Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by Nicolas (administrator) on ULTIMATE-PC (07-07-2018 21:34:42)
Running from E:\Nicolas\Téléchargements
Loaded Profiles: Nicolas (Available Profiles: Nicolas & OVRLibraryService)
Platform: Windows 8.1 Pro (Update) (X64) Language: Anglais (États-Unis)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe
(Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Oculus VR) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe
(YaSoft) C:\Program Files (x86)\Switch Off\swoff.exe
(TeamViewer GmbH) D:\Program Files (x86)\team-viewer\TeamViewer_Service.exe
(Malwarebytes) D:\Programmes\Malwarebytes\Anti-Malware\MBAMService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes) D:\Programmes\Malwarebytes\Anti-Malware\mbamtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Oculus VR) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe
() C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x86\MsiGamingOSD_x86.exe
(MSI) C:\Windows\SysWOW64\muachost.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\OSD\x64\MsiGamingOSD_x64.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(YaSoft) C:\Program Files (x86)\Switch Off\swoff.exe
() C:\Program Files (x86)\ranting\retaliated.exe
(Micro-Star INT'L CO., LTD.) C:\MSI\MSI Gaming Lan Manager\MSI_Gaming_Lan_Manager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Disc Soft Ltd) D:\Programmes\DAEMON Tools Lite\DTShellHlp.exe
(Disc Soft Ltd) D:\Programmes\DAEMON Tools Lite\DiscSoftBusServiceLite.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235936 2017-11-16] (Realtek Semiconductor)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe [1203856 2017-09-25] (Intel Corporation)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [831584 2016-11-15] (MSI)
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [759120 2015-04-22] ()
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26119352 2018-01-30] (Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [MSI Gaming Lan Manager] => C:\MSI\MSI Gaming Lan Manager\MSI_Gaming_Lan_Manager.exe [4490400 2017-12-20] (Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MSI)
HKLM-x32\...\Run: [USB_Speed_Up] => C:\MSI\MSI USB Speed Up\USB_Speed_Up.exe [2394040 2017-02-17] (Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [588288 2016-01-08] (Nikon Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3227184247-764142730-1024045993-1001\...\Run: [DAEMON Tools Lite Automount] => D:\Programmes\DAEMON Tools Lite\DTAgent.exe [729704 2018-03-21] (Disc Soft Ltd)
HKU\S-1-5-21-3227184247-764142730-1024045993-1001\...\Run: [Switch Off] => C:\Program Files (x86)\Switch Off\swoff.exe [19456 2018-05-31] (YaSoft)
HKU\S-1-5-21-3227184247-764142730-1024045993-1001\...\Run: [retaliated] => C:\Program Files (x86)\ranting\retaliated.exe [49439 2018-07-07] ()
HKU\S-1-5-21-3227184247-764142730-1024045993-1001\...\Run: [rascality] => "C:\Program Files (x86)\Appraisals\Exonerate.exe" iarav
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2018-02-06]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS)
Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\brickman.lnk [2018-07-07]
ShortcutTarget: brickman.lnk -> C:\Program Files (x86)\Appraisals\Exonerate.exe (No File)
Startup: C:\Users\Nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\brickmanbrickman.lnk [2018-07-07]
ShortcutTarget: brickmanbrickman.lnk -> C:\Program Files (x86)\centrepiece\Dissent.exe (No File)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{4AAF504A-DF62-4A68-8C39-15AC82D0F14D}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{AB3DE5EE-08A1-47B0-A6DD-158FE8937B76}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-06-14] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-06-14] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: xihfzel7.default
FF ProfilePath: C:\Users\Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\xihfzel7.default [2018-07-07]
FF Extension: (ZenMate VPN - Sécurité internet & Unblock) - C:\Users\Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\xihfzel7.default\Extensions\firefox-webext@zenmate.com.xpi [2018-06-29]
FF Extension: (Google NoTrack) - C:\Users\Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\xihfzel7.default\Extensions\googlenotrack@dirtylittlehelpers.com.xpi [2018-07-07]
FF Extension: (DuckDuckGo Privacy Essentials) - C:\Users\Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\xihfzel7.default\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2018-06-29]
FF Extension: (Adblock Plus) - C:\Users\Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\xihfzel7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-05-16]
FF Extension: (WebCompat Reporter) - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2018-07-06] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-07] ()
FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-06-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-06-14] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-07] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-06-01] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-06-01] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> D:\Programmes\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [604504 2017-12-11] (cFos Software GmbH)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [387944 2016-06-02] (Digital Wave Ltd.) [File not signed]
R3 Disc Soft Lite Bus Service; D:\Programmes\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3663976 2018-03-21] (Disc Soft Ltd)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [48824 2017-10-26] (Micro-Star Int'l Co., Ltd.)
