Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2021 01 Ran by Vincent (administrator) on DESKTOP-67NU4IE (29-05-2021 21:17:37) Running from C:\Users\Vincent\Desktop Loaded Profiles: Vincent Platform: Windows 10 Pro Version 2004 19041.985 (X64) Language: French (France) -> English (United States) Default browser: FF Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\Adobe Installer.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe <2> (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <2> (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\AdobeNotificationClient.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.DisplayAdapter.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairMsiPluginService.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) C:\Windows\System32\CorsairGamingAudioCfgService64.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12> (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe (Notepad++ -> Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe (Notepad++ -> Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe <2> (OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (TEFINCOM S.A. -> TEFINCOM S.A.) C:\Program Files\NordVPN\NordVPN.exe (TEFINCOM S.A. -> TEFINCOM S.A.) C:\Program Files\NordVPN\nordvpn-service.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8838400 2016-06-07] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKLM\...\Run: [CORSAIR iCUE 4 Software] => C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE Launcher.exe [321184 2021-05-07] (Corsair Memory, Inc. -> Corsair Memory, Inc.) HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [779448 2021-05-17] (Adobe Inc. -> Adobe Inc.) HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-05-17] (Adobe Inc. -> ) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed] HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated) HKU\S-1-5-21-1086328375-2434039972-1054944181-1001\...\Run: [Discord] => C:\Users\Vincent\AppData\Local\Discord\Update.exe [1512040 2021-03-18] (Discord Inc. -> GitHub) HKU\S-1-5-21-1086328375-2434039972-1054944181-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-1086328375-2434039972-1054944181-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [277688 2021-05-14] (TEFINCOM S.A. -> TEFINCOM S.A.) GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {25905A28-C582-41B7-BE32-608DFBBA30DE} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [64936 2021-05-18] (Microsoft Corporation -> Microsoft) Task: {388D9902-E4E7-4089-9834-E2C51261B596} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-17] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {4AA9DBB1-F661-4A83-A272-2CC3A229E5E3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-17] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {5CB8A5A0-AB7C-4864-B8F8-F61B03720A07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-17] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8A43F843-8BE3-4361-8784-3285C13657C2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-17] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {90C63B94-DDB5-43D2-99F4-D40E672D3951} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {9ACB5D4E-4013-4D32-A82B-5857A200C634} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation) Task: {A3613F04-9AE2-4892-B4AD-62DDE8D2F34D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [696304 2021-05-04] (Mozilla Corporation -> Mozilla Foundation) Task: {CF010766-2651-4CDE-8CC1-1A406EAFBF7E} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-67NU4IE-Vincent => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\..\Interfaces\{5d7c2cd5-9a75-1ac5-6245-118f1c411193}: [NameServer] 103.86.99.99,103.86.96.96 Tcpip\..\Interfaces\{7ed04b59-19c8-4273-bd22-a74941240b9d}: [DhcpNameServer] 89.2.0.1 89.2.0.2 Edge: ======= Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found] Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found] Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found] Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found] Edge Profile: C:\Users\Vincent\AppData\Local\Microsoft\Edge\User Data\Default [2021-05-29] Edge HomePage: Default -> hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 FireFox: ======== FF DefaultProfile: jc6ektx8.default FF ProfilePath: C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\jc6ektx8.default [2021-05-20] FF ProfilePath: C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\5fv02yeg.default-release [2021-05-29] FF Homepage: Mozilla\Firefox\Profiles\5fv02yeg.default-release -> google.com FF Notifications: Mozilla\Firefox\Profiles\5fv02yeg.default-release -> hxxps://mail.google.com FF Extension: (HTTPS Everywhere) - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\5fv02yeg.default-release\Extensions\https-everywhere@eff.org.xpi [2021-05-29] FF Extension: (Privacy Badger) - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\5fv02yeg.default-release\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2021-05-19] FF Extension: (LastPass: Free Password Manager) - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\5fv02yeg.default-release\Extensions\support@lastpass.com.xpi [2021-05-07] FF Extension: (uBlock Origin) - C:\Users\Vincent\AppData\Roaming\Mozilla\Firefox\Profiles\5fv02yeg.default-release\Extensions\uBlock0@raymondhill.net.xpi [2021-05-19] FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2021-05-17] (Adobe Inc. -> Adobe Systems) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2021-05-17] (Adobe Inc. -> Adobe Systems) ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [842424 2021-05-17] (Adobe Inc. -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated) R2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [616360 2021-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) R2 CorsairLLAService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe [456352 2021-05-07] (Corsair Memory, Inc. -> Corsair Memory, Inc.) R2 CorsairMsiPluginService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairMsiPluginService.exe [451744 2021-05-07] (Corsair Memory, Inc. -> Corsair Memory, Inc.) R2 CorsairService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe [80544 2021-05-07] (Corsair Memory, Inc. -> Corsair Memory, Inc.) R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [277688 2021-05-14] (TEFINCOM S.A. -> TEFINCOM S.A.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393288 2021-05-20] (Microsoft Windows Publisher -> Microsoft Corporation) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed] S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2104.14-0\NisSrv.exe [2599328 2021-05-17] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2104.14-0\MsMpEng.exe [128376 2021-05-17] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [60328 2021-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) R2 CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys [21752 2021-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) R3 CorsairVBusDriver; C:\Windows\System32\drivers\CorsairVBusDriver.sys [45984 2021-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 CorsairVHidDriver; C:\Windows\System32\drivers\CorsairVHidDriver.sys [21920 2021-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 cpuz150; C:\Windows\temp\cpuz150\cpuz150_x64.sys [44832 2021-05-29] (CPUID S.A.R.L.U. -> CPUID) R3 MpKsl69ffbee6; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FEE17FCA-E92F-4AD7-B6F9-985831EA652C}\MpKslDrv.sys [47336 2021-05-29] (Microsoft Windows -> Microsoft Corporation) R2 NDivert; C:\Windows\System32\drivers\NDivert.sys [105184 2021-05-17] (TEFINCOM S.A. -> ) R3 nlwt; C:\Windows\system32\DRIVERS\nlwt.sys [39360 2021-05-27] (TEFINCOM S.A. -> WireGuard LLC) R1 nordlwf; C:\Windows\system32\DRIVERS\nordlwf.sys [38608 2020-12-14] (TEFINCOM S.A. -> TEFINCOM S.A.) