.dll,-9000 (WFDSConMgrSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiarpc.dll,-2 (WiaRpc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\flightsettings.dll,-103 (wisvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (WlanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wlidsvc.dll,-100 (wlidsvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lpasvc.dll,-1000 (wlpasvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\workfolderssvc.dll,-102 (workfolderssvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\WpcRefreshTask.dll,-100 (WpcMonSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpnservice.dll,-1 (WpnService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WpnUserService.dll,-1 (WpnUserService) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: Service utilisateur de notifications Push Windows_44f7d (WpnUserService_44f7d) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\WINDOWS\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\WINDOWS\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\XblAuthManager.dll,-100 (XblAuthManager) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\XblGameSave.dll,-100 (XblGameSave) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\xboxgipsvc.dll,-100 (XboxGipSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
O23 - Service: @%systemroot%\system32\XboxNetApiSvc.dll,-100 (XboxNetApiSvc) - Unknown owner - C:\WINDOWS\system32\svchost.exe
--
End of file - 36599 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\EPSON XP-412 413 415 Series Invitation {C47C6397-2A7A-4F82-86C0-BC22FA093FAB}.job - C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLEE.EXE /EXE:"{C47C6397-2A7A-4F82-86C0-BC22FA093FAB}" /F:"Invitation"
C:\WINDOWS\tasks\EPSON XP-412 413 415 Series Update {C47C6397-2A7A-4F82-86C0-BC22FA093FAB}.job - C:\Windows\system32\spool\DRIVERS\x64\3\E_ITSLEE.EXE /EXE:"{C47C6397-2A7A-4F82-86C0-BC22FA093FAB}" /F:"Update"
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"jmekey"=C:\Windows\jmesoft\hotkey.exe [2013-07-24 118784]
"UpdateP2GoShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2011-12-06 214312]
"CLMLServer"=C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe [2009-12-04 103720]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OneDrive"=C:\Users\arlet\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2018-05-01 1624224]
"EPLTarget\P0000000000000000"=C:\Windows\system32\spool\DRIVERS\x64\3\E_IATILEE.EXE [2013-01-24 297024]
"MyDriveConnect.exe"=C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2018-01-03 1976040]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2018-05-24 18364648]
C:\Users\arlet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Facebook Gameroom.lnk - C:\Users\arlet\AppData\Local\Facebook\Games\FacebookGameroom.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBui lder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CoreMessagingReg istrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService. Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iai2c.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ahcache.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioEndpointBui lder]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AudioSrv]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CoreMessagingReg istrar]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudAddService. Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HdAudBus.Sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetSetupSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SerCx2.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SpbCx.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\StateRepository]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\uefi.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\usbaudio.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UserManager]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96C-E325-11CE-BFC1-08002BE10318}]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{F2E7DD72-6468-4E36-B6F1-6488F42C1B52}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DSCAutomationHostEnabled"=2
"EnableFullTrustStartupTasks"=2
"EnableUwpStartupTasks"=2
"SupportFullTrustStartupTasks"=1
"SupportUwpStartupTasks"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewall policy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewall policy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"vidc.cvid"=iccvid.dll
"vidc.i420"=iyuv_32.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2018-06-12 16:49:06 ----D---- C:\rsit
2018-06-12 16:49:06 ----D---- C:\Program Files (x86)\trend micro
2018-06-12 15:11:33 ----D---- C:\Users\arlet\AppData\Roaming\AVAST Software
2018-06-11 03:26:31 ----D---- C:\Windows.old
2018-06-11 03:17:10 ----AS---- C:\WINDOWS\bootstat.dat
2018-06-11 03:15:45 ----D---- C:\WINDOWS\ServiceProfiles
2018-06-11 03:11:03 ----A---- C:\WINDOWS\SysWOW64\wmp.dll
2018-06-11 03:11:02 ----A---- C:\WINDOWS\SysWOW64\MSVPXENC.dll