R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2021048 2017-11-01] (Micro-Star INT'L CO., LTD.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [742704 2017-09-21] (Intel(R) Corporation)
R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [506368 2017-10-26] (Intel Corporation) [File not signed]
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\iCLS Client\TPMProvisioningService.exe [668472 2017-09-21] (Intel(R) Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [58792 2015-06-04] (Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21304 2017-09-28] (Microsoft Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177288 2015-05-29] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [197264 2017-09-25] (Intel Corporation)
R2 MBAMService; D:\Programmes\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [2169440 2016-11-23] (MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2206304 2017-01-06] (MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4172896 2016-12-14] (MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2014816 2016-11-15] (MSI)
R2 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2327648 2016-12-05] (MSI)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2076768 2016-12-05] (MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [611936 2016-12-23] (MSI)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [83616 2017-11-21] (Micro-Star INT'L CO., LTD.)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [111568 2017-04-05] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2306232 2018-01-25] (Micro-Star INT'L CO., LTD.)
R2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\RAMDisk\MSI_RAMDisk_Service.exe [71864 2017-09-15] (Micro-Star Int'l Co., Ltd.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183480 2017-11-10] (MSI)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2201920 2018-06-12] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3072328 2018-06-12] (Electronic Arts)
S3 OVRLibraryService; C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe [142264 2018-06-20] (Oculus VR, LLC)
R2 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [480696 2018-06-20] (Oculus VR)
R2 SbaService; C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage Next\SbaService.exe [26296 2015-10-14] (Intel Corporation)
R2 Switch Off; C:\Program Files (x86)\Switch Off\swoff.exe [19456 2018-05-31] (YaSoft) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [187904 2017-09-28] (Microsoft Corporation) [File not signed]
R2 TeamViewer; D:\Program Files (x86)\team-viewer\TeamViewer_Service.exe [11293936 2018-04-03] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2018-03-21] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2018-03-21] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [566856 2017-10-31] (Intel Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [152184 2018-07-07] (Malwarebytes)
R3 I2cHkBurn; C:\Windows\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (FINTEK Corp.)
R3 iaLPSS2_GPIO2; C:\Windows\system32\DRIVERS\iaLPSS2_GPIO2.sys [88376 2016-09-20] (Intel Corporation)
R3 iusb3adp; C:\Windows\System32\drivers\iusb3adp.sys [29272 2016-11-04] (Intel)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [190696 2018-07-07] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [112872 2018-07-07] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [44768 2018-07-07] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253664 2018-07-07] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [103656 2018-07-07] (Malwarebytes)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [14288 2017-03-29] (MSI)
R3 NTIOLib_MBAPI; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MSI)
R3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31168 2018-03-14] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [55720 2018-06-02] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57976 2017-11-16] (NVIDIA Corporation)
S3 OCULUSVRHEADSET; C:\Windows\system32\DRIVERS\OCULUS119B.sys [1879040 2018-04-22] (OCULUS)
S3 OCUSBVID; C:\Windows\System32\drivers\ocusbvid111.sys [69176 2018-04-22] (Oculus VR, LLC)
R2 RAMDriv; C:\Windows\system32\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R2 RAMDriv; C:\Windows\SysWOW64\DRIVERS\ramdriv.sys [86936 2016-03-10] (Micro-Star Int'l Co., Ltd.)
