start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
Task: {38B7421F-ECA5-43B1-924A-BA471372FAF3} - System32\Tasks\SpyHunter4 => C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [2017-12-24] (Enigma Software Group USA, LLC.)
C:\Program Files\Enigma Software Group
C:\Windows\Tasks\SpyHunter4.job
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [njpedbdniajflhgfoipnjkednnlkngbj] - hxxps://clients2.google.com/service/update2/crx
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2017-12-24] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2017-12-24] ()
2017-12-24 13:47 - 2017-12-24 13:50 - 000000392 _____ C:\Windows\Tasks\SpyHunter4.job
2017-12-24 13:47 - 2017-12-24 13:47 - 000003214 _____ C:\Windows\System32\Tasks\SpyHunter4
2017-12-24 10:40 - 2017-12-24 10:40 - 000001094 _____ C:\Users\Yvan\Desktop\SpyHunter.lnk
2017-12-24 10:40 - 2017-12-24 10:40 - 000000000 ____D C:\Users\Yvan\AppData\Roaming\Enigma Software Group
2017-12-24 10:40 - 2017-12-24 10:40 - 000000000 ____D C:\sh4ldr
2017-12-24 10:39 - 2017-12-24 10:39 - 000022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2017-12-24 10:38 - 2017-12-24 10:38 - 000000000 ____D C:\Program Files\Enigma Software Group
2017-12-23 18:01 - 2017-12-23 11:27 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\Yvan\AppData\Local\Temp\EsgInstallerResumeAction_5618b9ca69eec88e719112da87672fda.exe
cmd: ipconfig /flushdns
end::