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> ) S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> ) S3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49560 2021-05-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [421112 2021-05-17] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [73960 2021-05-17] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) (Whitelisted) ========= (If an entry is included in the fixlist, the file/folder will be moved.) 2021-05-29 08:36 - 2021-05-29 08:36 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2021.lnk 2021-05-28 10:42 - 2021-05-28 10:42 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Blender Foundation 2021-05-28 10:41 - 2021-05-28 10:41 - 000000000 ____D C:\Users\Vincent\.thumbnails 2021-05-28 08:39 - 2021-05-29 15:54 - 000000000 ____D C:\Users\Vincent\AppData\Local\CrashDumps 2021-05-28 08:39 - 2021-05-28 08:39 - 000000000 ____D C:\Users\Vincent\AppData\Local\Shai_Raiten 2021-05-28 06:27 - 2021-05-28 06:27 - 000000000 ____D C:\Users\Vincent\AppData\Local\NuGet 2021-05-28 06:27 - 2021-05-28 06:27 - 000000000 ____D C:\Users\Vincent\.nuget 2021-05-27 22:21 - 2021-05-27 22:21 - 000000000 ____D C:\Users\Vincent\Desktop\pn 2021-05-27 21:27 - 2021-05-28 10:30 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\vlc 2021-05-27 21:27 - 2021-05-27 21:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2021-05-27 21:27 - 2021-05-27 21:27 - 000000000 ____D C:\Program Files\VideoLAN 2021-05-27 20:44 - 2021-05-27 20:44 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\TechSmith 2021-05-27 20:44 - 2021-05-27 20:44 - 000000000 ____D C:\Users\Vincent\AppData\Local\TechSmith 2021-05-27 20:44 - 2021-05-27 20:44 - 000000000 ____D C:\ProgramData\TechSmith 2021-05-27 20:44 - 2021-05-27 20:44 - 000000000 ____D C:\ProgramData\regid.1995-08.com.techsmith 2021-05-27 20:44 - 2021-05-27 20:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith 2021-05-27 20:44 - 2021-05-27 20:44 - 000000000 ____D C:\Program Files (x86)\TechSmith 2021-05-27 20:44 - 2021-05-27 20:44 - 000000000 ____D C:\Program Files (x86)\QuickTime 2021-05-27 06:52 - 2021-05-27 06:52 - 000000000 ____D C:\Users\Vincent\adb 2021-05-27 06:52 - 2021-05-27 06:52 - 000000000 ____D C:\Program Files\DIFX 2021-05-27 06:49 - 2021-05-27 06:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2021-05-27 06:49 - 2021-05-27 06:49 - 000000000 ____D C:\Program Files\7-Zip 2021-05-27 04:10 - 2021-05-27 04:31 - 000000000 ____D C:\Users\Vincent\Desktop\pnts 2021-05-27 00:49 - 2021-05-27 00:55 - 000000000 ____D C:\Users\Vincent\AppData\Local\NordVPN 2021-05-27 00:49 - 2021-05-27 00:49 - 000039360 _____ (WireGuard LLC) C:\Windows\system32\Drivers\nlwt.sys 2021-05-27 00:49 - 2021-05-27 00:49 - 000000000 ____D C:\ProgramData\NordVPN 2021-05-27 00:49 - 2021-05-27 00:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordSec 2021-05-27 00:49 - 2021-05-27 00:49 - 000000000 ____D C:\Program Files\NordVPN network TUN 2021-05-27 00:49 - 2021-05-27 00:49 - 000000000 ____D C:\Program Files\NordVPN 2021-05-27 00:49 - 2021-05-27 00:49 - 000000000 ____D C:\Program Files (x86)\NordVPN network TAP 2021-05-27 00:49 - 2021-05-17 12:46 - 000105184 _____ C:\Windows\system32\Drivers\NDivert.sys 2021-05-27 00:49 - 2020-12-14 11:21 - 000038608 _____ (TEFINCOM S.A.) C:\Windows\system32\Drivers\nordlwf.sys 2021-05-26 23:47 - 2021-05-26 23:54 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Syncios Mobile Manager 2021-05-26 23:47 - 2021-05-26 23:47 - 000000461 ____H C:\Users\Vincent\MJKJRegInfo_4ENTNHW2CJYICZ2DUFDIDB4ID6VACHG2 2021-05-26 23:47 - 2021-05-26 23:47 - 000000000 ____H C:\Users\Vincent\MJKJRegInfo_M4P2H7JTV2BT3MXFZJNSNV6L2OSI5PPG 2021-05-26 23:47 - 2021-05-26 23:47 - 000000000 ____D C:\Users\Vincent\Documents\Syncios Mobile Manager 2021-05-26 23:46 - 2021-05-27 01:46 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Syncios Toolkit 2021-05-26 23:45 - 2021-05-27 00:50 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syncios 2021-05-26 23:45 - 2021-05-27 00:50 - 000000000 ____D C:\Program Files (x86)\Syncios 2021-05-26 23:45 - 2021-05-26 23:45 - 000001290 _____ C:\Users\Vincent\Desktop\Syncios Toolkit.lnk 2021-05-26 23:34 - 2021-05-26 23:34 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2021-05-24 12:55 - 2021-05-24 12:55 - 000000132 _____ C:\Users\Vincent\AppData\Roaming\Adobe BMP Format CS6 Prefs 2021-05-24 12:52 - 2021-05-24 12:52 - 000000000 ____D C:\Users\Vincent\AppData\LocalLow\Adobe 2021-05-21 21:26 - 2021-05-21 21:26 - 000001192 _____ C:\Users\Vincent\Desktop\blender.lnk 2021-05-21 21:26 - 2021-05-21 21:26 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender 2021-05-21 21:26 - 2021-05-21 21:26 - 000000000 ____D C:\Program Files\Blender Foundation 2021-05-21 21:09 - 2019-08-29 08:07 - 000000000 ____D C:\Users\Vincent\Documents\Updater 2021-05-21 21:07 - 2021-05-21 21:07 - 000000000 ____D C:\Users\Vincent\Documents\Adobe 2021-05-21 21:07 - 2021-03-23 15:22 - 000101348 _____ C:\Users\Vincent\Documents\bootup.pcapng 2021-05-21 21:07 - 2021-03-11 01:53 - 000000574 _____ C:\Users\Vincent\Documents\vlc.reg 2021-05-21 21:07 - 2020-04-01 14:43 - 000000732 _____ C:\Users\Vincent\Documents\lnpLicense.xml 2021-05-21 21:07 - 2020-02-03 00:11 - 000015728 _____ C:\Users\Vincent\Documents\test.dat 2021-05-21 21:07 - 2019-08-12 20:05 - 010871225 _____ C:\Users\Vincent\Documents\test.afphoto 2021-05-21 21:07 - 2019-06-17 17:50 - 000000000 ____H C:\Users\Vincent\Documents\Default.rdp 2021-05-21 21:07 - 2019-01-01 12:37 - 000000000 ____D C:\Users\Vincent\Documents\Adobe Scripts 2021-05-21 21:07 - 2018-12-18 13:43 - 000091996 _____ C:\Users\Vincent\Documents\untitled.fbx 2021-05-21 21:07 - 2018-09-15 07:27 - 000000000 ____D C:\Users\Vincent\Documents\Audacity 2021-05-21 21:07 - 2018-07-31 19:23 - 000003518 _____ C:\Users\Vincent\Documents\ACP.ini 2021-05-20 10:29 - 2021-05-20 10:29 - 001687040 _____ C:\Windows\system32\libcrypto.dll 2021-05-20 10:28 - 2021-05-20 10:28 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2021-05-20 10:28 - 2021-05-20 10:28 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2021-05-20 10:28 - 2021-05-20 10:28 - 001823816 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2021-05-20 10:28 - 2021-05-20 10:28 - 001393504 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2021-05-20 10:28 - 2021-05-20 10:28 - 001314120 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi 2021-05-20 10:28 - 2021-05-20 10:28 - 001163776 _____ C:\Windows\system32\MBR2GPT.EXE 2021-05-20 10:28 - 2021-05-20 10:28 - 000700928 _____ C:\Windows\system32\FsNVSDeviceSource.dll 2021-05-20 10:28 - 2021-05-20 10:28 - 000165888 