R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [41816 2016-11-03] (SteelSeries ApS)
R3 sshid; C:\Windows\System32\drivers\sshid.sys [45936 2017-08-15] (SteelSeries ApS)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [35376 2018-02-06] (Basil Projects)
S3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [42760 2016-02-23] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-07 21:32 - 2018-07-07 21:34 - 000000000 ____D C:\FRST
2018-07-07 21:17 - 2018-07-07 21:17 - 000253664 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-07-07 21:07 - 2018-07-07 21:07 - 000000568 __RSH C:\ProgramData\ntuser.pol
2018-07-07 20:58 - 2018-07-07 21:17 - 000112872 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-07-07 20:58 - 2018-07-07 21:17 - 000103656 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2018-07-07 20:58 - 2018-07-07 21:17 - 000044768 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-07-07 20:56 - 2018-07-07 20:59 - 000190696 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-07-07 20:56 - 2018-07-07 20:59 - 000152184 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-07-07 20:56 - 2018-07-07 20:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-07-07 20:54 - 2018-07-07 20:54 - 000007631 _____ C:\Users\Nicolas\AppData\Local\Resmon.ResmonCfg
2018-07-07 20:43 - 2018-07-07 20:43 - 000000000 ____D C:\Windows\%LOCALAPPDATA%
2018-07-07 20:42 - 2018-07-07 20:49 - 000000001 _____ C:\zzf8al05d3ukawl
2018-07-07 20:41 - 2018-07-07 20:45 - 000000000 ____D C:\Program Files (x86)\centrepiece
2018-07-07 20:41 - 2018-07-07 20:45 - 000000000 ____D C:\Program Files (x86)\Appraisals
2018-07-07 20:41 - 2018-07-07 20:44 - 000000000 ___HD C:\Program Files (x86)\Bonaventure
2018-07-07 20:41 - 2018-07-07 20:44 - 000000000 ____D C:\Program Files (x86)\dabbed
2018-07-07 20:41 - 2018-07-07 20:42 - 000000012 _____ C:\Windows\b36246310
2018-07-07 20:41 - 2018-07-07 20:41 - 000003742 _____ C:\Windows\System32\Tasks\omissions_combative
2018-07-07 20:41 - 2018-07-07 20:41 - 000003740 _____ C:\Windows\System32\Tasks\operators
2018-07-07 20:41 - 2018-07-07 20:41 - 000003738 _____ C:\Windows\System32\Tasks\spaced-dell
2018-07-07 20:41 - 2018-07-07 20:41 - 000003738 _____ C:\Windows\System32\Tasks\gridley
2018-07-07 20:41 - 2018-07-07 20:41 - 000003738 _____ C:\Windows\System32\Tasks\coria consecrating
2018-07-07 20:41 - 2018-07-07 20:41 - 000003734 _____ C:\Windows\System32\Tasks\implants prudhomme ong
2018-07-07 20:41 - 2018-07-07 20:41 - 000003730 _____ C:\Windows\System32\Tasks\vicissitudes_paulos
2018-07-07 20:41 - 2018-07-07 20:41 - 000003726 _____ C:\Windows\System32\Tasks\granola
2018-07-07 20:41 - 2018-07-07 20:41 - 000003588 _____ C:\Windows\System32\Tasks\omissions_combativeomissions_combative
2018-07-07 20:41 - 2018-07-07 20:41 - 000003586 _____ C:\Windows\System32\Tasks\operatorsoperators
2018-07-07 20:41 - 2018-07-07 20:41 - 000003584 _____ C:\Windows\System32\Tasks\spaced-dellspaced-dell
2018-07-07 20:41 - 2018-07-07 20:41 - 000003584 _____ C:\Windows\System32\Tasks\gridleygridley
2018-07-07 20:41 - 2018-07-07 20:41 - 000003584 _____ C:\Windows\System32\Tasks\coria consecratingcoria consecrating
2018-07-07 20:41 - 2018-07-07 20:41 - 000003580 _____ C:\Windows\System32\Tasks\implants prudhomme ongimplants prudhomme ong
2018-07-07 20:41 - 2018-07-07 20:41 - 000003576 _____ C:\Windows\System32\Tasks\vicissitudes_paulosvicissitudes_paulos
2018-07-07 20:41 - 2018-07-07 20:41 - 000003572 _____ C:\Windows\System32\Tasks\granolagranola
2018-07-07 20:41 - 2018-07-07 20:41 - 000000000 ___HD C:\Program Files (x86)\ranting
2018-07-07 20:40 - 2018-07-07 20:40 - 000000000 ____D C:\Program Files (x86)\Microsoft Toolkit Final
2018-07-07 20:15 - 2018-07-07 21:31 - 000003758 _____ C:\Windows\System32\Tasks\AutoKMS
2018-07-01 21:02 - 2018-07-01 21:02 - 000000000 ____D C:\Users\Nicolas\AppData\LocalLow\DefaultCompany
2018-07-01 19:36 - 2018-07-05 14:20 - 000000000 ____D C:\ProgramData\Unity
2018-07-01 19:36 - 2018-07-01 21:02 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\Unity
2018-07-01 19:36 - 2018-07-01 20:02 - 000000000 ____D C:\Users\Nicolas\AppData\Local\Unity
