start::
CreateRestorePoint:
CloseProcesses:
Task: {504B9F15-D4EF-4575-8AC3-039B9F58FA7B} - System32\Tasks\OInstall => C:\WINDOWS\OInstall.exe [2016-12-06] ()
FirewallRules: [UDP Query User{652B7857-55C4-444B-82A4-FEA9254F7BEA}C:\windows\files\bin\kmss.exe] => (Block) C:\windows\files\bin\kmss.exe
FirewallRules: [TCP Query User{68394EFA-08D6-4140-A2C0-896284DD64E5}C:\windows\files\bin\kmss.exe] => (Block) C:\windows\files\bin\kmss.exe
FirewallRules: [UDP Query User{1D14426C-43CC-455E-B642-18B599BDF073}C:\users\gabri\downloads\kms tools portable 31.12.2016\programs\office 2013-2016 c2r install v5.9.2\files\bin\kmss.exe] => (Allow) C:\users\gabri\downloads\kms tools portable 31.12.2016\programs\office 2013-2016 c2r install v5.9.2\files\bin\kmss.exe
FirewallRules: [TCP Query User{6FC36253-4FEF-4D70-B499-3AB5EFD24966}C:\users\gabri\downloads\kms tools portable 31.12.2016\programs\office 2013-2016 c2r install v5.9.2\files\bin\kmss.exe] => (Allow) C:\users\gabri\downloads\kms tools portable 31.12.2016\programs\office 2013-2016 c2r install v5.9.2\files\bin\kmss.exe
GroupPolicy: Restriction - Chrome <==== ATTENTION
ProxyEnable: [S-1-5-21-433975151-253569855-3357388958-1001] => Proxy est activé.
SearchScopes: HKU\S-1-5-21-433975151-253569855-3357388958-1001 -> {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=BT5&o=&src=crm&q={searchTerms}&locale=
CHR HomePage: Default -> hxxp://www.trovi.com/?gd=&ctid=CT3317919&octid=EB_ORIGINAL_CTID&ISID=M639CA11A-1EA9-4609-8C60-127B9FCF8D9F&SearchSource=55&CUI=&UM=6&UP=SPBDEB63E1-B691-4FC3-A1CC-E0D65E3FD5F5&SSPV=
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-433975151-253569855-3357388958-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
2017-10-15 22:55 - 2017-10-15 22:55 - 000604928 _____ (Reimage) C:\Users\gabri\Downloads\ReimageRepair.exe
EmptyTemp:
end::