2018-06-11 03:11:02 ----A---- C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2018-06-11 03:11:02 ----A---- C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2018-06-11 03:11:02 ----A---- C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2018-06-11 03:11:01 ----A---- C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\Windows.Media.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\MSHEIF.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\mfsvr.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\mfreadwrite.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\mfplat.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2018-06-11 03:11:00 ----A---- C:\WINDOWS\SysWOW64\mfcore.dll
2018-06-11 03:10:58 ----A---- C:\WINDOWS\SysWOW64\jscript.dll
2018-06-11 03:10:58 ----A---- C:\WINDOWS\SysWOW64\ieapfltr.dll
2018-06-11 03:10:58 ----A---- C:\WINDOWS\SysWOW64\Chakra.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\mshtml.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\msfeeds.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\jscript9diag.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\jscript9.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\ieframe.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\iedkcs32.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\EdgeManager.dll
2018-06-11 03:10:57 ----A---- C:\WINDOWS\SysWOW64\edgehtml.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\vbscript.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\srms-apr.dat
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\shell32.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\rpcrt4.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\rasplap.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\rasdlg.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\rasapi32.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\mstscax.dll
2018-06-11 03:10:55 ----A---- C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2018-06-11 03:10:46 ----RSH---- C:\WINDOWS\fonts\StaticCache.dat
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\wpnapps.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\wintrust.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\wininet.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\windows.storage.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\urlmon.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\tquery.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\SndVolSSO.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\rmclient.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\rdpbase.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\Phoneutil.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\itss.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\InstallService.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\iertutil.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\gdi32full.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\FSClient.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\edgeIso.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\dxgi.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\dwmcore.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\d3d9.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\comsvcs.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\CompPkgSup.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\cdp.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\AudioSes.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\AppxPackaging.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\ActivationManager.dll
2018-06-11 03:10:46 ----A---- C:\WINDOWS\SysWOW64\aadtb.dll
2018-06-11 03:10:41 ----A---- C:\WINDOWS\SysWOW64\wevtutil.exe
2018-06-11 03:10:41 ----A---- C:\WINDOWS\SysWOW64\WerFault.exe
2018-06-11 03:10:41 ----A---- C:\WINDOWS\SysWOW64\wer.dll
2018-06-11 03:10:41 ----A---- C:\WINDOWS\SysWOW64\tzres.dll
2018-06-11 03:10:41 ----A---- C:\WINDOWS\SysWOW64\oleaut32.dll
2018-06-11 03:10:41 ----A---- C:\WINDOWS\SysWOW64\dbgeng.dll
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\wuapi.dll
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\win32kfull.sys
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\TSpkg.dll
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\OpcServices.dll
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\msxml3.dll
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\credssp.dll
2018-06-11 03:10:40 ----A---- C:\WINDOWS\SysWOW64\CoreMessaging.dll
2018-06-11 03:01:30 ----D---- C:\ProgramData\Microsoft OneDrive
2018-06-11 02:54:53 ----SHD---- C:\ProgramData\Documents
2018-06-11 02:54:53 ----SHD---- C:\ProgramData\Application Data
2018-06-11 02:54:28 ----A---- C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2018-06-11 02:54:28 ----A---- C:\WINDOWS\SysWOW64\xpsrchvw.exe
2018-06-11 02:54:28 ----A---- C:\WINDOWS\SysWOW64\XpsFilt.dll
2018-06-11 02:54:05 ----D---- C:\WINDOWS\SysWOW64\XPSViewer
2018-06-11 02:54:03 ----D---- C:\Program Files (x86)\Reference Assemblies
2018-06-11 02:54:03 ----D---- C:\Program Files (x86)\MSBuild