2018-06-29 16:07 - 2018-06-29 16:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2017 Tools for Unity
2018-06-29 16:07 - 2018-06-29 16:07 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
2018-06-29 16:04 - 2018-06-29 16:04 - 000000000 ____D C:\ProgramData\Windows App Certification Kit
2018-06-29 16:04 - 2018-06-29 16:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2018-06-29 16:04 - 2018-06-29 16:04 - 000000000 ____D C:\Program Files\Application Verifier
2018-06-29 16:04 - 2018-06-29 16:04 - 000000000 ____D C:\Program Files (x86)\Application Verifier
2018-06-29 15:51 - 2018-06-29 16:07 - 000000000 ____D C:\Program Files (x86)\Microsoft SDKs
2018-06-29 15:51 - 2018-06-29 16:04 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2018-06-29 15:51 - 2018-06-29 15:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017
2018-06-29 15:50 - 2018-06-29 15:50 - 000001495 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2017.lnk
2018-06-29 15:49 - 2018-06-29 16:07 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\Visual Studio Setup
2018-06-29 15:49 - 2018-06-29 15:49 - 000001298 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2018-06-29 15:49 - 2018-06-29 15:49 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\vstelemetry
2018-06-29 15:49 - 2018-06-29 15:49 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\Microsoft Visual Studio
2018-06-29 15:49 - 2018-06-29 15:49 - 000000000 ____D C:\Users\Nicolas\AppData\Local\ServiceHub
2018-06-29 15:49 - 2018-06-29 15:49 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2018-06-29 15:48 - 2018-06-29 15:48 - 000000000 ____D C:\ProgramData\Microsoft Visual Studio
2018-06-29 15:41 - 2018-06-29 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 2018.1.6f1 (64-bit)
2018-06-27 08:53 - 2018-06-27 08:53 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\Crystal Dynamics
2018-06-19 14:08 - 2018-06-19 14:08 - 000000000 ____D C:\Users\Nicolas\AppData\LocalLow\B4T Games
2018-06-14 17:33 - 2018-06-14 17:33 - 000000000 ____D C:\Users\Nicolas\.java
2018-06-14 17:21 - 2018-06-14 17:21 - 000001908 _____ C:\Windows\diagwrn.xml
2018-06-14 17:21 - 2018-06-14 17:21 - 000001908 _____ C:\Windows\diagerr.xml
2018-06-14 17:21 - 2018-06-14 17:21 - 000000000 ___HD C:\$WINDOWS.~BT
2018-06-14 10:59 - 2018-06-14 10:59 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\OpenOffice
2018-06-14 10:52 - 2018-06-14 10:52 - 000000000 ___SD C:\Users\Nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.5
2018-06-14 10:52 - 2018-06-14 10:52 - 000000000 ____D C:\Program Files (x86)\OpenOffice 4
2018-06-14 10:47 - 2018-06-14 10:47 - 000000000 ____D C:\Users\Nicolas\AppData\LocalLow\Oracle
2018-06-13 14:34 - 2018-05-25 07:10 - 025742848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-06-13 14:34 - 2018-05-25 06:44 - 000578048 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-06-13 14:34 - 2018-05-25 06:38 - 005779968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-06-13 14:34 - 2018-05-25 06:34 - 020286976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-06-13 14:34 - 2018-05-25 06:32 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-06-13 14:34 - 2018-05-25 06:16 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-06-13 14:34 - 2018-05-25 06:06 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-06-13 14:34 - 2018-05-25 06:03 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-06-13 14:34 - 2018-05-25 05:56 - 000381440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-06-13 14:34 - 2018-05-25 05:55 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-06-13 14:34 - 2018-05-25 05:55 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-06-13 14:34 - 2018-05-25 05:53 - 015283200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-06-13 14:34 - 2018-05-25 05:53 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-06-13 14:34 - 2018-05-25 05:44 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-06-13 14:34 - 2018-05-25 05:42 - 004496896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-06-13 14:34 - 2018-05-25 05:39 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-06-13 14:34 - 2018-05-25 05:39 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-06-13 