start::
closeprocesses:
createrestorepoint:
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2866845789-1485822235-2609752156-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2866845789-1485822235-2609752156-1001\...\webcompanion.com -> hxxp://webcompanion.com
FirewallRules: [TCP Query User{6781DE1A-A1EF-416E-BE75-D16010CCC876}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe Pas de fichier
FirewallRules: [UDP Query User{DF42C82E-26DB-4801-98A9-F870A599C9AA}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe Pas de fichier
FirewallRules: [TCP Query User{46FDABEA-1F42-4431-95B8-1C1BC5FA2E7D}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe Pas de fichier
FirewallRules: [UDP Query User{2BA9CA53-5365-44AB-9F88-CD0648C68106}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe Pas de fichier
FirewallRules: [{CA884D85-180C-4A81-8FA5-FA7015E98BE9}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe Pas de fichier
FirewallRules: [{11C807D7-00DE-4161-861D-F0D4986F37F7}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe Pas de fichier
FirewallRules: [TCP Query User{86B5A912-2A92-42D6-8D95-B72241925946}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe Pas de fichier
FirewallRules: [UDP Query User{95B13FBB-DA0C-4203-8A9A-DBD12A78C35C}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe Pas de fichier
rewallRules: [{9F5E09C4-D19B-471D-AC14-DE8B128761D6}] => (Allow) D:\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe Pas de fichier
FirewallRules: [{9404794B-327F-4466-935F-AD4A3331E428}] => (Allow) D:\Steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe Pas de fichier
FirewallRules: [TCP Query User{2A71A7CB-11B8-4B80-8A1D-E0A175BD290E}D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe Pas de fichier
FirewallRules: [UDP Query User{2ECE5D53-BB8F-49BB-B66E-B45394AC16EE}D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe Pas de fichier
FirewallRules: [{C89769FA-34A5-4D8C-A0C8-10059EDB8715}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Pas de fichier
FirewallRules: [{7D5E6946-2455-4DB2-A59D-C34DF787DEC6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Pas de fichier
FirewallRules: [TCP Query User{EA29CE4E-E050-4DE7-A26B-5576B07C89BA}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe Pas de fichier
FirewallRules: [UDP Query User{982885D9-A229-494D-A1FA-2C9DDBCE33A7}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.192\deploy\leagueclient.exe Pas de fichier
FirewallRules: [TCP Query User{6E442666-41BD-43B0-8B6D-65F00C4073D8}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe Pas de fichier
FirewallRules: [UDP Query User{EB3E3EDB-2A8D-4737-B432-786D8AC02E79}C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe] => (Allow) C:\riot games\league of legends\rads\projects\league_client\releases\0.0.0.193\deploy\leagueclient.exe Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2019-01-13] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0mlmk3ua.default\searchplugins\bing-lavasoft-ff59.xml [2019-05-14]
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2019-01-13] (Sun Microsystems, Inc.) [Fichier non signé]
S3 NTIOLib_CC_Clock; \??\C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [X]
S3 NTIOLib_CC_COMM; \??\C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [X]
S3 NTIOLib_CC_CPU; \??\C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [X]
S3 NTIOLib_CC_SMB; \??\C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [X]
S3 NTIOLib_CC_SuperIO; \??\C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [X]
S3 WEBNTACCESS; \??\C:\Program Files (x86)\MSI\Live Update 3\NTACCESS.SYS [X]
C:\Program Files (x86)\MSI\Command Center
2019-05-14 04:28 - 2019-05-14 04:28 - 000000000 ____D C:\Users\Admin\AppData\Local\Lavasoft
2019-05-14 04:28 - 2019-05-14 04:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2019-05-14 04:28 - 2019-05-14 04:28 - 000000000 ____D C:\ProgramData\Lavasoft
2019-05-14 04:28 - 2019-05-14 04:28 - 000000000 ____D C:\Program Files (x86)\Lavasoft
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
emptytemp:
end::