2018-06-11 02:53:41 ----A---- C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2018-06-11 02:53:41 ----A---- C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2018-06-11 02:53:41 ----A---- C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2018-06-11 02:37:19 ----ASH---- C:\hiberfil.sys
2018-06-11 02:32:22 ----SD---- C:\Users\arlet\AppData\Roaming\Microsoft
2018-06-11 02:31:24 ----D---- C:\ProgramData\USOShared
2018-06-11 02:31:18 ----A---- C:\WINDOWS\SysWOW64\PrintConfig.dll
2018-06-11 02:29:05 ----D---- C:\WINDOWS\Prefetch
2018-06-10 18:06:51 ----DC---- C:\WINDOWS\Panther
2018-06-09 11:37:56 ----D---- C:\6749525315573233238
2018-06-09 11:37:06 ----D---- C:\Program Files (x86)\AMD
2018-06-07 15:00:24 ----D---- C:\Program Files (x86)\Common Files\DESIGNER
2018-05-16 15:25:54 ----A---- C:\WINDOWS\SysWOW64\amdihk32.dll
======List of files/folders modified in the last 1 month======
2018-06-12 16:49:06 ----RD---- C:\Program Files (x86)
2018-06-12 16:47:51 ----D---- C:\WINDOWS\Temp
2018-06-12 16:41:02 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2018-06-12 15:52:17 ----RD---- C:\WINDOWS\assembly
2018-06-12 15:52:01 ----D---- C:\ProgramData\Package Cache
2018-06-12 15:52:00 ----SHD---- C:\WINDOWS\Installer
2018-06-12 15:51:57 ----SHD---- C:\Config.Msi
2018-06-12 15:51:57 ----D---- C:\ProgramData\Avira
2018-06-12 15:51:23 ----D---- C:\Program Files (x86)\Avira
2018-06-12 15:50:58 ----D---- C:\WINDOWS\System32
2018-06-12 15:50:58 ----D---- C:\WINDOWS\INF
2018-06-12 15:47:00 ----D---- C:\WINDOWS\AppReadiness
2018-06-12 15:34:57 ----D---- C:\WINDOWS\SoftwareDistribution
2018-06-12 15:34:56 ----D---- C:\Windows
2018-06-12 15:26:50 ----D---- C:\WINDOWS\WinSxS
2018-06-12 15:06:36 ----D---- C:\WINDOWS\Logs
2018-06-12 15:06:36 ----D---- C:\WINDOWS\LiveKernelReports
2018-06-12 15:05:49 ----D---- C:\ProgramData\AVAST Software
2018-06-12 15:03:21 ----RD---- C:\Program Files
2018-06-12 10:59:44 ----RD---- C:\WINDOWS\Microsoft.NET
2018-06-12 09:51:19 ----D---- C:\WINDOWS\SysWOW64\Macromed
2018-06-12 09:45:41 ----D---- C:\WINDOWS\SysWOW64
2018-06-12 08:28:11 ----D---- C:\WINDOWS\appcompat
2018-06-11 19:55:43 ----D---- C:\WINDOWS\CbsTemp
2018-06-11 19:55:14 ----SHD---- C:\System Volume Information
2018-06-11 19:12:17 ----D---- C:\WINDOWS\SysWOW64\LogFiles
2018-06-11 19:12:17 ----D---- C:\Users\arlet\AppData\Roaming\uTorrent
2018-06-11 15:57:46 ----SD---- C:\ProgramData\Microsoft
2018-06-11 03:26:39 ----RSD---- C:\WINDOWS\Fonts
2018-06-11 03:26:39 ----D---- C:\WINDOWS\twain_32
2018-06-11 03:26:39 ----D---- C:\WINDOWS\SysWOW64\migration
2018-06-11 03:26:39 ----D---- C:\WINDOWS\SysWOW64\en-US
2018-06-11 03:26:39 ----D---- C:\WINDOWS\SysWOW64\drivers
2018-06-11 03:26:33 ----D---- C:\Program Files (x86)\Microsoft.NET
2018-06-11 03:26:33 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2018-06-11 03:26:33 ----D---- C:\Program Files (x86)\Common Files
2018-06-11 03:26:28 ----D---- C:\WINDOWS\Setup
2018-06-11 03:20:19 ----D---- C:\WINDOWS\SysWOW64\drivers\UMDF
2018-06-11 03:18:34 ----D---- C:\Program Files (x86)\Windows Mail
2018-06-11 03:13:02 ----D---- C:\WINDOWS\TextInput
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\zu-ZA
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\yo-NG
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\xh-ZA
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\wo-SN
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\vi-VN
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\uz-Latn-UZ
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\ur-PK
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\ug-CN
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\tt-RU
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\tn-ZA
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\tk-TM
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\ti-ET
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\te-IN
2018-06-11 03:13:02 ----D---- C:\WINDOWS\SysWOW64\ta-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\sw-KE
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\sq-AL
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\si-LK
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\setup
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\sd-Arab-PK
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\rw-RW
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\quz-PE
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\quc-Latn-GT
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\prs-AF
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\pa-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\pa-Arab-PK
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\or-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\nso-ZA
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\nn-NO
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ne-NP
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\mt-MT
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ms-MY
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\mr-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\mn-MN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ml-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\mk-MK