14:34 - 2018-05-25 05:38 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-06-13 14:34 - 2018-05-25 05:38 - 002060288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-06-13 14:34 - 2018-05-25 05:38 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-06-13 14:34 - 2018-05-25 05:29 - 001546240 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-06-13 14:34 - 2018-05-25 05:19 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-06-13 14:34 - 2018-05-25 05:17 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-06-13 14:34 - 2018-05-25 05:15 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-06-13 14:34 - 2018-05-25 05:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-06-13 14:34 - 2018-05-23 07:56 - 007406944 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-06-13 14:34 - 2018-05-23 07:45 - 000027480 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\uefi.sys
2018-06-13 14:34 - 2018-05-23 07:39 - 001676064 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-06-13 14:34 - 2018-05-23 06:13 - 000251392 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2018-06-13 14:34 - 2018-05-15 07:47 - 002334624 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2018-06-13 14:34 - 2018-05-15 07:47 - 000244304 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2018-06-13 14:34 - 2018-05-15 07:33 - 001308352 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-06-13 14:34 - 2018-05-15 06:57 - 002324752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2018-06-13 14:34 - 2018-05-15 06:17 - 000032640 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-06-13 14:34 - 2018-05-15 06:04 - 000240128 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2018-06-13 14:34 - 2018-05-15 05:05 - 000517120 _____ (Microsoft Corporation) C:\Windows\system32\wimserv.exe
2018-06-13 14:34 - 2018-05-15 04:57 - 000672768 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2018-06-13 14:34 - 2018-05-15 04:51 - 000561152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wimgapi.dll
2018-06-13 14:34 - 2018-05-12 23:11 - 000532664 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2018-06-13 14:34 - 2018-05-12 23:06 - 000567152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2018-06-13 14:34 - 2018-05-12 22:51 - 002014040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-06-13 14:34 - 2018-05-12 22:51 - 000923480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2018-06-13 14:34 - 2018-05-12 21:08 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-06-13 14:34 - 2018-05-11 05:04 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-06-13 14:34 - 2018-05-05 21:05 - 001543800 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2018-06-13 14:34 - 2018-05-05 20:15 - 001178136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webservices.dll
2018-06-13 14:34 - 2018-05-05 18:38 - 000358912 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2018-06-13 14:34 - 2018-05-05 18:23 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2018-06-13 14:34 - 2018-04-07 18:48 - 000685568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2018-06-13 14:34 - 2018-04-07 18:47 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2018-06-13 14:34 - 2018-04-07 18:43 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2018-06-13 14:34 - 2018-04-07 18:09 - 000170496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll
2018-06-13 14:34 - 2018-04-07 17:34 - 002255360 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2018-06-13 14:34 - 2018-04-07 17:15 - 001942016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2018-06-13 14:34 - 2018-04-05 19:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netvsc63.sys
2018-06-13 14:34 - 2018-04-05 19:38 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\NetVscCoinstall.dll
2018-06-13 14:34 - 2018-03-29 03:33 - 000070656 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2018-06-13 14:34 - 2018-03-29 03:21 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\wsmplpxy.dll
