start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3286503035-1535481467-653880807-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\arnau_000\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
Task: {0D4CDAB4-68F8-43DC-806D-462E32A25A82} - \Advanced System Protector_startup -> Pas de fichier <==== ATTENTION
Task: {32813826-5641-41B9-9D88-BC6E88B1C769} - System32\Tasks\Yahoo! Powered fanol => C:\windows\system32\wscript.exe "C:\ProgramData\{1BFADE99-91B8-545F-177E-CA1D8D3C41D3}\male.txt" "68747470733a2f2f7761676e672e636f6d" "433a5c50726f6772616d446174615c7b31424641444539392d393142382d353435462d313737452d4341314438443343343144337d5c6365726f6665" "433a5c50726f6772616d446174615c7b31424641444539392d393142382d353435462d3137 (l'élément de données a 80 caractères en plus). <==== ATTENTION
Task: {A067DAC4-93BA-4A4A-A22D-2D344D228301} - System32\Tasks\Secured Yahoo Powered fanol => wscript.exe "C:\ProgramData\{1815DD76-9257-57B0-1491-C9F28ED3423C}\male.txt" "68747470733a2f2f6275746170756a6f2e636f6d" "433a5c50726f6772616d446174615c7b31383135444437362d393235372d353742302d313439312d4339463238454433343233437d5c6365726f6665" "433a5c50726f6772616d446174615c7b31383135444437362d393235372d35374230 (l'élément de données a 86 caractères en plus). <==== ATTENTION
Task: {C9289B64-8628-45E7-8AB7-BF55589D97FE} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe [2017-07-20] (Byte Technologies LLC) <==== ATTENTION
Task: {CD9BDCA2-41AA-4C34-BA94-79CF876920AC} - System32\Tasks\{85827D04-C2EE-40B1-B089-4A64EA7C6E9B} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\ByteFence\ByteFence.exe" -c /uninstall
Task: {D84D4121-A82D-4B0D-853A-7FB79C755CE8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
C:\Program Files\ByteFence
Task: {F8BA374C-9B61-431E-8528-161F1B6493F7} - System32\Tasks\ByteFence Scan => C:\Program Files\ByteFence\ByteFence.exe [2017-07-20] (Byte Technologies LLC) <==== ATTENTION
Task: C:\WINDOWS\Tasks\Secured Yahoo Powered fanol.job => C:\ProgramData\{1815DD76-9257-57B0-1491-C9F28ED3423C}\male.txt <==== ATTENTION
Task: C:\WINDOWS\Tasks\Yahoo! Powered fanol.job => Wscript.exe C:\ProgramData\{1BFADE99-91B8-545F-177E-CA1D8D3C41D3}\male.txt <==== ATTENTION
2016-05-25 13:38 - 2016-05-25 13:38 - 000129304 _____ () C:\Program Files\ByteFence\x64\lz4_x64.dll
2017-03-07 19:18 - 2017-03-07 19:18 - 000582936 _____ () C:\Program Files\ByteFence\rsLggr.exe
AlternateDataStreams: C:\Users\Public\AppData:CSM [222]
FirewallRules: [UDP Query User{9D41FA2D-5781-4E86-BAD5-CEF13D31C3B4}C:\program files (x86)\pando networks\media booster\pmb.exe] => (Block) C:\program files (x86)\pando networks\media booster\pmb.exe
FirewallRules: [TCP Query User{1D0C6F2F-5442-45BC-9763-68A494736D6A}C:\program files (x86)\pando networks\media booster\pmb.exe] => (Block) C:\program files (x86)\pando networks\media booster\pmb.exe
C:\program files (x86)\pando networks
(Byte Technologies LLC) C:\Program Files\ByteFence\ByteFence.exe
() C:\Program Files\ByteFence\rsLggr.exe
GroupPolicy: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR HKU\S-1-5-21-3286503035-1535481467-653880807-1001\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
HKU\S-1-5-21-3286503035-1535481467-653880807-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
HKU\S-1-5-21-3286503035-1535481467-653880807-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3286503035-1535481467-653880807-1001 -> DefaultScope {62E8E561-64AB-4DF5-B764-0F2ECB87A6DD} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3286503035-1535481467-653880807-1001 -> URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3320133&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP7EF9FAE0-9F56-4867-A672-87D9CF04C917&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-3286503035-1535481467-653880807-1001 -> {62E8E561-64AB-4DF5-B764-0F2ECB87A6DD} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3286503035-1535481467-653880807-1001 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3286503035-1535481467-653880807-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
Toolbar: HKLM - Pas de nom - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Pas de fichier
Toolbar: HKU\S-1-5-21-3286503035-1535481467-653880807-1001 -> Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
FF Homepage: Mozilla\Firefox\Profiles\nrzvw581.default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_17_17¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDzz0CyC0A0DzztB0CtCtBtN0D0Tzu0StCzyyEyDtN1L2XzutAtFtBzytFtAtFyCzytN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyE0FzztDzy0DtDzztGtDtDtByCtGtC0FtC0EtGtA0FyC0FtGtA0A0EyDtC0E0B0A0B0EyB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2Szz0AyDyEyB0FzzyCtGtA0DtAtCtGyE0AtC0AtG0BtByDtAtG0Azyzy0EzytBtAzyyE0F0Azy2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtByBzzyC%26cr%3D1938377034%26a%3Dwbf_ir_17_17%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
FF SearchPlugin: C:\Users\arnau_000\AppData\Roaming\Mozilla\Firefox\Profiles\nrzvw581.default\searchplugins\yahoo! powered.xml [2017-04-29]
FF Plugin HKU\S-1-5-21-3286503035-1535481467-653880807-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-12-26] (Pando Networks)
CHR dev: Chrome dev build détecté(e)! <==== ATTENTION
CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3286503035-1535481467-653880807-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [302920 2017-08-25] ()
S3 xhunter1; C:\WINDOWS\xhunter1.sys [36808 2016-11-21] (Wellbia.com Co., Ltd.)
