Start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
AlternateDataStreams: C:\ProgramData\TEMP:F35A93AD [318]
AlternateDataStreams: C:\Users\Eric\Documents\certificat de scolarité.jpeg:3or4kl4x13tuuug3Byamue2s4b [81]
AlternateDataStreams: C:\Users\Eric\Documents\certificat de scolarité.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
Task: {4C73D99B-3B7E-451A-9FB0-C684636E1C23} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2018-03-29]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.717\SSScheduler.exe (McAfee, Inc. -> McAfee, Inc.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
BHO: Pas de nom -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Pas de fichier
BHO-x32: Pas de nom -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Pas de fichier
Toolbar: HKLM - Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
Toolbar: HKLM-x32 - Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
S3 AscFileControl; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileControl.sys [X]
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X]
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X]
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.717\McCHSvc.exe [405392 2018-03-27] (McAfee, Inc. -> McAfee, Inc.)
VirusTotal: C:\Users\Eric\ZHPSuite.exe
2020-05-17 10:10 - 2020-05-17 10:11 - 000000983 _____ C:\Users\Eric\Desktop\ZHPFix.txt
2020-05-17 09:50 - 2020-05-17 09:50 - 003436416 _____ (Nicolas Coolman) C:\Users\Eric\ZHPSuite.exe
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-05-13 19:45 - 2020-05-13 19:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-05-12 15:49 - 2020-05-17 10:01 - 000508245 _____ C:\Users\Eric\Desktop\ZHPDiag.html
2020-05-12 15:43 - 2020-05-20 08:59 - 000000913 _____ C:\Users\Eric\Desktop\ZHPSuite.lnk
2020-05-12 15:30 - 2020-05-17 10:01 - 000416791 _____ C:\Users\Eric\Desktop\ZHPDiag.txt
2020-05-12 15:27 - 2020-05-12 15:28 - 003280768 _____ (Nicolas Coolman) C:\Users\Eric\Downloads\ZHPDiag3 (1).exe
2020-05-12 12:19 - 2020-05-12 12:19 - 003304320 _____ C:\Users\Eric\Downloads\ZHPCleaner-2019.exe
2020-05-12 12:14 - 2020-05-12 12:14 - 008196784 _____ (Malwarebytes) C:\Users\Eric\Desktop\adwcleaner_8.0.4.exe
2020-05-12 12:13 - 2020-05-12 12:13 - 003302272 _____ C:\Users\Eric\Downloads\zhpcleaner_2019.1.17.9.exe
2020-05-20 08:59 - 2018-11-21 12:45 - 000000000 ____D C:\Users\Eric\AppData\Roaming\ZHP
2020-05-13 09:32 - 2018-11-21 12:45 - 000000923 _____ C:\Users\Eric\Desktop\ZHPCleaner.lnk
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
cmd: ipconfig /flushdns
CMD: netsh advfirewall reset
end::