2018-06-13 14:34 - 2018-03-29 03:06 - 002608640 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2018-06-13 14:34 - 2018-03-29 03:05 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2018-06-13 14:34 - 2018-03-29 02:26 - 002170880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2018-06-13 14:34 - 2018-03-29 02:24 - 000236032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2018-06-08 18:47 - 2018-06-01 10:47 - 000132680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-06-08 18:45 - 2018-06-02 05:06 - 040090152 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-06-08 18:45 - 2018-06-02 05:06 - 016999360 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-06-08 18:45 - 2018-06-02 05:06 - 001419200 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-06-08 18:45 - 2018-06-02 05:06 - 001092008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-06-08 18:45 - 2018-06-02 05:06 - 000627240 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-06-08 18:45 - 2018-06-02 05:06 - 000517544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-06-08 18:45 - 2018-06-02 05:06 - 000055720 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2018-06-08 18:45 - 2018-06-02 05:05 - 040346536 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 035250624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 031276296 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 025990104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 013727800 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 011272944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 003964328 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 003497024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 002014144 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439811.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 001562208 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 001468272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439811.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 001216448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 001157216 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000913672 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000904720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000420008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000182600 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000165136 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000159712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000142824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-06-08 18:45 - 2018-06-02 05:05 - 000134592 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2018-06-08 18:45 - 2018-06-02 05:04 - 017782576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-06-08 18:45 - 2018-06-02 05:04 - 015192816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-06-08 18:45 - 2018-06-02 05:04 - 000462648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-06-08 18:45 - 2018-06-02 05:04 - 000170376 _____ (NVIDIA Corporation) C:\Windows\system32\nvdlistx.dll
2018-06-08 18:45 - 2018-06-02 05:04 - 000148352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvdlist.dll
2018-06-08 11:54 - 2018-06-08 11:54 - 000000000 ____D C:\Program Files (x86)\OpenAL

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-07-07 21:32 - 2018-02-06 21:37 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3227184247-764142730-1024045993-1001
2018-07-07 21:28 - 2018-02-06 22:45 - 000000000 ____D C:\Users\Nicolas\AppData\LocalLow\Mozilla
2018-07-07 21:27 - 2018-04-22 18:52 - 000000000 ____D C:\Users\Nicolas\AppData\Local\Oculus
2018-07-07 21:27 - 2018-02-06 22:15 - 000000000 __RDO C:\Users\Nicolas\SkyDrive
2018-07-07 21:27 - 2018-02-06 21:39 - 000000000 ____D C:\ProgramData\NVIDIA
2018-07-07 21:23 - 2018-02-06 22:05 - 000803818 _____ C:\Windows\system32\perfh00C.dat
2018-07-07 21:23 - 2018-02-06 22:05 - 000156024 _____ C:\Windows\system32\perfc00C.dat
2018-07-07 21:23 - 2018-02-06 21:28 - 001817064 _____ C:\Windows\system32\PerfStringBackup.INI
2018-07-07 21:23 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2018-07-07 21:16 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-07-07 20:19 - 2018-02-06 22:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-07-07 20:19 - 2018-02-06 22:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-07-06 19:12 - 2018-02-06 22:39 - 000000000 ____D C:\Program Files (x86)\Steam
