start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
GroupPolicy: Restriction ? <==== ATTENTION
Task: {6571B8FA-1FF6-4C46-B8CF-60D355555EBD} - System32\Tasks\Application Starter - a965484ee40c132e7f474125a6556835 => d:\Program Files (x86)\Innovative Solutions\DriverMax\innostp.exe
Task: {CAC73662-BDC0-4F99-93F1-8C88EC2B0059} - System32\Tasks\KMS_VL_ALL => C:\Users\Alex [Argument = Multima\Downloads\Microsoft Office Professional Plus VL 2019 - 1812 Build 11126.20196\MOFFProPVL2019-(Build 16.0.11126.20196)\Activators\Activator N°2\KMS_VL_ALL.cmd]
Task: {EE654E22-134D-4071-9D50-6288D4557A32} - System32\Tasks\LYkp7JlnQZvq => lykp7jlnqzvq.exe 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
FF Extension: (iGraal) - C:\Users\Alex Multima\AppData\Roaming\Mozilla\Firefox\Profiles\f1krvchj.default-1540218966027\Extensions\{dbac9680-d559-4cd4-9765-059879e8c467}.xpi
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKU\S-1-5-21-217668269-1365677631-279688912-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kphondbfkocnmbigbmfbkeefeoacnlad]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
2020-06-07 23:32 - 2019-06-11 01:37 - 000003534 _____ C:\WINDOWS\system32\Tasks\KMS_VL_ALL
2020-05-28 23:25 - 2019-06-09 01:25 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-02-05 23:37 - 2019-02-05 23:38 - 003307904 _____ () C:\Users\Alex Multima\ZHPCleaner.exe
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> Pas de fichier
AlternateDataStreams: C:\Users\Alex Multima\Downloads\cpu-z_1.92-en.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\dotNetFx45_Full_setup.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\Err_6.4.5.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\imgburn_2-5-8-0_fr_25151.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\MediaCreationTool2004.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\NDP452-KB2901954-Web.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\NDP46-KB3045560-Web.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\NDP47-KB3186500-Web.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\NDP472-KB4054531-Web.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\ndp48-web.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\Downloads\SetupDiag (1).exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Alex Multima\AppData\Local\Temp:$DATA&#8203; [16]
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [183]
AlternateDataStreams: C:\ProgramData\TEMP:B755D674 [136]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [468]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
MSCONFIG\Services: dnscrypt-proxy => 2
MSCONFIG\Services: MBAMService => 3
HKLM\...\StartupApproved\Run32: => "QuickTime Task"
HKU\S-1-5-21-217668269-1365677631-279688912-1000\...\StartupApproved\Run: => "uTorrent"
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset^
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
end::