start::
CreateRestorePoint:
CloseProcesses:
Hosts:
AlternateDataStreams: C:\ProgramData\Microsoft:avQuy9FAU8wwUSDh5UqPB [1996]
AlternateDataStreams: C:\ProgramData\Microsoft:FWblCNbCi87KP7rBSCs4o3mLRckL [2098]
AlternateDataStreams: C:\ProgramData\Microsoft:karuDn0WdZMelQr3pdPTkloaU [2008]
AlternateDataStreams: C:\ProgramData\Microsoft:PGstEad4ftkQWieZOPsxNG8GnUy [2280]
AlternateDataStreams: C:\ProgramData\Microsoft:VI4r2DSozjQkBeFC5IWxiRTa [2264]
AlternateDataStreams: C:\Users\Tantrys\Cookies:PVyRym1iF8tWlFCg [2128]
AlternateDataStreams: C:\Users\Tantrys\Cookies:Vs7PjOy4B8ZpmkpV4A [2128]
AlternateDataStreams: C:\Users\Tantrys\Cookies:YguBS2EGZTgojuNHID7amHSlp [1994]
AlternateDataStreams: C:\Users\Tantrys\AppData\Local\ntAGDllF9Lqr1:gwHgYhP5xBp3zk09lP4dNCI [2072]
AlternateDataStreams: C:\Users\Tantrys\AppData\Local\Temporary Internet Files:8ckJRgT9AGzAPojFHm4 [2172]
IE trusted site: HKU\S-1-5-21-2063579094-3486216118-3878143166-1000\...\sharepoint.com -> hxxps://acrennesfr-files.sharepoint.com
GroupPolicy: Restriction ? <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {00F0237D-BD56-43D2-973D-5EAF9CD304A8} - System32\Tasks\Thalepharck Reports => C:\Program Files (x86)\Thalepharck\Thlrprtask.exe <==== ATTENTION
Task: {D3C16E9E-1B96-45D5-AF3E-89D036CB4568} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
FF HKLM\...\Firefox\Extensions: [light_plugin_F363A72DD7B6435783A76E5F612C9006@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e)
CHR Profile: C:\Users\Tantrys\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2019-09-09] <==== ATTENTION
CHR HKU\S-1-5-21-2063579094-3486216118-3878143166-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [amkpcclbbgegoafihnpgomddadjhcadd] - hxxps://chrome.google.com/webstore/detail/amkpcclbbgegoafihnpgomddadjhcadd
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 ma-config_amd64; \??\C:\Program Files\DriversCloud.com\Drivers\ma-config_amd64.sys [X]
S3 mewingwxing; \??\C:\Windows\system32\mewingwxing.sys [X]
EmptyTemp:
cmd: ipconfig /flushdns
end::