start::
CreateRestorePoint:
CloseProcesses:
CustomCLSID: HKU\S-1-5-21-2696179297-1538496786-2661179455-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\david\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2696179297-1538496786-2661179455-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\david\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2696179297-1538496786-2661179455-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\david\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\amd64\FileSyncShell64.dll => Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
Task: {21430DD4-2D7B-4C89-9E76-872167C15504} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2016-01-11] (@ByELDI)
CHR HomePage: Default -> hxxp://45d984f3f5c7953g3zdcbg7w3tdg1z3e5e%26from%3Damt%26uid%3Dwdcxwd5000bevt-80a0rt0_wd-wxg1a10p3711p3711/
CHR StartupUrls: Default -> "hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT","hxxp://www.omniboxes.com/?type=hp&ts=1431591389&z=7423b9948ed6ca0e57c2091gdz9c1gcwet1g2cab1t&from=amt&uid=WDCXWD5000BEVT-80A0RT0_WD-WXG1A10P3711P3711","hxxp://www.oursurfing.com/?type=hp&ts=1431596353&z=4eb4ea646bc61e505837e9cg0zcc1gdw9t9qccfw5c&from=cmi&uid=WDCXWD5000BEVT-80A0RT0_WD-WXG1A10P3711P3711","hxxps://www.google.com/"
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [745664 2016-01-11] (@ByELDI) [Fichier non signé]
EmptyTemp:
end::