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe 2021-05-20 10:28 - 2021-05-20 10:28 - 000157184 _____ C:\Windows\system32\uwfcsp.dll 2021-05-20 10:28 - 2021-05-20 10:28 - 000153600 _____ C:\Windows\system32\uwfcfgmgmt.dll 2021-05-20 10:28 - 2021-05-20 10:28 - 000060928 _____ C:\Windows\system32\runexehelper.exe 2021-05-20 10:28 - 2021-05-20 10:28 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe 2021-05-20 10:28 - 2021-05-20 10:28 - 000011351 _____ C:\Windows\system32\DrtmAuthTxt.wim 2021-05-19 14:20 - 2021-05-20 12:41 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Notepad++ 2021-05-19 14:20 - 2021-05-19 14:20 - 000001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk 2021-05-19 14:20 - 2021-05-19 14:20 - 000000000 ____D C:\Program Files (x86)\Notepad++ 2021-05-19 12:08 - 2021-05-27 23:25 - 000000400 __RSH C:\ProgramData\ntuser.pol 2021-05-18 22:17 - 2021-05-18 22:17 - 000000000 ____D C:\Program Files (x86)\Autodesk 2021-05-18 19:07 - 2021-05-18 19:07 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Corsair 2021-05-18 19:07 - 2021-05-18 19:07 - 000000000 ____D C:\Users\Vincent\AppData\Local\Corsair 2021-05-18 19:06 - 2021-05-18 19:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair 2021-05-18 19:06 - 2021-05-18 19:06 - 000000000 ____D C:\ProgramData\Corsair 2021-05-18 19:06 - 2021-05-18 19:06 - 000000000 ____D C:\Program Files\Corsair 2021-05-18 19:06 - 2021-04-07 15:43 - 002437448 _____ (A-Volute) C:\Windows\system32\9EarsSurroundSound.dll 2021-05-18 19:06 - 2021-04-07 15:43 - 001819224 _____ (Corsair Memory, Inc.) C:\Windows\system32\CorsairGamingAudioPO64.dll 2021-05-18 19:06 - 2021-04-07 15:43 - 000616360 _____ (Corsair Memory, Inc.) C:\Windows\system32\CorsairGamingAudioCfgService64.exe 2021-05-18 19:06 - 2021-04-07 15:43 - 000060328 _____ (Corsair Memory, Inc.) C:\Windows\system32\Drivers\CorsairGamingAudio64.sys 2021-05-18 17:51 - 2021-05-18 17:51 - 000000000 ____D C:\Users\Vincent\AppData\Local\cache 2021-05-18 17:40 - 2021-05-18 17:40 - 000000000 ____D C:\Users\Vincent\AppData\LocalLow\Temp 2021-05-18 17:20 - 2021-05-18 17:20 - 000003630 _____ C:\Windows\system32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-67NU4IE-Vincent 2021-05-18 16:45 - 2021-05-18 16:45 - 000000000 ____D C:\Users\Vincent\AppData\Local\IsolatedStorage 2021-05-18 16:44 - 2021-05-18 16:44 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\NuGet 2021-05-18 16:42 - 2021-05-18 16:42 - 000000000 ____D C:\Users\Vincent\source 2021-05-18 16:40 - 2021-05-28 16:42 - 000000000 ____D C:\Users\Vincent\AppData\Local\.IdentityService 2021-05-18 16:40 - 2021-05-21 21:09 - 000000000 ____D C:\Users\Vincent\Documents\Visual Studio 2019 2021-05-18 16:40 - 2021-05-18 16:40 - 000001882 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity Hub.lnk 2021-05-18 16:40 - 2021-05-18 16:40 - 000001870 _____ C:\Users\Public\Desktop\Unity Hub.lnk 2021-05-18 16:40 - 2021-05-18 16:40 - 000000000 ____D C:\Users\Vincent\AppData\Local\unityhub-updater 2021-05-18 16:40 - 2021-05-18 16:40 - 000000000 ____D C:\Users\Vincent\AppData\Local\ServiceHub 2021-05-18 16:40 - 2021-05-18 16:40 - 000000000 ____D C:\Users\Vincent\AppData\Local\IdentityNexusIntegration 2021-05-18 16:40 - 2021-05-18 16:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2019 Tools for Unity 2021-05-18 16:40 - 2021-05-18 16:40 - 000000000 ____D C:\Program Files\Unity Hub 2021-05-18 16:40 - 2021-05-18 16:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity 2021-05-18 16:38 - 2021-05-18 16:38 - 000001800 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2019.lnk 2021-05-18 16:38 - 2019-12-06 16:35 - 000374784 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\DXCpl.exe 2021-05-18 16:38 - 2019-12-06 16:34 - 000417792 _____ C:\Windows\system32\d3dconfig.exe 2021-05-18 16:38 - 2019-12-06 16:27 - 000347136 _____ (Windows (R) Win 7 DDK provider) C:\Windows\SysWOW64\DXCpl.exe 2021-05-18 16:38 - 2019-12-06 16:26 - 000365056 _____ C:\Windows\SysWOW64\d3dconfig.exe 2021-05-18 16:37 - 2021-05-18 16:37 - 000000000 ____D C:\ProgramData\Windows App Certification Kit 2021-05-18 16:37 - 2021-05-18 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits 2021-05-18 16:37 - 2021-05-18 16:37 - 000000000 ____D C:\Program Files\Application Verifier 2021-05-18 16:37 - 2021-05-18 16:37 - 000000000 ____D C:\Program Files (x86)\NuGet 2021-05-18 16:37 - 2021-05-18 16:37 - 000000000 ____D C:\Program Files (x86)\Application Verifier 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\3082 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\2052 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1055 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1049 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1046 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1045 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1042 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1041 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1040 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1036 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1033 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1031 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1029 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\SysWOW64\1028 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\3082 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\2052 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1055 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1049 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1046 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1045 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1042 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1041 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1040 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1036 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1033 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1031 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1029 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Windows\system32\1028 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Program Files\Microsoft SQL Server 2021-05-18 16:36 - 2021-05-18 16:36 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2021-05-18 16:35 - 2021-05-18 16:39 - 000000000 ____D C:\Program Files (x86)\Microsoft SDKs 2021-05-18 16:35 - 2021-05-18 16:37 - 000000000 ____D C:\Program Files (x86)\Windows Kits 2021-05-18 16:35 - 2021-05-18 16:35 - 000001799 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019.lnk 2021-05-18 16:35 - 2021-05-18 16:35 - 000000000 ____D C:\Users\Vincent\.dotnet 2021-05-18 16:35 - 2021-05-18 16:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019 2021-05-18 16:35 - 2021-05-18 16:35 - 000000000 ____D C:\Program Files\dotnet 2021-05-18 16:35 - 2021-05-18 16:35 - 000000000 ____D C:\Program Files (x86)\dotnet 2021-05-18 16:34 - 2021-05-18 16:35 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 2021-05-18 16:34 - 2021-05-18 16:34 - 000001433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk 2021-05-18 16:34 - 2021-05-18 16:34 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Visual Studio Setup 2021-05-18 16:33 - 2021-05-18 16:33 - 000000000 ____D C:\ProgramData\Microsoft Visual Studio 2021-05-18 11:53 - 2021-05-18 11:53 - 000000000 ____D C:\Windows\system32\MRT 2021-05-17 19:47 - 2021-05-17 19:47 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\NVIDIA 2021-05-17 19:40 - 2021-05-20 12:47 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe 2021-05-17 19:40 - 2021-05-17 19:40 - 000001430 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk 2021-05-17 19:40 - 2021-05-17 19:40 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk 2021-05-17 19:40 - 2021-05-17 19:40 - 000001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk 2021-05-17 19:39 - 2021-05-17 19:39 - 000001600 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk 2021-05-17 19:37 - 2021-05-17 19:37 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Macromedia 2021-05-17 18:09 - 2021-05-17 18:09 - 000000000 ____D C:\Users\Vincent\Desktop\Adobe CS6 2021-05-17 17:58 - 2021-05-17 17:58 - 000003522 _____ C:\Windows\system32\Tasks\AdobeGCInvoker-1.0 2021-05-17 17:56 - 2021-05-29 20:03 - 000000000 ___RD C:\Users\Vincent\Creative Cloud Files 2021-05-17 17:56 - 2021-05-17 17:56 - 000000000 ____D C:\Users\Vincent\AppData\Local\CEF 2021-05-17 17:54 - 2021-05-29 12:36 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2021-05-17 17:54 - 2021-05-29 12:36 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData 2021-05-17 17:54 - 2021-05-28 08:16 - 000000000 ____D C:\ProgramData\Package Cache 2021-05-17 17:54 - 2021-05-19 20:41 - 000000000 ____D C:\ProgramData\Adobe 2021-05-17 17:54 - 2021-05-18 16:58 - 000000000 ____D C:\Users\Vincent\AppData\Local\D3DSCache 2021-05-17 17:54 - 2021-05-17 19:45 - 000000000 ____D C:\Program Files\Adobe 2021-05-17 17:54 - 2021-05-17 19:40 - 000000000 ____D C:\Program Files\Common Files\Adobe 2021-05-17 17:54 - 2021-05-17 19:40 - 000000000 ____D C:\Program Files (x86)\Adobe 2021-05-17 17:54 - 2021-05-17 17:54 - 000001386 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk 2021-05-17 17:53 - 2021-05-29 19:53 - 000000000 ____D C:\Users\Vincent\AppData\Local\Adobe 2021-05-17 17:45 - 2021-05-17 17:45 - 000000000 ____D C:\Users\Vincent\AppData\Local\NVIDIA 2021-05-17 17:34 - 2021-05-27 19:57 - 000000000 ____D C:\Users\Vincent\Autodesk 2021-05-17 17:34 - 2021-05-17 17:34 - 000000000 ____D C:\Users\Vincent\AppData\Local\Autodesk 2021-05-17 17:34 - 2021-05-17 17:34 - 000000000 ____D C:\ProgramData\FLEXnet 2021-05-17 17:34 - 2021-05-17 17:34 - 000000000 ____D C:\Program Files\Common Files\Macrovision Shared 2021-05-17 17:33 - 2021-05-17 17:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk 2021-05-17 17:33 - 2021-05-17 17:33 - 000000000 ____D C:\Program Files\Common Files\Softimage 2021-05-17 17:33 - 2021-05-17 17:33 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared 2021-05-17 17:33 - 2021-05-17 17:33 - 000000000 ____D C:\Program Files\Autodesk 2021-05-17 17:27 - 2021-05-18 22:17 - 000000000 ____D C:\ProgramData\Autodesk 2021-05-17 17:27 - 2021-05-18 16:35 - 000000000 ____D C:\Program Files (x86)\MSBuild 2021-05-17 17:27 - 2021-05-17 17:44 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Autodesk 2021-05-17 17:27 - 2021-05-17 17:27 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer 2021-05-17 17:27 - 2021-05-17 17:27 - 000000000 ____D C:\Program Files\Reference Assemblies 2021-05-17 17:27 - 2021-05-17 17:27 - 000000000 ____D C:\Program Files\MSBuild 2021-05-17 17:27 - 2021-05-17 17:27 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies 2021-05-17 16:41 - 2021-05-17 16:42 - 000000000 ____D C:\Users\Vincent\Desktop\Autodesk_Softimage_2013_SP1_English_Japanese_Win_64bit 2021-05-17 15:47 - 2021-05-17 15:47 - 000000000 ____D C:\Users\Vincent\AppData\Local\PeerDistRepub 2021-05-17 15:10 - 2021-05-29 19:30 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\discord 2021-05-17 15:10 - 2021-05-29 19:04 - 000000000 ____D C:\Users\Vincent\AppData\Local\Discord 2021-05-17 15:10 - 2021-05-17 15:11 - 000000000 ____D C:\Users\Vincent\AppData\Local\SquirrelTemp 2021-05-17 15:10 - 2021-05-17 15:10 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2021-05-17 14:45 - 2021-05-17 14:46 - 000000000 ____D C:\Program Files\Recuva 2021-05-17 14:45 - 2021-05-17 14:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva 2021-05-17 14:19 - 2021-05-29 19:26 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-05-17 14:19 - 2021-05-17 14:19 - 000003634 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-05-17 14:19 - 2021-05-17 14:19 - 000003510 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-05-17 12:15 - 2021-05-17 12:15 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\QtProject 2021-05-17 12:14 - 2021-05-17 12:17 - 000000000 ____D C:\Program Files\MiniTool Partition Wizard 12 2021-05-17 12:14 - 2019-11-08 10:15 - 003600896 _____ C:\Windows\system32\pwNative.exe 2021-05-17 12:14 - 2019-11-08 10:15 - 000019152 _____ C:\Windows\system32\pwdrvio.sys 2021-05-17 12:14 - 2019-11-08 10:15 - 000012504 _____ C:\Windows\system32\pwdspio.sys 2021-05-17 12:07 - 2021-05-17 12:07 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000729600 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx 2021-05-17 12:07 - 2021-05-17 12:07 - 000611952 _____ C:\Windows\SysWOW64\TextShaping.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000581120 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr 2021-05-17 12:07 - 2021-05-17 12:07 - 000575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx 2021-05-17 12:07 - 2021-05-17 12:07 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr 2021-05-17 12:07 - 2021-05-17 12:07 - 000480256 _____ C:\Windows\system32\AssignedAccessCsp.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000455680 _____ C:\Windows\SysWOW64\WindowManagementAPI.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000446976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000422912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2021-05-17 12:07 - 2021-05-17 12:07 - 000330752 _____ C:\Windows\SysWOW64\ssdm.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000304128 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax 2021-05-17 12:07 - 2021-05-17 12:07 - 000266240 _____ C:\Windows\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000266240 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax 2021-05-17 12:07 - 2021-05-17 12:07 - 000240640 _____ C:\Windows\SysWOW64\CoreMas.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000235520 _____ C:\Windows\SysWOW64\HeatCore.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000234496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax 2021-05-17 12:07 - 2021-05-17 12:07 - 000221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bthprops.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax 2021-05-17 12:07 - 2021-05-17 12:07 - 000182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax 2021-05-17 12:07 - 2021-05-17 12:07 - 000138056 _____ C:\Windows\system32\HvsiManagementApi.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax 2021-05-17 12:07 - 2021-05-17 12:07 - 000112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\activeds.tlb 2021-05-17 12:07 - 2021-05-17 12:07 - 000101704 _____ C:\Windows\SysWOW64\HvsiManagementApi.