Posté le 9 novembre 2018
Télécharger | Reposter | Largeur fixe

start::
CreateRestorePoint:
CloseProcesses:
Hosts:
Task: {09D3F116-42F5-4A49-86D2-798965A4A820} - \smadav -> Pas de fichier <==== ATTENTION
Task: {0834C1EF-2D3A-4300-ABBB-590544C1E775} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {4B64F8ED-3754-479D-BD6B-F8D8A6D4F5AA} - \AutoKMS -> Pas de fichier <==== ATTENTION
AlternateDataStreams: C:\Windows:nlsPreferences [386]
HKLM\...\StartupApproved\Run32: => "Multitimer"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\StartupFolder: => "GatewayLayer 1.3957.lnk"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\StartupFolder: => "SysHelp.lnk"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "6BBF.tmp"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "Z33O4326TK6LUHB"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "0MVTI6U7CP1FQSN"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "W08DNQXJ40SVYQY"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "N69O8XSIHMRG99G"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "3TCC87PUDQEBDTT"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "89ATK3BXG26A28Y"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "H0Z9FYNAM5DE6YU"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "4SP9CBOQ17QCPB9"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "PYVO235BTLQL06O"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "AB1RV8ZDKRNGT8U"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "F9O609ETS767SM1"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "NGI1T7FRVHFOYET"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "PC2GVCFTVJDD8BO"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "6J43F4T2S28FWFX"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "ZIBSUGYKPI0K2CU"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "UQD8U8DGUXFKKFM"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "909410"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "Chameleon Explorer"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "Chameleon Folder"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "481748"
HKU\S-1-5-21-1097757772-340121013-3820232409-1001\...\StartupApproved\Run: => "H5QS7Q99CT7UB4R"
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - Pas de fichier
defaultProfile=default
[non trouvé(e)] <==== ATTENTION
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [Pas de fichier]
2018-10-25 13:35 - 2018-10-25 15:31 - 000000000 ____D C:\Users\U\AppData\Roaming\ojiae3ij4hm
2018-10-25 13:35 - 2018-10-25 15:31 - 000000000 ____D C:\Users\U\AppData\Roaming\13epq4xxysp
2018-10-25 08:10 - 2018-10-25 21:26 - 000000000 ____D C:\Users\U\AppData\Roaming\qvfuxiufm4d
2018-10-25 08:10 - 2018-10-25 21:26 - 000000000 ____D C:\Users\U\AppData\Roaming\grunsu5qp0u
2018-10-24 23:16 - 2018-10-25 21:26 - 000000000 ____D C:\Users\U\AppData\Roaming\zrskbuz0nlc
2018-10-24 23:16 - 2018-10-25 21:26 - 000000000 ____D C:\Users\U\AppData\Roaming\vt3fpoxzylc
2018-10-24 22:31 - 2018-10-25 21:26 - 000000000 ____D C:\Users\U\AppData\Roaming\qn0knz03zkc
2018-10-24 22:31 - 2018-10-25 21:26 - 000000000 ____D C:\Users\U\AppData\Roaming\0iy5yxmdw4u
RemoveProxy:
EmptyTemp:
cmd: ipconfig /flushdns
end::




x
Éditer le texte

Merci d'entrer le mot de passe que vous avez indiqué à la création du texte.

x
Télécharger le texte

Merci de choisir le format du fichier à télécharger.