start::
closeprocesses:
createrestorepoint:
CustomCLSID: HKU\S-1-5-21-3704804311-4028973939-2822636786-1001_Classes\CLSID\{cece6816-6107-4dc7-bdbc-20cd5ae1ffed}\localserver32 -> C:\ProgramData\Lenovo\ImController\Plugins\LenovoAppPromotionPlugin\x64\DesktopToastsHelper.exe => Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
virustotal: C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbPc.DLL
FirewallRules: [{B892E18E-B116-4F2F-8E81-37FFBB33F594}] => (Allow) C:\Users\insom\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup\Data\ENEasyApp.exe Pas de fichier
FirewallRules: [{9E49679E-ED0C-4D1F-9C69-980232F70AC3}] => (Allow) C:\Users\insom\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\EpsonNetSetup\Data\ENEasyApp.exe Pas de fichier
Task: {44C0EF07-44A2-429C-B112-704A2D667B2D} - System32\Tasks\App Explorer => C:\Users\insom\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe <==== ATTENTION
Task: {7AE92471-0237-46B6-8C64-1A50E37DA578} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
HKU\S-1-5-21-3704804311-4028973939-2822636786-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10341__170106__yaie
HKU\S-1-5-21-3704804311-4028973939-2822636786-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01222020210222480\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10341__170106__yaie
FF Plugin: @videolan.org/vlc,version=3.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
C:\Users\insom\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
CHR HKU\S-1-5-21-3704804311-4028973939-2822636786-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]
CHR HKU\S-1-5-21-3704804311-4028973939-2822636786-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-01222020210222480\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
emptytemp:
end::