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\mi-NZ
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\lo-LA
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\lb-LU
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ky-KG
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ku-Arab-IQ
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\kok-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\kn-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\km-KH
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\kk-KZ
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ka-GE
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\is-IS
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ig-NG
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\id-ID
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\hy-AM
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ha-Latn-NG
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\gu-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\gd-GB
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ga-IE
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\fr-FR
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\fil-PH
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\fa-IR
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\cy-GB
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\chr-CHER-US
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\ca-ES-valencia
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\bs-Latn-BA
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\bn-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\bn-BD
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\be-BY
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\az-Latn-AZ
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\as-IN
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\am-ET
2018-06-11 03:13:01 ----D---- C:\WINDOWS\SysWOW64\af-ZA
2018-06-11 03:13:00 ----D---- C:\WINDOWS\Provisioning
2018-06-11 03:13:00 ----D---- C:\WINDOWS\bcastdvr
2018-06-11 03:13:00 ----D---- C:\WINDOWS\apppatch
2018-06-11 03:13:00 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2018-06-11 03:04:05 ----D---- C:\WINDOWS\SysWOW64\winrm
2018-06-11 03:04:04 ----SD---- C:\WINDOWS\SysWOW64\F12
2018-06-11 03:04:04 ----D---- C:\WINDOWS\SysWOW64\WCN
2018-06-11 03:04:04 ----D---- C:\WINDOWS\SysWOW64\slmgr
2018-06-11 03:04:04 ----D---- C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2018-06-11 03:04:03 ----SD---- C:\WINDOWS\SysWOW64\DiagSvcs
2018-06-11 03:04:03 ----D---- C:\WINDOWS\SysWOW64\en
2018-06-11 03:04:03 ----D---- C:\WINDOWS\SysWOW64\drivers\en-US
2018-06-11 03:03:59 ----D---- C:\WINDOWS\servicing
2018-06-11 03:03:59 ----D---- C:\WINDOWS\en-US
2018-06-11 03:03:58 ----D---- C:\Program Files (x86)\Windows Media Player
2018-06-11 03:03:58 ----D---- C:\Program Files (x86)\Windows Defender
2018-06-11 03:01:30 ----HD---- C:\ProgramData
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\zh-TW
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\zh-CN
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\uk-UA
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\tr-TR
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\th-TH
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\sv-SE
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\sr-Latn-RS
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\sl-SI
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\sk-SK
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\ru-RU
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\ro-RO
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\pt-PT
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\pt-BR
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\pl-PL
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\nl-NL
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\nb-NO
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\lv-LV
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\lt-LT
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\ko-KR
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\ja-JP
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\it-IT
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\hu-HU
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\hr-HR
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\he-IL
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\fr-CA
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\fi-FI
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\et-EE
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\es-MX
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\es-ES
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\en-GB
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\el-GR
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\de-DE
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\da-DK
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\cs-CZ