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncpa.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000095744 _____ C:\Windows\system32\VirtualMonitorManager.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2021-05-17 12:07 - 2021-05-17 12:07 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2021-05-17 12:07 - 2021-05-17 12:07 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl 2021-05-17 12:07 - 2021-05-17 12:07 - 000067072 _____ C:\Windows\system32\BWContextHandler.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000053760 _____ C:\Windows\SysWOW64\BWContextHandler.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000047472 _____ C:\Windows\SysWOW64\umpdc.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000045880 _____ C:\Windows\system32\HvSocket.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2021-05-17 12:07 - 2021-05-17 12:07 - 000023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msacm32.drv 2021-05-17 12:07 - 2021-05-17 12:07 - 000010752 _____ C:\Windows\SysWOW64\agentactivationruntimestarter.exe 2021-05-17 12:07 - 2021-05-17 12:07 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Mael Horz 2021-05-17 12:07 - 2021-05-17 12:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor 2021-05-17 12:07 - 2021-05-17 12:07 - 000000000 ____D C:\Program Files\HxD 2021-05-17 12:06 - 2021-05-17 12:06 - 004227116 _____ C:\Windows\system32\DefaultHrtfs.bin 2021-05-17 12:06 - 2021-05-17 12:06 - 002260992 _____ C:\Windows\system32\TextInputMethodFormatter.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 002260480 _____ (The ICU Project) C:\Windows\system32\icu.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 002254336 _____ C:\Windows\system32\dwmscene.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000707016 _____ C:\Windows\system32\TextShaping.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000643072 _____ C:\Windows\system32\WindowManagementAPI.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000562688 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2021-05-17 12:06 - 2021-05-17 12:06 - 000544768 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl 2021-05-17 12:06 - 2021-05-17 12:06 - 000455168 _____ C:\Windows\system32\ssdm.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000363520 _____ C:\Windows\system32\Windows.Internal.UI.Shell.WindowTabManager.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000306688 _____ C:\Windows\system32\HeatCore.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000287232 _____ C:\Windows\system32\CoreMas.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl 2021-05-17 12:06 - 2021-05-17 12:06 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl 2021-05-17 12:06 - 2021-05-17 12:06 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl 2021-05-17 12:06 - 2021-05-17 12:06 - 000231248 _____ C:\Windows\system32\containerdevicemanagement.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000197632 _____ C:\Windows\system32\IHDS.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000190976 _____ C:\Windows\system32\BthpanContextHandler.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000152064 _____ C:\Windows\system32\EoAExperiences.exe 2021-05-17 12:06 - 2021-05-17 12:06 - 000112128 _____ (Microsoft Corporation) C:\Windows\system32\activeds.tlb 2021-05-17 12:06 - 2021-05-17 12:06 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\ncpa.cpl 2021-05-17 12:06 - 2021-05-17 12:06 - 000091136 _____ C:\Windows\system32\Drivers\cimfs.sys 2021-05-17 12:06 - 2021-05-17 12:06 - 000089088 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.proxystub.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000074240 _____ C:\Windows\system32\rdsxvmaudio.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000073216 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000064552 _____ C:\Windows\system32\umpdc.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000048640 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.drv 2021-05-17 12:06 - 2021-05-17 12:06 - 000029696 _____ (The ICU Project) C:\Windows\system32\icuuc.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000025088 _____ (The ICU Project) C:\Windows\system32\icuin.dll 2021-05-17 12:06 - 2021-05-17 12:06 - 000001370 _____ C:\Windows\system32\ThirdPartyNoticesBySHS.txt 2021-05-17 12:02 - 2021-05-17 12:02 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2021-05-06 18:04 - 2021-05-06 18:04 - 000000000 ___HD C:\$WinREAgent 2021-05-05 21:54 - 2021-05-29 21:07 - 000000000 ____D C:\ProgramData\Mozilla 2021-05-05 21:54 - 2021-05-29 21:06 - 000000000 ____D C:\Users\Vincent\AppData\LocalLow\Mozilla 2021-05-05 21:54 - 2021-05-19 12:25 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Mozilla 2021-05-05 21:54 - 2021-05-05 21:54 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-05-05 21:54 - 2021-05-05 21:54 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk 2021-05-05 21:54 - 2021-05-05 21:54 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla 2021-05-05 21:54 - 2021-05-05 21:54 - 000000000 ____D C:\Users\Vincent\AppData\Local\Mozilla 2021-05-05 21:54 - 2021-05-05 21:54 - 000000000 ____D C:\Program Files\Mozilla Firefox 2021-05-05 21:54 - 2021-05-05 21:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2021-05-05 21:53 - 2021-05-29 14:05 - 000000000 ____D C:\Users\Vincent\AppData\Local\PlaceholderTileLogoFolder 2021-05-05 21:53 - 2021-05-05 21:53 - 000003840 _____ C:\Windows\system32\Tasks\Intel PTT EK Recertification 2021-05-05 21:53 - 2021-05-05 21:53 - 000000000 ____D C:\Users\Vincent\AppData\Local\Comms 2021-05-05 21:37 - 2021-05-17 12:00 - 000000000 ____D C:\Windows\Panther 2021-05-05 21:35 - 2021-05-17 12:00 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1086328375-2434039972-1054944181-1001 2021-05-05 21:35 - 2021-05-17 12:00 - 000000000 ___RD C:\Users\Vincent\OneDrive 2021-05-05 21:35 - 2021-05-05 21:35 - 000000000 ___HD C:\Users\Vincent\MicrosoftEdgeBackups 2021-05-05 21:35 - 2021-05-05 21:35 - 000000000 ____D C:\ProgramData\Microsoft OneDrive 2021-05-05 21:34 - 2021-05-29 08:50 - 000000000 ____D C:\Users\Vincent\AppData\Local\Packages 2021-05-05 21:34 - 2021-05-18 17:20 - 000000000 ____D C:\Users\Vincent\AppData\Roaming\Adobe 2021-05-05 21:34 - 2021-05-05 21:53 - 000000000 ____D C:\Users\Vincent\AppData\Local\MicrosoftEdge 2021-05-05 21:34 - 2021-05-05 21:34 - 000000000 __RHD C:\Users\Public\AccountPictures 2021-05-05 21:34 - 2021-05-05 21:34 - 000000000 ___RD C:\Users\Vincent\3D Objects 2021-05-05 21:34 - 2021-05-05 21:34 - 000000000 ____D C:\Users\Vincent\AppData\Local\VirtualStore 2021-05-05 21:34 - 2021-05-05 21:34 - 000000000 ____D C:\Users\Vincent\AppData\Local\Publishers 2021-05-05 21:34 - 2021-05-05 21:34 - 000000000 ____D C:\Users\Vincent\AppData\Local\ConnectedDevicesPlatform 2021-05-05 21:33 - 2021-05-28 10:41 - 000000000 ____D C:\Users\Vincent 2021-05-05 21:33 - 2021-05-17 12:00 - 000002402 _____ C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-05-05 21:33 - 2021-05-05 21:33 - 000000020 ___SH C:\Users\Vincent\ntuser.ini 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Voisinage réseau 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Voisinage d'impression 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Modèles 