Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
Hosts:
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
C:\Program Files\AVAST Software
C:\Users\Béné\AppData\Roaming\AVAST Software
C:\ProgramData\AVAST Software
AS: Spybot - Search and Destroy (Enabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
C:\Program Files (x86)\Spybot - Search & Destroy 2
C:\ProgramData\Spybot - Search & Destroy
S3 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [X]
S2 McAfee WebAdvisor; "C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe" [X]
S4 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\2.7.371.0\\McCSPServiceHost.exe" [X]
Task: C:\WINDOWS\Tasks\WpsExternal_20161111081738.job => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe
Task: C:\WINDOWS\Tasks\WpsKtpcntrQingTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exeÃqing 10.1.0.5644 xxx server_url=hxxp:/kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html ic_server_url=hxxp:/info.kingsoftstore.com/wpsv6internet/infos.ads
Task: {4A7EB67B-BC64-4A4A-AEC4-E71DA0DAA755} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileCoAuthLib64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2145466140-3452336332-101936254-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll => Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ContextMenuHandlers1_S-1-5-21-2145466140-3452336332-101936254-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ContextMenuHandlers4_S-1-5-21-2145466140-3452336332-101936254-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
ContextMenuHandlers5_S-1-5-21-2145466140-3452336332-101936254-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\Béné\AppData\Local\Microsoft\OneDrive\19.012.0121.0009\amd64\FileSyncShell64.dll -> Pas de fichier
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp:
End::