start::
closeprocesses:
createrestorepoint:
ContextMenuHandlers1: [BtSendToMenuEx] -> {CF24E6B8-F148-4BCB-9108-ADF313966E80} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
HKU\S-1-5-21-4258261313-3406214919-4065699344-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION
IE trusted site: HKU\S-1-5-21-4258261313-3406214919-4065699344-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-4258261313-3406214919-4065699344-1001\...\webcompanion.com -> hxxp://webcompanion.com
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-4258261313-3406214919-4065699344-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
S3 ALSysIO; \??\C:\Users\ASUS\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
U0 msahci; system32\drivers\msahci.sys [X]
emptytemp:
end::