start::
CreateRestorePoint:
CloseProcesses:
CHR StartupUrls: Default -> "hxxp://google.fr/","hxxp://start.mysearchdial.com/?f=1&a=telemsd1103&cd=2XzuyEtN2Y1L1QzuyC0CyCtByC0DyBtAyE0DtB0CtAtA0EtCtN0D0Tzu0CyBtDtDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=891101029&ir=","about:blank"
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) <==== ATTENTION (pas de ServiceDLL)
AlternateDataStreams: C:\ProgramData\TEMP:58D8F144 [116]
AlternateDataStreams: C:\Users\Max\Desktop\carte grise.jpeg:3or4kl4x13tuuug3Byamue2s4b [89]
AlternateDataStreams: C:\Users\Max\Desktop\carte grise.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Max\Downloads\CyberGhost_6.0.7.2738.exe:BDU [0]
AlternateDataStreams: C:\Users\Max\Downloads\HMA-Pro-VPN-3.4.6.1-install.exe:BDU [0]
AlternateDataStreams: C:\Users\Max\Downloads\torbrowser-install-7.0.1_en-US.exe:BDU [0]
AlternateDataStreams: C:\Users\Max\Documents\ar.jpeg:3or4kl4x13tuuug3Byamue2s4b [89]
AlternateDataStreams: C:\Users\Max\Documents\ar.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Max\Documents\attestation de salaire.jpeg:3or4kl4x13tuuug3Byamue2s4b [89]
AlternateDataStreams: C:\Users\Max\Documents\attestation de salaire.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Max\Documents\courrier.jpeg:3or4kl4x13tuuug3Byamue2s4b [89]
AlternateDataStreams: C:\Users\Max\Documents\courrier.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
EmptyTemp:
End::