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Mes documents 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Menu Démarrer 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Documents\Mes vidéos 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Documents\Mes images 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\Documents\Ma musique 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2021-05-05 21:33 - 2021-05-05 21:33 - 000000000 _SHDL C:\Users\Vincent\AppData\Local\Historique 2021-05-05 21:32 - 2021-05-29 20:15 - 001771910 _____ C:\Windows\system32\PerfStringBackup.INI 2021-05-05 21:31 - 2021-05-17 17:55 - 000000000 ____D C:\ProgramData\Packages 2021-05-05 21:31 - 2021-05-07 04:16 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2021-05-05 21:31 - 2021-05-05 21:31 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation 2021-05-05 21:31 - 2021-05-05 21:31 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2021-05-05 21:31 - 2020-10-07 13:36 - 001769688 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe 2021-05-05 21:31 - 2020-10-07 13:36 - 001769688 _____ C:\Windows\system32\vulkaninfo.exe 2021-05-05 21:31 - 2020-10-07 13:36 - 001370328 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2021-05-05 21:31 - 2020-10-07 13:36 - 001370328 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2021-05-05 21:31 - 2020-10-07 13:36 - 001054936 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll 2021-05-05 21:31 - 2020-10-07 13:36 - 001054936 _____ C:\Windows\system32\vulkan-1.dll 2021-05-05 21:31 - 2020-10-07 13:36 - 000917720 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll 2021-05-05 21:31 - 2020-10-07 13:36 - 000917720 _____ C:\Windows\SysWOW64\vulkan-1.dll 2021-05-05 21:31 - 2020-10-07 13:36 - 000455408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2021-05-05 21:31 - 2020-10-07 13:36 - 000351128 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2021-05-05 21:31 - 2020-10-07 13:34 - 001023216 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll 2021-05-05 21:31 - 2020-10-07 13:34 - 000816368 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll 2021-05-05 21:31 - 2020-10-07 13:34 - 000673520 _____ C:\Windows\system32\nvofapi64.dll 2021-05-05 21:31 - 2020-10-07 13:34 - 000670616 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2021-05-05 21:31 - 2020-10-07 13:34 - 000555248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2021-05-05 21:31 - 2020-10-07 13:34 - 000543128 _____ C:\Windows\SysWOW64\nvofapi.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 007707544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 006860184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 004174064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 002508528 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 002098072 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 001585560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 001507224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 001161112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 000813464 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 000657304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2021-05-05 21:31 - 2020-10-07 13:33 - 000589208 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe 2021-05-05 21:31 - 2020-10-07 13:33 - 000445848 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe 2021-05-05 21:31 - 2020-10-07 13:33 - 000230720 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2021-05-05 21:31 - 2020-10-07 13:33 - 000047232 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhdap64.dll 2021-05-05 21:31 - 2020-10-07 13:32 - 005519600 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2021-05-05 21:31 - 2020-10-07 13:32 - 000849648 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe 2021-05-05 21:31 - 2020-10-07 13:29 - 007001536 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2021-05-05 21:31 - 2020-10-07 13:29 - 005972824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2021-05-05 21:31 - 2020-10-07 13:11 - 000080930 _____ C:\Windows\system32\nvinfo.pb 2021-05-05 21:30 - 2021-05-05 21:30 - 000000000 ____H C:\ProgramData\DP45977C.lfl 2021-05-05 21:30 - 2021-05-05 21:30 - 000000000 ____D C:\Windows\SysWOW64\RTCOM 2021-05-05 21:30 - 2021-05-05 21:30 - 000000000 ____D C:\Windows\system32\DAX2 2021-05-05 21:30 - 2021-05-05 21:30 - 000000000 ____D C:\Program Files\Realtek 2021-05-05 21:30 - 2016-06-07 05:48 - 003299824 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE2.dll 2021-05-05 21:30 - 2016-06-07 05:48 - 002190992 _____ (Yamaha Corporation) C:\Windows\system32\YamahaAE.dll 2021-05-05 21:30 - 2016-06-07 05:48 - 001336544 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaeapo64.dll 2021-05-05 21:30 - 2016-06-07 05:48 - 000962056 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tosasfapo64.dll 2021-05-05 21:30 - 2016-06-07 05:48 - 000873464 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2021-05-05 21:30 - 2016-06-07 05:48 - 000582016 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\tossaemaxapo64.dll 2021-05-05 21:30 - 2016-06-07 05:48 - 000447104 _____ (Toshiba Client Solutions Co., Ltd.) C:\Windows\system32\toseaeapo64.dll 2021-05-05 21:30 - 2016-06-07 05:48 - 000075544 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 002706864 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 002203752 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 001041744 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000467160 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000381416 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000341160 _____ (Synopsys, Inc.) C:\Windows\SysWOW64\SRCOM.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000341160 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000221968 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000209544 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000166208 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2021-05-05 21:30 - 2016-06-07 05:47 - 000158704 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 003283248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000965032 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000927424 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000716112 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000689888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000589072 _____ (Sound Research, Corp.) C:\Windows\SysWOW64\SECOMN32.DLL 2021-05-05 21:30 - 2016-06-07 05:46 - 000450128 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000387320 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000343712 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000214840 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000192992 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000110992 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000090920 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000088352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000088328 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:46 - 000083624 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 006402440 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV3apo.