2018-02-18 11:11 - 2018-02-18 11:11 - 000000000 ____D C:\Users\arnau_000\AppData\Local\Chromium
2018-02-17 13:46 - 2018-02-17 13:46 - 000002404 _____ C:\Users\arnau_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2018-02-17 13:41 - 2018-02-17 13:41 - 000000000 ____D C:\WINDOWS\System32\Tasks\Rulaf
2018-02-17 13:41 - 2018-02-17 13:41 - 000000000 ____D C:\Users\arnau_000\AppData\Roaming\15806A95-4646-1262-A088-5CA15B4A712A
2018-02-17 13:40 - 2018-02-17 13:48 - 000000000 ____D C:\Users\arnau_000\AppData\Local\{2F8919D5-0B21-756D-66B9-508542D1AC1D}
2018-02-17 13:40 - 2018-02-17 13:40 - 000004088 _____ C:\WINDOWS\System32\Tasks\Secured Yahoo Powered fanol
2018-02-17 13:40 - 2018-02-17 13:40 - 000000988 _____ C:\WINDOWS\Tasks\Secured Yahoo Powered fanol.job
2018-02-17 13:40 - 2018-02-17 13:40 - 000000000 ____D C:\ProgramData\{1815DD76-9257-57B0-1491-C9F28ED3423C}
2018-02-18 13:09 - 2018-01-17 16:18 - 000000000 ____D C:\Program Files\rempl
2018-02-18 13:07 - 2016-12-26 19:24 - 000000000 _____ C:\WINDOWS\system32\RzSurroundVADAudioDeviceManager_log.txt
2018-02-18 13:06 - 2017-04-29 10:43 - 000000000 ____D C:\Program Files\ByteFence
2018-02-18 12:59 - 2017-07-27 13:00 - 000000000 ___DC C:\WINDOWS\Panther
2018-02-18 12:49 - 2017-04-29 10:49 - 000000000 ____D C:\ProgramData\{1BFADE99-91B8-545F-177E-CA1D8D3C41D3}
2015-12-06 08:50 - 2015-12-06 08:50 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{082F548B-9623-440D-B420-92446C01E7A7}
2015-12-12 12:39 - 2015-12-12 12:39 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{1BDA9A6E-76D8-4357-AA53-D0B64A9223A3}
2015-12-05 20:04 - 2015-12-05 20:04 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{22AF4487-6681-48B5-8AC5-74015A862E46}
2015-12-05 20:32 - 2015-12-05 20:32 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{2E3871A9-1DEB-4EF4-82F8-591FA076D3C8}
2015-12-05 20:10 - 2015-12-05 20:10 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{3AFD651C-FDE5-44E7-A057-5B22A81A7609}
2015-12-05 20:29 - 2015-12-05 20:29 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{437188D8-B994-4E4B-A68B-2445F3CA6411}
2015-12-20 18:57 - 2015-12-20 18:57 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{45099D8D-10D0-4917-ABAC-2B37FC75AD5A}
2015-12-03 19:52 - 2015-12-03 19:52 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{63F433A1-4573-482F-92D9-FD44A5431CB4}
2015-12-03 19:37 - 2015-12-03 19:37 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{73EC62DD-832A-468F-BF6B-CF022B6F3773}
2015-12-21 19:37 - 2015-12-21 19:37 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{B9E3C77A-E106-4C50-8ACC-D8DA6459128C}
2015-12-05 18:40 - 2015-12-05 18:40 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{D15E3F54-C696-448C-9C52-3F0A51B1ED75}
2015-12-19 10:40 - 2015-12-19 10:40 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{EB6B45CA-6E33-46C6-8226-87FF07736B80}
2015-12-13 14:51 - 2015-12-13 14:51 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{EC049CFC-A2C7-48E6-9CE1-CF0D65DBDE7D}
2015-12-21 19:48 - 2015-12-21 19:48 - 000000000 _____ () C:\Users\arnau_000\AppData\Local\{F5903ECC-B97F-4047-9094-506E5B400868}
cmd: ipconfig /flushdns
end::