Start::
CloseProcesses:
CreateRestorePoint:
Task: {A9152534-8C42-4601-AD65-5FCA20BC0256} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {F04F40DC-2A72-4D1D-9537-F684E05F667E} - System32\Tasks\Yahoo! Powered nanot => C:\WINDOWS\system32\wscript.exe "C:\ProgramData\{DC251946-5667-9380-D0A1-0DC24AE3860C}\tale.txt" "68747470733a2f2f7761676e672e636f6d" "433a5c50726f6772616d446174615c7b44433235313934362d353636372d393338302d443041312d3044433234414533383630437d5c7265726f6361" "433a5c50726f6772616d446174615c7b44433235313934362d353636372d393338302d4430 (l'élément de données a 80 caractères en plus). <==== ATTENTION
Task: C:\WINDOWS\Tasks\Yahoo! Powered nanot.job => Wscript.exe C:\ProgramData\{DC251946-5667-9380-D0A1-0DC24AE3860C}\tale.txt <==== ATTENTION
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2742837749-3031634644-2557208709-1001\...\Run: [Chromium] => c:\users\olivi\appdata\local\chromium\application\chrome.exe [828416 2017-01-21] (The Chromium Authors)
SearchScopes: HKU\S-1-5-21-2742837749-3031634644-2557208709-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\58227437.js [2018-01-09] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\58227437.cfg [2018-01-09] <==== ATTENTION
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - <pas de Path/update_url>
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - <pas de Path/update_url>
CHR HKU\S-1-5-21-2742837749-3031634644-2557208709-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - <pas de Path/update_url>
CHR HKU\S-1-5-21-2742837749-3031634644-2557208709-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - <pas de Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - <pas de Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - <pas de Path/update_url>
2018-01-10 17:04 - 2018-01-10 17:04 - 008198432 _____ (Malwarebytes) C:\Users\olivi\Downloads\adwcleaner_7.0.6.0.exe
2018-01-10 17:09 - 2016-11-10 21:51 - 000000000 ____D C:\AdwCleaner
2018-01-09 02:07 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2018-01-09 02:07 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
CMD: ipconfig /flushdns
Emptytemp:
Hosts:
RemoveProxy:
End::