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 005593624 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 003096248 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 002726416 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 001355616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 000447728 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 000321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 000321720 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 000151792 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 000134208 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2021-05-05 21:30 - 2016-06-07 05:45 - 000084624 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2021-05-05 21:30 - 2016-06-07 05:44 - 013122584 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll 2021-05-05 21:30 - 2016-06-07 05:44 - 012988352 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO4064.dll 2021-05-05 21:30 - 2016-06-07 05:44 - 000923744 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2021-05-05 21:30 - 2016-06-07 05:44 - 000677680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2021-05-05 21:30 - 2016-06-07 05:43 - 001334384 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:43 - 000999864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2021-05-05 21:30 - 2016-06-07 05:41 - 002825104 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO7064.dll 2021-05-05 21:30 - 2016-06-07 05:41 - 001422936 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll 2021-05-05 21:30 - 2016-06-07 05:41 - 001213664 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2021-05-05 21:30 - 2016-06-07 05:41 - 000678192 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2021-05-05 21:30 - 2016-06-07 05:41 - 000330568 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 010512448 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000618192 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000472312 _____ (ICEpower a/s) C:\Windows\system32\ICEsoundAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000366128 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\HMAPO.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000360352 _____ (Harman) C:\Windows\system32\HMClariFi.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000203848 _____ (Harman) C:\Windows\system32\HMHVS.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000190936 _____ (Harman) C:\Windows\system32\HMEQ_Voice.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000190936 _____ (Harman) C:\Windows\system32\HMEQ.dll 2021-05-05 21:30 - 2016-06-07 05:40 - 000179600 _____ (Harman) C:\Windows\system32\HMLimiter.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 005339560 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 002437760 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 001508936 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000743968 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000727440 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000708320 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000514528 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000504312 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000500560 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000445408 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000441272 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000428232 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000253904 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000253872 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:39 - 000252880 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 001965816 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 001959608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64AF3.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 001608128 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 000574760 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 000362064 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64AF3.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 000327464 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 000310432 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64F3.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 000272720 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2021-05-05 21:30 - 2016-06-07 05:38 - 000118600 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2021-05-05 21:30 - 2016-06-07 05:30 - 072520720 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2021-05-05 21:30 - 2016-06-07 05:30 - 003199744 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2021-05-05 21:30 - 2016-06-07 05:30 - 002895104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2021-05-05 21:30 - 2016-06-07 05:30 - 000023704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2021-05-05 21:30 - 2016-06-07 05:29 - 002060032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2021-05-05 21:30 - 2016-06-07 05:28 - 014057256 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2021-05-05 21:30 - 2016-06-07 05:28 - 007172920 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2021-05-05 21:30 - 2016-06-07 05:28 - 001003864 _____ (Nahimic Inc) C:\Windows\system32\NahimicAPONSControl.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 006264640 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64AF3.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 002050176 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 001186824 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 001061120 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 000931624 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 000416512 _____ (Harman) C:\Windows\system32\HMUI.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 000371456 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll 2021-05-05 21:30 - 2016-06-07 05:27 - 000154368 _____ (Harman) C:\Windows\system32\HarmanAudioInterface.dll 2021-05-05 21:30 - 2016-06-07 05:26 - 007096192 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2021-05-05 21:30 - 2016-06-07 05:26 - 000122328 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2021-05-05 21:30 - 2016-06-07 05:26 - 000118592 _____ C:\Windows\system32\AcpiServiceVnA64.dll 2021-05-05 21:30 - 2016-06-07 05:26 - 000105312 _____ C:\Windows\system32\audioLibVc.