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\bg-BG
2018-06-11 02:54:33 ----D---- C:\WINDOWS\SysWOW64\ar-SA
2018-06-11 02:54:26 ----D---- C:\WINDOWS\Tasks
2018-06-11 02:54:05 ----D---- C:\WINDOWS\SysWOW64\MUI
2018-06-11 02:52:31 ----D---- C:\WINDOWS\Registration
2018-06-11 02:45:08 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2018-06-11 02:32:22 ----RD---- C:\Users
2018-06-11 02:31:24 ----D---- C:\ProgramData\USOPrivate
2018-06-11 02:30:39 ----D---- C:\WINDOWS\SysWOW64\RTCOM
2018-06-11 02:30:36 ----D---- C:\WINDOWS\SysWOW64\sda
2018-06-11 02:28:12 ----SHD---- C:\Recovery
2018-06-11 02:27:36 ----D---- C:\WINDOWS\debug
2018-06-10 10:20:13 ----D---- C:\ProgramData\Malwarebytes
2018-06-09 11:33:08 ----D---- C:\Program Files (x86)\VulkanRT
2018-06-09 11:27:48 ----D---- C:\AMD
2018-06-07 14:58:46 ----AD---- C:\Program Files (x86)\Microsoft Office
2018-06-06 01:29:25 ----A---- C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-05-22 16:54:52 ----A---- C:\WINDOWS\SysWOW64\RapidFireServer.dll
2018-05-22 16:54:50 ----A---- C:\WINDOWS\SysWOW64\Rapidfire.dll
2018-05-22 16:54:44 ----A---- C:\WINDOWS\SysWOW64\mantleaxl32.dll
2018-05-22 16:54:44 ----A---- C:\WINDOWS\SysWOW64\mantle32.dll
2018-05-22 16:54:42 ----A---- C:\WINDOWS\SysWOW64\GameManager32.dll
2018-05-22 16:54:12 ----A---- C:\WINDOWS\SysWOW64\amfrt32.dll
2018-05-22 16:53:34 ----A---- C:\WINDOWS\SysWOW64\amdmcl32.dll
2018-05-22 16:53:28 ----A---- C:\WINDOWS\SysWOW64\amdlvr32.dll
2018-05-22 10:24:15 ----SHD---- C:\$Recycle.Bin
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amdkmpfd;@oem18.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmpfd.sys []
R0 aswbidsh;aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys []
R0 aswblog;aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys []
R0 aswbuniv;aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys []
R0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys []
R0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys []
R0 iorate;@%SystemRoot%\system32\drivers\iorate.sys,-101; C:\WINDOWS\system32\drivers\iorate.sys []
R0 SgrmAgent;@%SystemRoot%\System32\Drivers\SgrmAgent.sys,-1001; C:\WINDOWS\system32\drivers\SgrmAgent.sys []
R1 afunix;afunix; C:\WINDOWS\system32\drivers\afunix.sys [2018-04-12 29696]
R1 amdpsp;@oem4.inf,%amdpsp.SVCDESC%;AMD PSP Service; C:\WINDOWS\system32\DRIVERS\amdpsp.sys []
R1 aswbidsdriver;aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys []
R1 aswHdsKe;aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys []
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys []
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys []
R1 bam;@%SystemRoot%\system32\drivers\bam.sys,-100; C:\WINDOWS\system32\drivers\bam.sys []
R1 FileCrypt;@%systemroot%\system32\drivers\filecrypt.sys,-100; C:\WINDOWS\system32\drivers\filecrypt.sys []
R1 GpuEnergyDrv;@%SystemRoot%\system32\drivers\gpuenergydrv.sys,-100; C:\WINDOWS\System32\drivers\gpuenergydrv.sys []
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys []
R2 CldFlt;Windows Cloud Files Filter Driver; C:\WINDOWS\system32\drivers\cldflt.sys []
R2 MMCSS;@%systemroot%\system32\drivers\mmcss.sys,-100; C:\WINDOWS\system32\drivers\mmcss.sys []
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys []
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys []
R3 AtiHDAudioService;@oem10.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdWT6.sys []
R3 bcbtums;@oem20.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys []
R3 BCMWL63A;@oem34.inf,%BCM43XX_Service_DispName%;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl63a.sys []
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Service dénumérateur Bluetooth; C:\WINDOWS\system32\DRIVERS\BthEnum.sys []
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Pilote Bluetooth Low Energy; C:\WINDOWS\system32\DRIVERS\Microsoft.Bluetooth.Legacy.LEEnumerator.sys []
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys []
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Pilote USB radio Bluetooth; C:\WINDOWS\system32\DRIVERS\BTHUSB.sys []
R3 btwaudio;@oem0.inf,%btaudio.SvcDesc%;Périphérique audio Bluetooth; C:\WINDOWS\system32\drivers\btwaudio.sys []
R3 btwavdt;@oem0.inf,%btwavdt.SvcDesc%;Bluetooth AVDT; C:\WINDOWS\system32\drivers\btwavdt.sys []
R3 btwl2cap;@oem13.inf,%btwl2cap.SVCDESC%;Bluetooth L2CAP Service; C:\WINDOWS\system32\DRIVERS\btwl2cap.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys []
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys []
R3 RSP2STOR;@oem30.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys []
R3 rt640x64;@oem9.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver; C:\WINDOWS\System32\drivers\rt640x64.sys []
S0 amdkmafd;@oem15.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys []
S0 bttflt;@virtdisk.inf,%service_desc%;Microsoft Hyper-V VHDPMEM BTT Filter; C:\WINDOWS\System32\drivers\bttflt.sys []
S0 cht4iscsi;cht4iscsi; C:\WINDOWS\System32\drivers\cht4sx64.sys []
S0 iaStorAVC;@iastorav.inf,%iaStorAVC.DeviceDesc%;Intel Chipset SATA RAID Controller; C:\WINDOWS\System32\drivers\iaStorAVC.sys []
S0 ItSa