start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
EmptyTemp:
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4054416210-3421417669-509179019-1000 -> {8961B60E-97E3-4533-811A-BA55681FB908} URL = hxxp://query.monconvertisseur.com/s?source=
FF user.js: detected! => C:\Users\Henri\AppData\Roaming\K-Meleon\3cznv2bs.default\user.js
2019-03-01 17:05 - 2019-03-01 17:05 - 000000000 ____D C:\ProgramData\Lavasoft
HKLM-x32\...\Run: [KernelSys32M] => C:\Msc\csrss.exe [4129216 2019-02-26] (Daniel Monteiro -> )
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
cmd: ipconfig /flushdns
end::