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 005776968 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 003282544 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 001780624 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 001591064 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 001435144 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 001382240 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 001166160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 000532384 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2021-05-05 21:30 - 2016-06-07 05:19 - 000231920 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2021-05-05 21:30 - 2016-06-07 05:16 - 005118208 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2021-05-05 21:30 - 2016-06-07 05:16 - 002110600 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2021-05-05 21:30 - 2016-06-07 05:16 - 000258864 _____ (TODO: ) C:\Windows\system32\slprp64.dll 2021-05-05 21:30 - 2016-06-07 02:37 - 006275164 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT 2021-05-05 21:30 - 2016-06-07 02:37 - 005804772 _____ C:\Windows\system32\Drivers\rtvienna.dat 2021-05-05 21:30 - 2016-06-07 02:37 - 003181209 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat 2021-05-05 21:29 - 2021-05-05 21:29 - 000000000 ____D C:\Windows\CSC 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Public\Documents\Mes vidéos 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Public\Documents\Mes images 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Public\Documents\Ma musique 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Voisinage réseau 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Voisinage d'impression 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Modèles 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Mes documents 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Menu Démarrer 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Documents\Mes vidéos 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Documents\Mes images 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\Documents\Ma musique 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historique 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\ProgramData\Modèles 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmes 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\ProgramData\Menu Démarrer 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\ProgramData\Documents\Mes vidéos 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\ProgramData\Documents\Mes images 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\ProgramData\Documents\Ma musique 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\ProgramData\Bureau 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Program Files\Fichiers communs 2021-05-05 21:27 - 2021-05-05 21:27 - 000000000 _SHDL C:\Documents and Settings 2021-05-05 21:26 - 2021-05-29 20:02 - 000008192 ___SH C:\DumpStack.log.tmp 2021-05-05 21:26 - 2021-05-29 20:02 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2021-05-05 21:26 - 2021-05-29 14:56 - 000000000 ____D C:\Windows\system32\SleepStudy 2021-05-05 21:26 - 2021-05-20 12:45 - 004926392 _____ C:\Windows\system32\FNTCACHE.DAT 2021-05-05 21:26 - 2021-05-17 12:10 - 000000000 ____D C:\Windows\system32\Drivers\wd 2021-05-05 21:26 - 2021-05-05 21:26 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2021-05-05 21:26 - 2021-05-05 21:26 - 000000000 ____D C:\Windows\ServiceProfiles ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2021-05-29 21:16 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-05-29 20:15 - 2019-12-07 16:50 - 000790218 _____ C:\Windows\system32\perfh00C.dat 2021-05-29 20:15 - 2019-12-07 16:50 - 000149734 _____ C:\Windows\system32\perfc00C.dat 2021-05-29 20:15 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF 2021-05-29 20:02 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI 2021-05-29 19:26 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-05-29 19:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness 2021-05-27 16:53 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\NDF 2021-05-20 12:47 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2021-05-20 12:42 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2021-05-20 12:42 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\system32\OpenSSH 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lt-LT 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\DiagTrack 2021-05-20 12:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr 2021-05-20 10:30 - 2019-12-07 16:53 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll 2021-05-20 10:30 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp 2021-05-19 12:08 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2021-05-19 12:08 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy 2021-05-18 16:36 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2021-05-17 17:27 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\MUI 2021-05-17 17:27 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\MUI 2021-05-17 15:13 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2021-05-17 15:13 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\SysWOW64\winrm 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\SysWOW64\WCN 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\SysWOW64\slmgr 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\system32\winrm 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\system32\WCN 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\system32\slmgr 2021-05-17 15:13 - 2019-12-07 16:50 - 000000000 ____D C:\Windows\system32\Printing_Admin_Scripts 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\F12 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\F12 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\dsc 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender 2021-05-17 15:13 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2021-05-17 15:13 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing 2021-05-17 15:12 - 2019-12-07 16:52 - 000000000 ____D C:\Windows\OCR 2021-05-17 12:37 - 2019-12-07 16:53 - 000000000 ___SD C:\Windows\system32\AppV 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Keywords 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Com 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Sysprep 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lv-LV 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Keywords 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\et-EE 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\es-MX 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Com 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\IME 2021-05-17 12:37 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System 2021-05-17 12:09 - 2019-12-07 16:53 - 000020908 _____ C:\Windows\system32\OEMDefaultAssociations.xml 2021-05-06 18:59 - 2019-07-22 18:42 - 000132096 _____ () C:\Users\Vincent\Desktop\AccentsHotKeys.exe 2021-05-06 18:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\appcompat 2021-05-05 21:54 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState 2021-05-05 21:37 - 2019-12-07 11:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template 2021-05-05 21:33 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioDatabase 2021-05-05 21:30 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate 2021-05-05 21:29 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\system32\FxsTmp 2021-05-05 21:29 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\spool 2021-05-05 21:27 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT 2021-05-05 21:26 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM ==================== Files in the root of some directories ======== 2021-05-24 12:55 - 2021-05-24 12:55 - 000000132 _____ () C:\Users\Vincent\AppData\Roaming\Adobe BMP Format CS6 Prefs 2021-05-17 22:22 - 2021-05-17 22:22 - 000000000 _____ () C:\Users\Vincent\AppData\Local\oobelibMkey.log ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================