2018-07-06 18:33 - 2018-02-06 23:53 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\.technic
2018-07-06 11:37 - 2018-02-06 22:45 - 000001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-07-06 11:31 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2018-07-02 12:37 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2018-07-02 11:23 - 2018-02-21 22:22 - 000000000 ____D C:\Users\Nicolas\AppData\LocalLow\VRChat
2018-07-01 21:02 - 2018-04-22 20:52 - 000000000 ____D C:\Users\Nicolas\AppData\LocalLow\Unity
2018-06-30 20:45 - 2018-04-22 19:45 - 000000000 ____D C:\Program Files\Oculus
2018-06-29 16:06 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2018-06-29 16:04 - 2018-02-06 21:37 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-29 15:51 - 2018-02-13 20:48 - 000000000 ____D C:\Program Files (x86)\MSBuild
2018-06-29 15:51 - 2013-08-22 17:36 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2018-06-29 15:49 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2018-06-21 12:20 - 2018-05-02 14:29 - 000000000 ____D C:\Program Files (x86)\Origin
2018-06-19 13:44 - 2018-03-22 22:34 - 000000000 ____D C:\Users\Nicolas\AppData\Local\CrashDumps
2018-06-16 20:38 - 2018-04-22 22:09 - 000000000 ____D C:\temp
2018-06-14 22:23 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2018-06-14 22:17 - 2018-02-06 23:51 - 000000000 ____D C:\Program Files\Java
2018-06-14 22:17 - 2013-08-22 16:44 - 000513640 _____ C:\Windows\system32\FNTCACHE.DAT
2018-06-14 17:33 - 2018-02-06 21:23 - 000000000 ____D C:\Users\Nicolas
2018-06-14 12:06 - 2018-06-05 10:12 - 000000000 ____D C:\Users\Nicolas\AppData\Roaming\TeamViewer
2018-06-14 10:48 - 2018-02-06 23:52 - 000111048 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2018-06-14 10:48 - 2018-02-06 23:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-06-14 10:16 - 2018-02-06 22:21 - 000000000 ____D C:\Windows\system32\MRT
2018-06-14 10:14 - 2018-02-06 22:21 - 133315992 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-06-14 10:14 - 2018-02-06 22:21 - 133315992 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-06-09 21:55 - 2018-02-06 21:53 - 000000000 ____D C:\Users\Nicolas\AppData\Local\NVIDIA
2018-06-08 18:47 - 2018-03-27 17:38 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-06-08 18:47 - 2018-02-06 21:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-06-08 18:47 - 2018-02-06 21:39 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-06-07 14:02 - 2018-03-16 10:58 - 000004472 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-06-07 14:02 - 2018-02-11 13:18 - 000004496 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-06-07 14:02 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-06-07 14:02 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\Macromed

==================== Files in the root of some directories =======

2018-06-04 16:04 - 2018-06-04 16:04 - 000017457 _____ () C:\Users\Nicolas\AppData\Local\recently-used.xbel
2018-07-07 20:54 - 2018-07-07 20:54 - 000007631 _____ () C:\Users\Nicolas\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
2018-06-14 10:47 - 2018-06-14 10:47 - 001884616 _____ (Oracle Corporation) C:\Users\Nicolas\AppData\Local\Temp\jre-8u171-windows-au.exe
2018-02-06 21:40 - 2018-05-22 22:09 - 000638760 _____ (NVIDIA Corporation) C:\Users\Nicolas\AppData\Local\Temp\nvSCPAPI.dll
2018-02-06 21:40 - 2018-05-22 22:09 - 000728360 _____ (NVIDIA Corporation) C:\Users\Nicolas\AppData\Local\Temp\nvSCPAPI64.dll
2018-02-06 21:56 - 2018-05-22 22:09 - 000395048 _____ (NVIDIA Corporation) C:\Users\Nicolas\AppData\Local\Temp\nvStInst.exe
2018-05-30 22:19 - 2018-05-30 22:20 - 058834376 _____ (Skype Technologies S.A.) C:\Users\Nicolas\AppData\Local\Temp\SkypeSetup.exe
2018-07-07 20:15 - 2018-07-07 20:15 - 000100864 _____ () C:\Users\Nicolas\AppData\Local\Temp\SppExtComObjHook.dll
2018-02-22 23:17 - 2018-02-22 23:17 - 030950664 _____ () C:\Users\Nicolas\AppData\Local\Temp\vlc-2.2.6-win32.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-07-07 21:26

==================== End of FRST.txt ============================